Is it possible to use Basic Authentication for the CMDBuild Web Services (createCard, getCard or updateCard)? I know the Web Services are WSS Password Digest by default but can they be configured to use just Basic Authentication? Both CMDBuild and the other application for the integration are internal, so Basic Authentication is all we need. We are using CMDBuild 2.2.0 (upgraded today) and PostgreSQL 9.3.4.
If possible to enable a text authetication. To just have to:
1. stop tomcat
2. open the file ${cmdbuild_webapp}/WEB-INF/classes/org/cmdbuild/soapws-r1.xml
2. remove the comment marked as "Fix for non-standard webservice clients" that adds a new bean to the xml:
<ref bean="addDefaultNamespaceInterceptor"/>
3. restart tomcat
Best regards,
the CMDBuild team
I made the change you said but I still have to select 'WSS-Password Type'="PasswordText" while testing in SoapUI. Is it possible where this choice can be 'WSS-PasswordType'="None" and the web service will still work? We really don't need the authetication at all because these are internal applications (can I turn authetication completely off?). The reason I ask is because I have to write the call to cmdbuild wsdl in groovy (JIRA is the application calling the wsdl). I have been looking for days and can't find out how to generate the wsse security information needed for the soap Header (for example, the Username Token, the Nonce information, etc) on the call using groovy. Without this header, I am unable to access the cmdbuild wsdl. Any help would be greatly appriecated. Thanks!
Hi,
unfortunately you can't access without authenticating to CMDBuild.
Best regards,
the CMDBuild team