Basic authentication (BasicAuth)
refers to the user ID and the password of a valid user in the registry
of the target server. You can specify how the server validates the
BasicAuth information.
Before you begin
Important: There is an important distinction between
Version 5.x and Version 6.0.x and later applications.
The information supports Version 5.x applications only that
are used with WebSphere® Application Server Version 6.0.x and
later. The information does not apply to Version 6.0.x and
later applications.
After a request is received that contains
basic authentication information, the server needs to log in to form
a credential. The credential is used for authorization. If the user
ID and the password supplied is invalid, an exception is thrown and
the request ends without invoking the resource.
About this task
Complete the following steps to specify how the server
validates the BasicAuth authentication information:
Procedure
- Launch an assembly tool. For more information,
see the related information on Assembly Tools.
- Switch to the Java™ Platform,
Enterprise Edition (Java EE)
perspective. Click .
- Click .
- Right-click the webservices.xml file,
and click .
- Click the Binding Configurations tab,
which is located at the bottom of the web services editor within an
assembly tool.
- Expand the section.
- Click Edit to view the login mapping
information or click Add to add new login mapping
information. The login mapping dialog is displayed. Select
or enter the following information:
- Authentication method
- Specifies the type of authentication that occurs. Select BasicAuth to
use basic authentication.
- Configuration name
- Specifies the Java Authentication and Authorization
Service (JAAS) login configuration name. For the BasicAuth authentication
method, enter WSLogin for the JAAS login Configuration
name.
- Use token valid type
- Determines if you want to specify a custom token type. For the
default authentication method selections, you do not need to specify
this option.
- Token value type URI and Token value type URI local name
- When you select BasicAuth, you cannot edit the token value type
URI and local name values. Specifies custom authentication types.
For BasicAuth authentication leave these fields blank.
- Callback handler factory class name
- Creates a JAAS CallbackHandler implementation that understands
the following callbacks:
- javax.security.auth.callback.NameCallback
- javax.security.auth.callback.PasswordCallback
- com.ibm.wsspi.wssecurity.auth.callback.BinaryTokenCallback
- com.ibm.wsspi.wssecurity.auth.callback.XMLTokenReceiverCallback
- com.ibm.wsspi.wssecurity.auth.callback.PropertyCallback
- Callback handler factory property name and Callback handler factory
property value
- Specifies callback handler properties for custom callback handler
factory implementations. You do not need to specify any properties
for the default callback handler factory implementation. For BasicAuth,
you do not need to enter any property values.
- Login mapping property name and Login mapping property value
- Specifies properties for a custom login mapping. For the default
implementations including BasicAuth, leave these fields blank.
What to do next
You must specify how the server handles the BasicAuth authentication
method. See the task for configuring the server to handle basic authentication
if you have not previously specified this information.