how to turn off ?wsdl, ?list?, ?method etc. (axis)

[Rik Sha]

Hi,

I am looking for an answer to this question for 3 days now... but did not get any break through. Looked at the axis-user mailinglist and JavaRanch forums also, but did not get working solution.

I found following in the reference guide, I tried it but that also didnt go through.

"By default, Axis provides for three Axis servlet query string handlers (?list, ?method, and ?wsdl). See the Axis server configuration file for their definitions. If the user wishes not to use these default query string handlers (as in the example), a <parameter> element with a name attribute equal to "useDefaultQueryStrings" should have its value attribute set to false. By default it is set to true and the element is not necessary if the user wishes to have this default behavior."


So, any one who has a working solution to this, please help.

Thanks a lot in advance.

Regards,
Rik
[ July 13, 2004: Message edited by: Rik Sha ]

[Balaji Loganathan]

Originally posted by Rik Sha:
I found following in the reference guide, I tried it but that also didnt go through.

Welcome to Javaranch!..
Where do you read that, can you give the link please?
Truning off ?wsdl is not a good idea., its affect dynamic discovery and invocation from other clients.

[Rik Sha]

Hi,

on this page http://ws.apache.org/axis/java/reference.html .... under "Deployment (WSDD) Reference" topic, read the paragraph on "<transport name="name">"

Apart from that I would like to turn off WSDL cause, the server application is supposed to support only static client. And also not to allow unauthorized parties to find out how the WSDL looks like.
[ July 16, 2004: Message edited by: Rik Sha ]

[James Clinton]

If security is a concern, maybe you should look into signing and encrypting the document which is building a API on the WS-Security standards recently ratified by OASIS.

See apache project WSS4J.

[Balaji Loganathan]

Originally posted by Rik Sha:
Hi,

on this page http://ws.apache.org/axis/java/reference.html .... under "Deployment (WSDD) Reference" topic, read the paragraph on "<transport name="name">"

Apart from that I would like to turn off WSDL cause, the server application is supposed to support only static client. And also not to allow unauthorized parties to find out how the WSDL looks like.

[ July 16, 2004: Message edited by: Rik Sha ]

Well.. i tried to set this <parameter name="useDefaultQueryStrings" value="false"/> both locally and globally in Apache axis, but its not hiding the wsdl/list/method ... Guess its a bug!..

[Rik Sha]

Originally posted by Balaji Loganathan:


Well.. i tried to set this <parameter name="useDefaultQueryStrings" value="false"/> both locally and globally in Apache axis, but its not hiding the wsdl/list/method ... Guess its a bug!..

Thanks a lot Balaji and James.

So I guess, I will not be able to turn off wsdl/list/method.....