Issue with -Xauthfile execution in wsimport tool(JAX-RI)

[Niranjana Sr]

Hello developers,

I am facing one issue while trying to execute wsimport tool.

command is

wsimport -Xendorsed -keep -Xauthfile authFile.txt -httpproxy:server1-05.ad.com:8080 -p com.xerox.open -s D:\generated -d D:\generated http://server1-05.ad.com/metrojunction1/test/AddNumbersService?wsdl

and I have provided following values in authFile.txt
http://igor:[e-mail]//metrojunction1/test/AddNumbersService

Error message as folows.

[ERROR] Server returned HTTP response code: 401 for URL: http://server1-05.ad.com/metrojunction1/test/AddNumbersService?wsdl, "http://server1-05.ad.com/metrojunction1/test/AddNumbersService?wsdl" needs authorization, please provide authorization file with read access at C:\Documents and Settings\niranjan\.metro\auth or use -Xauthfile to give the authorization file and on each line provide authorization information using this format : http[s]://user:password@host:port//<url-path>

Searched a lot in internet but of no help.
if anyone has already faced similar issue, and if fix be posted here will be very helpful.

thanks,
Niranjan

[Ivan Krizsan]

Hi!
My guess is that the web.xml deployment descriptor of the web service is not properly configured.
One should specify POST in the <http-method> element, as in the example below, not GET.
If you specify POST, then only requests sent to the service will require login and password. Requests for the WSDL, that use GET, will not require authentication.

Fragment from a web.xml deployment descriptor in which the security constraints for a web service has been specified:
... <security-constraint> <display-name>SecurityConstraint</display-name> <web-resource-collection> <web-resource-name>Secure Area</web-resource-name> <url-pattern>/HelloWorldWSService</url-pattern> <!-- JSR-109 specifies that http-method POST must be used. If we include GET here, access to the WSDL will also be protected, otherwise not. --> <http-method>POST</http-method> </web-resource-collection> <!-- Here we specify which roles can access the web service. --> <auth-constraint> <role-name>user</role-name> </auth-constraint> </security-constraint> ...
Best wishes!