IBM WebSphere V5.0 Security - CGISecurity

Figure 7-12 XML-SOAP AdminThe service listing shows one service available: urn:ConsultationHelper.The services can be stopped or started under the related links within theXML-SOAP Admin tool.Developing the ITSOBank Web Service clientYou will find a Web Service sample client developed based on the sample clientcode generated by the Web Services wizard.The main code for the sample client came from the results.jsp file; most of thecode was reused from there and modified to fit into the sample application. Thereare only two pages used for the Web Services client sample; you can find themunder the Web module, websvc directory. The query.html file collects the input forthe Web Service invocation in an HTML form; the websvcresult.jsp contains thecode to invoke the Web Service and present the results on the resulting page.For more information, open the files and check the comments in the source.If global security is enabled, the Web Service client will not work as it is, becausethe Web resources for the client (query.html, websvcresult.jsp, rpcrouter) are notsecured, no user authentication is performed, and no credentials are propagatedwhile invoking the service. In order to resolve this problem, you can eitherdisable global security for testing purposes or you can secure the Web resourceslisted previously by following the same process as shown in 7.1.2, “HTTP BasicAuthentication” on page 143.Chapter 7. Securing Enterprise Integration components 137