How to invoke a WS with authentication?

[Dario Rehman]

I am trying to invoke a WS that requires HTTP authentication.
Is this the correct way to do it?
When I invoke the WS I don't get any error on my client side, but for some reason, my call is not reaching the destination.

Thanks.

public void invokeWS(MyObject obj) {
MyWSServiceLocator wsl = new MyWSServiceLocator();
 
MyWS ws;
try {
ws = wsl.getMyWS_outPort();
MyWS_outBindingStub stub = new MyWS_outBindingStub();
stub._setProperty(javax.xml.rpc.Stub.USERNAME_PROPERTY , "user");
stub._setProperty(javax.xml.rpc.Stub.PASSWORD_PROPERTY, "pass");
 
ws.sendObj(obj);
} catch (ServiceException e) {
// TODO Auto-generated catch block
e.printStackTrace();
} catch (RemoteException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}

[Peer Reynders]

HTTP BASIC-AUTH is most commonly used with https (Secured Sockets Layer/Transport Layer Security; SSL/TLS). With http anybody with access to a router could sniff out the username/password being transmitted in plain text. Could a protocol mismatch be the problem?

See also: Web service URL fails with 'https', not 'http'

Originally posted by Dario Rehman:
but for some reason, my call is not reaching the destination.

Is there a firewall/proxy between you and your destination - you may require a separate username/password for those (though that would usually generate an HTTP error)?

See also: getting exception while invoking service from client on another system

[Dario Rehman]

There is a proxy between my application and the destination but I don't think that is the problem since I can use the web service with the WS Test application SOAPUI.

Originally posted by Peer Reynders:
HTTP BASIC-AUTH is most commonly used with https (Secured Sockets Layer/Transport Layer Security; SSL/TLS). With http anybody with access to a router could sniff out the username/password being transmitted in plain text. Could a protocol mismatch be the problem?

See also: Web service URL fails with 'https', not 'http'




Is there a firewall/proxy between you and your destination - you may require a separate username/password for those (though that would usually generate an HTTP error)?

See also: getting exception while invoking service from client on another system

[Peer Reynders]

Originally posted by Dario Rehman:
I can use the web service with the WS Test application SOAPUI.

If that is the case AND you are NOT using https then capture the HTTP/SOAP request from SOAPUI and then from your Java client with TCPMon (Tutorial). The differences between the two HTTP/SOAP requests may provide you with a clue of what is going wrong.

[sasank ch]

Hi you can actually try appending the username and password as querystring and give a try:

example with either http or https:

https://localhost/WebService&UserName=ADMIN&Password=ADMIN

if it is https , you must register the certificate with "cacerts"

C:\Program Files\Java\jre1.5.0\lib\security\carcerts using keytool which is found in bin


Regards,
sasank.

[Ulf Dittmer]

Originally posted by sasank ch:
Hi you can actually try appending the username and password as querystring and give a try:

https://localhost/WebService&UserName=ADMIN&Password=ADMIN

This will not work in general, because neither BASIC AUTH nor WS-Security Authentication work this way. Only a WS that is especially developed to take its parameters from the URL might allow this, and from the code posted above it seems clear that that is not the case here.

[Dario Rehman]

Originally posted by Peer Reynders:


If that is the case AND you are NOT using https then capture the HTTP/SOAP request from SOAPUI and then from your Java client with TCPMon (Tutorial). The differences between the two HTTP/SOAP requests may provide you with a clue of what is going wrong.

I couldn't get tcpmon to work so I am using WireShark instead.
I noticed that my client is using HTTP 1.0 while SOAPUI uses HTTP 1.1.
Could this be the reason why it is failing? How can I change the HTTP to 1.1 in Axis? (I am using JBoss and Eclipse 3.2)

Thanks

[Dario Rehman]

By looking closer at the tcp output stream I think it is an authentication problem. See the '401 Unauthorized error below'.

My question is how can I set the authentication over HTTP?
In my web service call do I have to set anything besides these lines?

stub._setProperty(javax.xml.rpc.Stub.USERNAME_PROPERTY , "user");
stub._setProperty(javax.xml.rpc.Stub.PASSWORD_PROPERTY, "pass");

TCP output stream:

POST /XISOAPAdapter/MessageServlet?channel=  :p  SP:SenderChannel_SOAP_AnexosCartoes&version=3.0&Sender.Service=x&Interface=x%5Ex HTTP/1.0
Content-Type: text/xml; charset=utf-8
Accept: application/soap+xml, application/dime, multipart/related, text/*
User-Agent: Axis/1.3
Host: 172.16.107.120:50100
Cache-Control: no-cache
Pragma: no-cache
SOAPAction: "http://sap.com/xi/WebService/soap1.1"
Content-Length: 1186
 
<?xml version="1.0" encoding="UTF-8"?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
 xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<soapenv:Body><Cartoes xmlns="http://incm.pt/xi/PSP/Anexos"><ParteComum xmlns=""><NumProcesso>1</NumProcesso><TipoProduto>01</TipoProduto>
<CategoriaDocumento>001</CategoriaDocumento><NivelServico>N</NivelServico><Nome>
Nome</Nome><Morada1>Morada1</Morada1><Morada2>Morada2</Morada2>
<Localidade>Localidade</Localidade><CodigoPostal>Código Postal</CodigoPostal><Pais>País</Pais>
<Apartado>Apartado</Apartado><ApartadoDireccao>Apartado Direcção</ApartadoDireccao><ApartadoCodigoPostal>Apartado Código Postal</ApartadoCodigoPostal></ParteComum>
<Campo xmlns="">99X99999-00</Campo><Campo xmlns="">BI</Campo><Campo xmlns="">Emissão</Campo><Campo xmlns="">Nome</Campo><Campo xmlns="">Data de co</Campo><Campo xmlns="">Data de va</Campo>
<Fotografia xmlns=""></Fotografia><AssinaturaTitular xmlns=""></AssinaturaTitular><Quadro xmlns=""><Linha><Linha>aaaa-mm-dd</Linha><Linha>aaaa-mm-dd</Linha>
</Linha></Quadro></Cartoes></soapenv:Body></soapenv:Envelope>HTTP/1.1 401 Unauthorized
Connection: close
WWW-Authenticate: Basic realm="XISOAPApps"
Pragma: no-cache
Cache-Control: no-cache
Expires: 0
Content-Type: text/html
Content-Length: 1787
Server: SAP J2EE Engine/7.00
Date: Mon, 12 Nov 2007 17:44:16 GMT
 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
 <title>Error Report</title>
<style>
td {font-family : Arial, Tahoma, Helvetica, sans-serif; font-size : 14px;}
A:link {color : #0059AA;}
A:visited {color : #999999;}
A:active {color : #999999;}
</style>
</head>
<body marginwidth="0" marginheight="0" leftmargin="0" topmargin="0" rightmargin="0">
<table width="100%" cellspacing="0" cellpadding="0" border="0" align="left" height="75">
<tr bgcolor="#FFFFFF">
    <td align="left" colspan="2" height="48"><font face="Arial, Verdana, Helvetica" size="4" color="#666666"><b>  401   Unauthorized</b></font></td>
</tr>
<tr bgcolor="#3F73A3">
    <td height="23" width="84"><img width=1 height=1 border=0 alt=""></td>
    <td height="23"><img width=1 height=1 border=0 alt=""></td>
    <td align="right" height="23"><font face="Arial, Verdana, Helvetica" size="2" color="#FFFFFF"><b>SAP J2EE Engine/7.00 </b></font></td>
</tr>
<tr bgcolor="#9DCDFD">
    <td height="4" colspan="3"><img width=1 height=1 border=0 alt=""></td>
</tr>
</table>
<br><br><br><br><br><br>
<table width="100%" cellspacing="0" cellpadding="0" border="0" align="left" height="75">
<tr bgcolor="#FFFFFF">
    <td align="left" colspan="2" height="48"><font face="Arial, Verdana, Helvetica" size="3" color="#000000"><b>  No login module succeeded.</b></font></td>
</tr>
<tr bgcolor="#FFFFFF">
    <td align="left" valign="top" height="48"><font face="Arial, Verdana, Helvetica" size="2" color="#000000"><b>  Details:</b></font></td>
    <td align="left" valign="top" height="48"><font face="Arial, Verdana, Helvetica" size="3" color="#000000"><pre>  No details available</pre></font></td>
</tr>
</body>
</html>

[ November 12, 2007: Message edited by: Ulf Dittmer ]

[Dario Rehman]

Problem solved! Thanks for the help.

For reference, the problem was with the authentication code.

For basic authentication with HTTP the credentials should be set in the org.apache.axis.client.Call object, and not in the stub object as I was doing.

When using the Web Services Client generator in Eclipse the following code should be added to the bindingStub generated class, before the call invoke.


_call.setProperty(org.apache.axis.client.Call.USERNAME_PROPERTY, "user");
_call.setProperty(org.apache.axis.client.Call.PASSWORD_PROPERTY , "password");