Weblogic security - ajax web service

[clyles]

Has anyone created a ajax WebService, then deployed your application within Weblogic and allowed for an unauthenticated user to access that service?

We have developed an application that includes several security constraints that provide access to areas of the app for authenticated users. But, now I would like for someone (anyone) to access a URL without being authenticated.

Within the web.xml, I've created a security constraint that that I assumed would allow anyone access:

This configuration works locally, but not when deployed to the dev server.

    
<security-constraint>
   <web-resource-collection>
      <web-resource-name>My Web Service</web-resource-name>
      <url-pattern>/services/*</url-pattern>
      <http-method>GET</http-method>
       <http-method>POST</http-method>
   </web-resource-collection>
</security-constraint>

I've even tried providing an auth-constraint:

<security-constraint>
   <web-resource-collection>
      <web-resource-name>My Web Service</web-resource-name>
      <url-pattern>/services/*</url-pattern>
      <http-method>GET</http-method>
       <http-method>POST</http-method>
   </web-resource-collection>
   [B]<auth-constraint>
      <role-name>*</role-name>
    </auth-constraint>[/B]
</security-constraint>

When I try to access the URL: http://localhost:8080/services/MyService, I get an error stating: faultString: org.xml.sax.SAXParseException: White spaces are required between publicId and systemId.

But, if I log in to the application then use that URL, I'm able to see the available webservices.

How do I get around the authentication??

Thanks!

[Peer Reynders]

Welcome to JavaRanch "WhyMe",

Please check your private messages.

[Scott Selikoff]

"clyles"

Your name still does not conform to the JavaRanch Naming Policy. Please review the policy and update it appropriately. This is your second warning.

Scott Selikoff