Re: Authorizing users in Axis

2004-11-18 Thread Vinay Punnoose
The access control and username/passwd details are maintained in perms.lst and users.lst located in axis\WEB-INF folder. Typical entries in perms.lst are as follows: user1 WebserviceName1 user2 WebserviceName2 The users.lst would contain entries something like this user1 password1 user2 p

RE: Authorizing users in Axis

2004-11-18 Thread Hittesdorf,Michael
Title: RE: Authorizing users in Axis In general, I think you should steer away from passing credentials in each and every method. A good design pattern is to authenticate your end user using some 'security service' that, if authentication succeeds, would produce a token that would

Authorizing users in Axis

2004-11-18 Thread Sharam Fouladgar-Mercer
Hi,   As an Axis newbie, I am trying to figure out how to authorize users who should be accessing a certain method of my Web Service. Are there any standards out there that I should follow? Other than using the components of WS-Security (which are too new for my liking), I can only think