HPOS 4.0 technical note 3

HP Web Services for Output Server 2
Using HP Web Services for Output Server
Security
Example
& is used as &
< is used as &lt;
> is used as &gt;
is used as &quot;
‘ is used as &#39;
Security
HP Web Services for Output Server provides basic authentication based on the JAAS framework. You need to create
and configure login modules to authenticate the users for HP Web Services for Output Server. By default,
authentication is set to false.You can change authentication to true in the wsg.properties files located at
DAZEL_HOME/share/server/default/conf to authenticate users with a login and password at the Web
Services for Output Server level. You must redeploy Web Services for Output Server after making changes to the
wsg.properties file.
Once authentication is set to true, you must specify the login module that will be used to authenticate the users.
Login modules are defined in DAZEL_HOME/share/server/default/conf/login-config.xml file.
A sample entry of the login-config.xml file is as follows:
<application-policy name="WSGRealm">
<authentication>
<login-module code="org.jboss.security.auth.spi.LdapLoginModule"
flag="required">
<module-option
name="java.naming.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</module
-option>
<module-option
name="java.naming.provider.url">ldap://localhost:389/</module-option>
<module-option
name="java.naming.security.authentication">simple</module-option>
<module-option name="principalDNPrefix">CN=</module-option>
<module-option name="principalDNSuffix">,o=HP,c=IN</module-option>
<module-option name="rolesCtxDN">CN=Roles,o=HP,c=IN</module-option>
<module-option name="roleAttributeID">memberOf</module-option>
<!--<module-option name="uidAttributeID">member</module-option> -->
<module-option name="roleAttributeIsDN">false</module-option>
<module-option name="roleNameAttributeID">name</module-option>
<!--<module-option name="allowEmptyPasswords">false</module-option>
<module-option name="matchOnUserDN">true</module-option> -->
</login-module>
</authentication>
</application-policy>
You must specify WSGRealm as the value for the LOGIN_MODULE_NAME in the wsg.properties file.
The following example illustrates how to pass credentials and submit a job in a single session.
URL endpoint = new URL("http://"+<ip>+":"+<port> + "/HPOSGateway/HPOS-
Gateway?wsdl");
QName qname = new QName("http://wsg.hpos.om.hp.com/", "HPOSGate-
wayService");