| Author |
Message
|
| kenward |
 Posted: Thu Mar 08, 2012 5:52 am Post subject: How to provide ldap credentials with a SOAPRequest node |
 |
|
Apprentice
Joined: 01 Jun 2010
Posts: 41
Location: Detroit, MI
|
We have the following scenario (all v7 brokers):
Broker A is hosting a web service (SOAPInput) that is using an LDAP profile and default policies for authentication and authorization.
Broker B has a flow that needs to call Broker A's web service (SOAPRequest).
How do I provide the LDAP credentials that Broker A needs with a SOAPrequest node? |
|
| Back to top |
|
 |
| lancelotlinc |
| Posted: Thu Mar 08, 2012 6:00 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
|
| Back to top |
|
|
| kenward |
| Posted: Thu Mar 08, 2012 6:11 am Post subject: |
|
|
Apprentice
Joined: 01 Jun 2010
Posts: 41
Location: Detroit, MI
|
I'm not following. Are you suggesting that a SecurityPEP node goes before the SOAPRequest node?
Broker B:
SecurityPEPNode -> SOAPRequest
Broker A:
SOAPInput (with LDAP profile and WS-Security default policies) |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Thu Mar 08, 2012 6:20 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
I'm suggesting you need to spend more time reading, studying and going to class.
Have you taken the WM663 class?
What version of V7 are you on? Significant bug fixes impact LDAP on V7. You would do well to be on 7.0.0.4 (out in April).
Don't post broad questions here. Read, try, then post a specific question about a specific problem you are having.
What does your user trace show?
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Mar 08, 2012 6:38 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| kenward wrote: |
| I'm not following. Are you suggesting that a SecurityPEP node goes before the SOAPRequest node? |
I'm not follwing either. I'd start here and use this to configure Broker B to use the credentials Broker A is expecting.
The way I find easiest to visualise this is to treat Broker A as any other web service (i.e. ignore the fact it's hosted on WMB) and configure as I would if it was WAS, WESB, etc.
Other methods undoubtably exist and may be better.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Mar 08, 2012 6:55 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| So you need to look at Identity and propagation, because that's what your SOAPRequest flow is trying to do - propagate an identity to the web service provider. |
|
| Back to top |
|
|
| kenward |
| Posted: Thu Mar 08, 2012 8:05 am Post subject: |
|
|
Apprentice
Joined: 01 Jun 2010
Posts: 41
Location: Detroit, MI
|
|
| Back to top |
|
|
|
|
