You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-user@axis.apache.org by ae...@rbc.com on 2005/05/06 15:04:42 UTC
Re: Turning off ?wsdl feature
I looked at historic mails as I remember someone asking how to turn off the ?wsdl feature. All I could find was a reference to some article that no longer exists.
Can someone please explain how to turn this feature off.
Thanks.
__________________________________________________________________________________________________________________________________
This e-mail may be privileged and/or confidential, and the sender does not waive any related rights and obligations.
Any distribution, use or copying of this e-mail or the information it contains by other than an intended recipient is unauthorized.
If you received this e-mail in error, please advise me (by return e-mail or otherwise) immediately.
Ce courrier électronique est confidentiel et protégé. L'expéditeur ne renonce pas aux droits et obligations qui s'y rapportent.
Toute diffusion, utilisation ou copie de ce message ou des renseignements qu'il contient par une personne autre que le (les) destinataire(s) désigné(s) est interdite.
Si vous recevez ce courrier électronique par erreur, veuillez m'en aviser immédiatement, par retour de courrier électronique ou par un autre moyen.
Re: Turning off ?wsdl feature
Posted by Davanum Srinivas <da...@gmail.com>.
Please take a look at QSListHandler and QSWSDLHandler code
-- dims
On 5/6/05, Tim K. (Gmane) <tk...@ugcs.net> wrote:
> I wanted to do the same and more, e.g. prevent listing all the services
> and their methods when you go to the servlet's mount point, prevent
> requests to the AdminService, etc. At least for some of the cases there
> are global configuration options in Axis, but it didn't seem to work,
> see this bug that I filed:
>
> http://issues.apache.org/jira/browse/AXIS-1932
>
> So I gave up on global configuration properties and instead wrote a
> simple servlet filter that checks there are no query parameters and
> getPathInfo() is not null and it's among a list of services that I know
> are deployed by me (I want to also prevent the AdminService from being
> invoked). In other words just allow the minimum required services, for
> security reasons.
>
> I think this is the best way to do it, it gives you full control over
> what requests you want to allow and what you want to deny.
>
> Tim
>
>
> Jeff Greif wrote:
>
> > Here's a way that's not too pretty:
> >
> > You can specify a <wsdlFile>some-filename</wsdlFile> option in your
> > deployment descriptor, which is used to satisfy the ?wsdl suffix to
> > the URL of the relevant service. You could either have no file at the
> > specified location (which would probably cause an exception in Axis
> > and an 404 HTTP status returned to the client) or you could provide a
> > file the contents of which were a message to the effect of "Sorry, no
> > wsdl provided for this service."
> >
> > Jeff
> >
> > aedemar.cooke@rbc.com wrote:
> >
> >> I looked at historic mails as I remember someone asking how to turn
> >> off the ?wsdl feature. All I could find was a reference to some
> >> article that no longer exists.
> >> Can someone please explain how to turn this feature off.
> >>
> >>
> >>
> >
> >
>
>
--
Davanum Srinivas - http://webservices.apache.org/~dims/
Re: Turning off ?wsdl feature
Posted by "Tim K. (Gmane)" <tk...@ugcs.net>.
I wanted to do the same and more, e.g. prevent listing all the services
and their methods when you go to the servlet's mount point, prevent
requests to the AdminService, etc. At least for some of the cases there
are global configuration options in Axis, but it didn't seem to work,
see this bug that I filed:
http://issues.apache.org/jira/browse/AXIS-1932
So I gave up on global configuration properties and instead wrote a
simple servlet filter that checks there are no query parameters and
getPathInfo() is not null and it's among a list of services that I know
are deployed by me (I want to also prevent the AdminService from being
invoked). In other words just allow the minimum required services, for
security reasons.
I think this is the best way to do it, it gives you full control over
what requests you want to allow and what you want to deny.
Tim
Jeff Greif wrote:
> Here's a way that's not too pretty:
>
> You can specify a <wsdlFile>some-filename</wsdlFile> option in your
> deployment descriptor, which is used to satisfy the ?wsdl suffix to
> the URL of the relevant service. You could either have no file at the
> specified location (which would probably cause an exception in Axis
> and an 404 HTTP status returned to the client) or you could provide a
> file the contents of which were a message to the effect of "Sorry, no
> wsdl provided for this service."
>
> Jeff
>
> aedemar.cooke@rbc.com wrote:
>
>> I looked at historic mails as I remember someone asking how to turn
>> off the ?wsdl feature. All I could find was a reference to some
>> article that no longer exists.
>> Can someone please explain how to turn this feature off.
>>
>>
>>
>
>
Re: Turning off ?wsdl feature
Posted by Davanum Srinivas <da...@gmail.com>.
see org.apache.axis.transport.http.QSWSDLHandler.java. you can write
your own wsdl handler and stick into the transport (in
server-config.wsdd)
-- dims
On 5/6/05, Jeff Greif <jg...@alumni.princeton.edu> wrote:
> Here's a way that's not too pretty:
>
> You can specify a <wsdlFile>some-filename</wsdlFile> option in your
> deployment descriptor, which is used to satisfy the ?wsdl suffix to the
> URL of the relevant service. You could either have no file at the
> specified location (which would probably cause an exception in Axis and
> an 404 HTTP status returned to the client) or you could provide a file
> the contents of which were a message to the effect of "Sorry, no wsdl
> provided for this service."
>
> Jeff
>
> aedemar.cooke@rbc.com wrote:
>
> >I looked at historic mails as I remember someone asking how to turn off the ?wsdl feature. All I could find was a reference to some article that no longer exists.
> >
> >Can someone please explain how to turn this feature off.
> >
> >
> >
>
>
--
Davanum Srinivas - http://webservices.apache.org/~dims/
Re: Turning off ?wsdl feature
Posted by Jeff Greif <jg...@alumni.princeton.edu>.
Here's a way that's not too pretty:
You can specify a <wsdlFile>some-filename</wsdlFile> option in your
deployment descriptor, which is used to satisfy the ?wsdl suffix to the
URL of the relevant service. You could either have no file at the
specified location (which would probably cause an exception in Axis and
an 404 HTTP status returned to the client) or you could provide a file
the contents of which were a message to the effect of "Sorry, no wsdl
provided for this service."
Jeff
aedemar.cooke@rbc.com wrote:
>I looked at historic mails as I remember someone asking how to turn off the ?wsdl feature. All I could find was a reference to some article that no longer exists.
>
>Can someone please explain how to turn this feature off.
>
>
>