Basic Auth and business services

Hi,
I have enabled "Basic Authentication" for a http based proxy service(a restful web service implementation of http methods).
In the proxy service flow I am trying to print and extract the username/password from $inbound/*:transport/*:request/*:headers/*:Authorizationson so that I can form a SOAP Header with wsse tokens for calling a back-end secured web service using a business service.But I found nothing out of $inbound/*:transport/*:request/*:headers/*:Authorizationson"
Is this something possible or is there another right way of doing this.
Thanks,
Prabu

Hi,
Please check the below link
Re: Accessing Portal component without login screen
hope is solve your problem.
Raghu

Similar Messages

Difference between Business system and Business service.

Hi All,
Can any one explain in detail difference between Business system and Business service.
As we commonly say, Business service is for those system which are not in our landscape.
Can any one explain in which particular scenarios we will go for Business Service.
Reg
Bapuraj

Hi Bapuraj,
Business System
Business system is a logical system, and there is an importance on physical existence of the system.Also SLD entry is required.
It is generally used for SAP applications, this is just a general prinicple followed but not mandatory.
Business Component(formerly Service)
You use a Business Component, when you do not have the System details of the the partner system to which you want to communicate. i.e. you have not configured the partner system in SLD.
Business Service is an Absract Unit with Sender and Receiver Interfaces,In this case you need to explicitly add the message interfaces while doing configuration in ID.
It is generally used for NON-SAP applications, this is just a general prinicple followed but not mandatory.
<REMOVED BY MODERATOR>
<LINKS CAN BE SEARCHED FOR BASIC QUESTIONS>
-santosh.
Edited by: Prateek Raj Srivastava on Jan 12, 2012 10:01 PM

Security between Proxy and Business Services

Dear All
We are trying to restrict business service access only through proxy services. Will outbound security using service accounts can do this task? I enabled basic authentication at business service level and tried to pass username/password token through soap header in proxy service. I get "The invocation resulted in an error: Unauthorized." error.
Please suggest if this is the correct approach.
Thanks,
Amjad.

I'm affraid you didn't get the very basic meaning of business service.
>
I want BS1 to be accessed only through PS1 and hence need to secure BS1.
>
1. You don't need to secure BS because of this reason since every BS can be accessed only through PS. There is no way you can call BS outside of OSB. BS is just a definition of external (business) service.
2. Authentication set on BS is not meant to restrict access to BS itself. It is set to use credentials to access some service from OSB (WS1 in your case).
>
When BS1 is directly accessed through OSB console, I get "The invocation resulted in an error: Unauthorized".
>
This is only a testing form. Again, there is no chance you could call BS outside of OSB. On top of that, if you test BS which has pass-through account set, the test fails as there are no credentials to be passed to BS from PS as there was no PS called.
I suggest you go back to OSB basics:
http://docs.oracle.com/cd/E13159_01/osb/docs10gr3/tutorial/tutIntro.html#wp1045005
http://docs.oracle.com/cd/E14571_01/doc.1111/e15020/architecture_overview.htm#i1094753

Business Systems and Business Service - does any difference

Hi Experts,
Could any one please guide me what is the difference between
Business Systems
and
Business Service.
Which situations we use Business Systems / Business Service.
Does it have any performance issues?
Why we are not configuring Business service in SLD?
Cheers Experts!!
Sunil

Hi Sunil,
Business System: Address a particular business system as the sender or receiver of messages.
A business system is an actual application system in a system landscape. A business system
(service) comprises information about the inbound and outbound interfaces and the software
component versions of the business system. The business system services are used when
configuring internal company processes.
Business Systems are Logical Senders or Receivers that exchange messages by using the Integration
Server and that are entered in the System Landscape Directory.
The Business Systems in the System Landscape Directory relate to a system landscape.
The Business Systems of business partners are therefore not entered in the System Landscape
Directory. To be able to address such business partners logically, use communication components in
the Integration Directory. A business system is a way of specifying a communication component in the
Integration Directory more precisely (business system component).
Business Service: Address an abstract business entity as the sender or receiver of messages.
Using a business service, you can define the technical or business subunits of the companies
involved and then assign them the relevant interfaces. The business services are used when
configuring cross-company processes.
In the PCK, the Service is of type Business Service. It represents an abstract, addressable unit.
Business services are used in cross-company processes, for example, if the parties involved have only
published their interfaces and not their system landscape, or it is only partly known.
Using a Business Service,we can define the technical or business subunits of the companies involved
and then assign them the relevant interfaces.
It is useful to use Business Services when configuring cross-company processes. Usually, the
interface descriptions of the business partners involved are made publicly available.
Also,There is already lot of thread regarding the same discussion, please see it below.
Business service or Business system??
Re: Business Service <--> Business System
Difference between Business service, Business system and Business process
Business Service vs Business System in Integration Directory.
Business Service (vs) Business System in Integration Directory.
What is the difference between Business System and Business Service?
business system and business service
Diff b/w Business service & Business System?
Regards,
Vinod.

Parties, Business Systems and Business Services

Hi guys,
I've read a lot about items in subject, but have some doubts about applying them to my scenario. I have to integrate SAP system and web service.
As far as I understand concepts, this is B2B communication, so I have to use parties. To represent SAP system I use Business System, as it's described ins SLD, and for Web service I use Business Service... just as we use business services for web services
--- Am I right here? Will it work ok in reciever determination, agreement?
Thank you.

Hi,
You are doing the usage of business systems and services in proper way.
The scenario will difinately work with combination of business system and service.
It will be fine for all other configurations such as Receiver Determination, Sender/receiver agreements and interface determination etc.
Please see below the importance of Parties, Business Systems and Business Services
A communication party
A communication party (party for short) represents a larger unit, which is involved in a collaborative process. Using a communication party, you generally address a company within a cross-company process.
You can assign a communication party one or more services to address it as the sender or receiver of messages.
A business system
If you want to address a particular business system as the sender or receiver of messages, choose this service type.
A business system is an actual application system in a system landscape. A business system (service) comprises information about the inbound and outbound interfaces and the software component versions of the business system.
You usually use business system services when configuring internal company processes.
A business service
If you want to address an abstract business entity as the sender or receiver of messages, choose this service type.
Using a business service, you can define the technical or business subunits of the companies involved and then assign them the relevant interfaces.
You usually use business services when configuring cross-company processes. In this case, you only make your interfaces known to the business partners involved and either do not make any details about your own system landscape available, or only specific details.
For example, you can define RosettaNet Partner Interface Processes (PIPs) as business services.
Thanks
Swarup

What is the difference between Business System and Business Service?

Hi
Please tell me what is the difference between Business System and Business Service...? In real time at what situation we will use Business System and in what situations we will use Business Service..? Please help me
Best Regards
Ravi Shankar B

HI,
Business system:
If you want to address a particular business system as the sender or receiver of messages, choose this service type.
A business system is an actual application system in a system landscape. A business system (service) comprises information about the inbound and outbound interfaces and the software component versions of the business system.
You usually use business system services when configuring internal company processes.
Business Service:
If you want to address an abstract business entity as the sender or receiver of messages, choose this service type.
Using a business service, you can define the technical or business subunits of the companies involved and then assign them the relevant interfaces.
You usually use business services when configuring cross-company processes. In this case, you only make your interfaces known to the business partners involved and either do not make any details about your own system landscape available, or only specific details.
For example, you can define RosettaNet Partner Interface Processes (PIPs) as business services.
Regards,
Sudheer.

Diff between Business System and Business Service

What is the Difference b/w Business System and Business System and whne we use them?

Hi,
Business System : is a logical entity assigned to a Technical System in a SLD
Business Service: is an Abstract entity without having assigned to a Technical System in a SLD
for more:
Business System: http://help.sap.com/saphelp_nw70/helpdata/en/42/c817d9d2296bb2e10000000a1553f6/content.htm
Business Service: http://help.sap.com/saphelp_nw70/helpdata/en/c7/301640033ae569e10000000a155106/content.htm
Also,There is already lot of thread regarding the same discussion, please see it below.
Business service or Business system??
Re: Business Service <--> Business System
Difference between Business service, Business system and Business process
Business Service vs Business System in Integration Directory.
Business Service (vs) Business System in Integration Directory.
What is the difference between Business System and Business Service?
business system and business service
Diff b/w Business service & Business System?
Regards
Aashish Sinha
PS : reward points if helpful

Regarding Business System and Business Service

Hello,
What is the difference between the Business system and Business service. When do we go for what? Which system we will take as business system or business service means either sender system or reciever system.
Give me with simple example... please
Thank you

hi,
What is the difference between the Business system and Business service.?
Business System is a logical representation of a Technical System.
Business System: BS is a conceptual representation of a logical system, such as a specific client on a SAP server or a 3rd party payroll application.
For defining Business Systems, the four important pieces of data are:
u2022Business System Name (must be unique in the landscape)
u2022Associated Technical system name, and if the Business System will be used with IDoc interfaces, a Logical System Name
u2022The Software Products (and associated SWCVu2019s) that are used by the Business System. The products are brought through from the Technical System definition; but for a particular Technical System, not all products will necessarily be associated with a particular Business System.
u2022The Related Integration Server.
A Business System addresses a business system as a sender or receiver of messages. Unlike an abstract service, a business system represents a specific (application) system in the system landscape. A business system (service) comprises information about the inbound and outbound interfaces and the software component versions of the business system.
Business Service is a abstract representation of a System. For instance, www.google.com have a several system working together and IPs of this machines change eventually. When we use a Business Services like google we reference a computer that we don't know the phisical implementation
Business Service: Address an abstract business entity as the sender or receiver of messages.Using a business service, you can define the technical or business subunits of the companiesinvolved and then assign them the relevant interfaces. The business services are used whenconfiguring cross-company processes.
Which system we will take as business system or business service means either sender system or reciever system
Business system and business service can either be a sender or receiver...
business systesm is an application system which is a real system..business service is an abstract entity...we send requests using webservices for them....
thanks,
vijaya

Differentiate b/w Technical System, Business System and Business Service

Hi all,
I'm new to XI. I was asked two questions. Any one answer the following, plzz.
a) Difference between Business System and Business Service
b) Difference between Technical System and Business System

Hello Gopi,
a) Business System is a logical representation of a Technical System.
Business Service is a abstract representation of a System. For instance, www.google.com have a several system working together and IPs of this machines change eventually. When we use a Business Services like google we reference a computer that we don't know the phisical implementation.
b) Technical system is a phisical machine, it have a IP. Can be a BBDD, ERP, J2EE ......... a Business System is a logical term that we use into the Business Scenarios and represent these Technical System that we had created.
Hope it's help you
Best Regards
Iván Prieto

Need Java API's to create OSB proxy and Business Services

Hi All,
I need to create OSB proxy and business services using Java API's. Does any one have reference to the OSB APIs??

AFAIK it is proprietary.
What I do in a similar situation is to form XML for the services, package them into JAR the same way as an import JAR is packaged (creating ExportInfo resource, ...) and deploy with standard WSLT script. Works for simplest services only (direct proxies mostly) but I can also form security, alerts, throttling etc etc etc -- all in one shot.
Out of sheer interest, may I ask you a question? Why do you need to create OSB services from Java?
Vlad
http://vladimirdyuzhev.com

HTTP Basic Auth and Proxy Auth

Hi,
i have a problem with the authentication against a proxy server and against a content provider. At first I have to authenticate against the proxy to get "free internet". The next step is to authenticate against the content provider to get a html or xml file.
The following source code runs very good in Eclipse, i.e. as JUnitTest. But If I execute the same code within a weblogic server, I will get an error (not authenticated). I believe I get this message from the content provider and not from the proxy because If I test this code within the weblogic server and with no authentication (i.e. google needs no authentication), I will get a valide xml/html file.
StringBuffer sb = new StringBuffer();
          SimpleAuthenticator simple = new SimpleAuthenticator("joeuser","a.b.C.D"); //from openbook
          Authenticator.setDefault(simple);
          String strUrl = "http://www.rahul.net/joeuser/";
          URL url = null;
          try {
               url = new URL(strUrl);
          } catch (MalformedURLException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          URLConnection conn = null;
          InetSocketAddress addr = new InetSocketAddress("proxy.domain",8080);
          Proxy proxy = new Proxy(Proxy.Type.HTTP, addr);
          try {
               conn = url.openConnection(proxy);
          } catch (IOException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          String proxyStr = "username" + ":" + "passwordl";
          String encoded = new String(Base64.encodeBase64(proxyStr.getBytes()));
          conn.setRequestProperty("Proxy-Authorization", "Basic " + encoded);
          // get http status code which is located in header field 0
          String status = conn.getHeaderField(0);
          if (status.contains("200")) {
               BufferedReader in = null;
               try {
                    in = new BufferedReader(new InputStreamReader(conn.getInputStream(),
                              "ISO-8859-1"));
                    String inputLine;
                    while ((inputLine = in.readLine()) != null) {
                         sb.append(inputLine);
                    in.close();
               } catch (UnsupportedEncodingException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
               } catch (IOException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
          else {
               System.out.println("Error");
          System.out.println(sb.toString());
public class SimpleAuthenticator
extends Authenticator
     private String username,
     password;
     public SimpleAuthenticator(String username,String password)
          this.username = username;
          this.password = password;
     protected PasswordAuthentication getPasswordAuthentication()
          return new PasswordAuthentication(
                    username,password.toCharArray());
Does somebody know a solution? I need the authentication against proxy and content provider in "one application".
Thank you very much,
André

I typically have used Apache Commons HttpClient for anything but trivial URL connections, and especially when combining both basic auth and proxy auth. When you use it, be aware of the "preemptive authentication" flag. One server I worked with didn't send the correct parameters back on particular requests, so I had to turn on this flag to get it to work.

Basic auth and MSIE

Hi,
I'm using basic auth and used to send username/password with
the URL to authenticate from another webserver (with some other
kind of authentication), but - as you know - Microsoft doesn't
support that any longer and so this works for some other
webclients but not for IE (or only with a patch, that isn't installed
everywhere).
Now I have seen that for Apache there is a module called
mod_auth_cookie to fake that kind of implicit authentification.
My Question: has anybody done this for SJWS or can't that
be done?
TIA
Reinfried

Hi,
Please check the below link
Re: Accessing Portal component without login screen
hope is solve your problem.
Raghu

Editing proxy and business service security with WLST

My customer wants to manage the OSB with WLST as much as possible. I'm wondering if it is possible to handle the security and policies on proxy and business service with WLST.
Any ideas or links to documenation are welcome.
Thanks!

I think you can do this. Please refer - http://docs.oracle.com/cd/E14571_01/core.1111/e10043/wlstcmds.htm#CHDGHDFJ
But not sure of how much flexibility you will get with WLST. I will recommend using OWSM that is specifically used for similar activities for the soa suite.
Please refer - http://docs.oracle.com/cd/E21764_01/web.1111/e13713/owsm_appendix.htm & http://docs.oracle.com/cd/E21764_01/doc.1111/e15866/owsm.htm for more details.
Thanks,
Patrick

HTTP Basic Auth and Username Authentication with Symmetric Key

Hi,
I have a webservice happily running on tomcat 5.5 using "Username Authentication with Symmetric Key" I have certificates setup and everything works fine. I can even connect a .net client and use the service.
Now I have an additional requirement of authorization per operation basis so I'm planning on using the roles. My current setup uses tomcat-users.xml to configure users but I seem unable to identify the role of the user from within my code as wsContext.isUserInRole("briefing") always returns false even when it clearly isn't. Where wsContext = @Resource private WebServiceContext wsContext.
So I figure perhaps I need to add HTTP Basic Auth to tomcat for it to gather this information so I added security-constraints to the web.xml and this seems to do the trick: at least it does for my .net client.
If I do:
Service service = new Service();
Port client = service.getPort();
BindingProvider bp = (BindingProvider)client;
bp.getRequestContext().put(BindingProvider.USERNAME_PROPERTY, "myusername");
bp.getRequestContext().put(BindingProvider.PASSWORD_PROPERTY, "mypassword");Then it all works fine. However, I'd like a little less transparency: I don't want to have to do this every time I make a call.
My question(s) is:
1) Am I going about this the right way (perhaps I am somehow getting the incorrect reference to the WebServiceContext)
2) If I am going about this the right way I imagine the whole BindingProvider code needs to be added to as a policy configuration but I'm really not sure where to start especially as I'm using wsimport to generate everything: I'm not even sure where to configure this so it will not get overwritter.
Thanks for any help.

Doh! Ok So I've added a SOAP Handler to automatically add the username and password for the HTTP Basic Auth.
All in all does this setup sound right?

Difference between Business System and Business Service in ID

There are some tiny little doubts for a newbie which usually appear and we don't really have the answer.
We know that sometimes we two ways to implement a process, and it works for the two ways, but we not always understand why.
This was one of my doubts, what was the great difference between a Business System and a Business Service...?
Of course I had a tiny little idea but now I have the answer and maybe it will be useful to anyone who questioned about it...
A Business System is defined in the SLD and is used as sender and receiver in the ID. However in some cases, the details of the implementing application are not available(in a B2B communication, where the system belongs to a different company. A Business Service represents an abstract entity for adressing the senders and receivers of messages. Therefore, when using Business Servces, it is no longer necessary to define any Business Systems in the SLD.

Hi Goncalo,
one important difference is that a business service has no SLD entries and so also no assigned products/SWCVs. So the configuration in IB Directory can become uncomfortable if there a lot interfaces.
Regards,
Udo

Basic Auth and business services

Similar Messages

Maybe you are looking for