Secure the Service Locator SOAP Service - Talend v5.2 features

Subscribe to the Talend Channel!

In this video, learn how to secure the Service Locator SOAP Service.

Download Talend's solutions: http://www.talend.com/download.php?sr...

---

Closed Caption:

it one of the last screen costs I show
2002 secure access to the Service
Locator
when using the Java cloud but if you run
the service okay just so
Forest Service access to these are still
on security
this sec cost about running a secured
service locator
I will show you how to enable
authentication for the soap serves
a simple configuration whiny miss you
beauty in I first installed
the service locator SOAP service
my runtime: by the way
I already started to service locator
richest issue and points too so it's
okay to before
to have some sample data for the day
more later by installing do a disservice
will get a SOAP service
I also created a corresponding
consideration file
22c directory of told ESP
locator service config if you open the
file
you will find
some you security related properties
the most important one dislocated dot
educational
which but useful to set no
authentication
if you require authentication
you may choose between supple in case
you're running in STS
and otherwise use and into I wish use
username token
and set the value to
token for the property's policy dots to
and policy to somewhat usually there
should be no need to change them
it points to the corresponding policy
definitions which pic of
Catholic crafted by the development team
ws-security related policies
I'll irrelevant if you choose some bull
for more information how to come
together
consult the infrastructure services in
case if username tofu
the service locator SOAP service uses
draws interface to verify the user
credentials
by default it uses caressed Ross context
which is the default context when she
got the talent run to contain
and uses properties login modules of
corals
to slug bug you use issues as properties
fired
which is located DTC directory
and which contains a list of users and a
possible its
heads the user to authenticate with the
service okay just soap service
should be listed here like for example
the T
user your to tout
activate might use it security settings
I was first uninstall by locating a SOAP
service
and then install it again to apply the
new properties
to shut out
that the SOAP service can only be
accessed by providing the correct
username possible so
I prepared some requests for soap UI all
week let's look up
all available at points for this year
and service of the rent-a-car Sehome the
first one
as a REIT rest
was out any security information I have
sent its
to the service I get back to Salt
which complaints that the token the
username token Zara
is sick I prepared a second request
very similar to the first one but which
now
includes username token information the
soap opera
the user name is to Apple
the partial list yet well and when i
send its
to the to the service
we see now that we get
a response back was that yet point
a wrister before I was noticed
yeah change the user that it is and no
and send it again the request and now I
get a
assault again complaining
that the security token I ascend could
not be authenticated
authorize so the screen cause I showed
you how to enforce
oughtn't cation for the service locator
SOAP service a support operation
securing the rest service is currently a
bit more involved
but in one of the next versions we will
provide simply configuration settings
for rest
like it just showed you for so