axis-c-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Xiong (JIRA)" <>
Subject [jira] Created: (AXISCPP-971) axis-c engine: Support Basic Authentication of apache2, thus can get username/password pair info directly
Date Fri, 26 May 2006 09:30:29 GMT
axis-c engine: Support Basic Authentication of apache2, thus can get username/password pair
info directly

         Key: AXISCPP-971
     Project: Axis-C++
        Type: Improvement

  Components: Server - Apache module, Server - Engine  
    Versions:  1.6 Beta    
 Environment: Platform:
        Linux fedora 3.0
Axis version:
        Server-side Axis C++ 1.6Beta
XML Parser Lib:
xersesc 2.6
WSDL2ws tool by using axis java 1.3
Client-side version Axis java 1.3
Http Server Version:
Apache 2.0.53
Tomcat 2.0.58
    Reporter: Michael Xiong

I'm  developing a web service server module by axis-c  on fc3/apache2 platform.
This server module need to be accessed through basic authentication of apache2(as http standard),
and it internally need to login again to the lower-level legacy privileged system.
But I found that  though axis-c engine can access username/password pair info from apache2(which
checked by mod_auth module first), my server module which interacting with  axis-c engine
can not get username/password directly, because axis-c engine discarded the username/password
info during the communication between apache2 and  my server module.
Thus my server module can not get username/password pair from http basic authentication, which
will cause my server module very difficult to login to the lower-level legacy privileged system.

I've investigated both 1.5final version and 1.6beta version, they all have the same problem.
Because the axis-c engine acting as a bridge between apache2 and my server module, so I think
it's necessary to modify axis-c engine to resolve this problem.

So I'd like to give some improvement to the axis-c engine code of 1.6beta version, so that
any server module can simply get the username/password pair info from IMessageData interface.
The below is my modification for this improvement, please check.(I've verified my code change
on my platform, it works well)
Totally 4 source file need to be modified: 
1. include/axis/IMessageData.hpp
2. src/common/MessageData.h
3. src/engine/server/ServerAxisEngine.cpp
4. src/server/apache2/Apache2Transport.cpp

For detail, pleae refer to below:
IMessageData.hpp: add two public interface:
//<mxiong debug 2006/5/25
	virtual void setPassword(string& m_sPassword) = 0;
	virtual string& getPassword() = 0;
//>mxiong debug 2006/5/25


MessageData.h; implement the added interface which used to access password info:
//<mxiong debug 2006/5/25
    void setPassword(string& sPassword) { m_sPassword = sPassword; }
    string& getPassword() { return m_sPassword; }
    string m_sPassword;
//>mxiong debug 2006/5/25

ServerAxisEngine.cpp: in ServerAxisEngine::process (SOAPTransport * pStream), add some code
as the below:
	    /* populate MessageData with transport information */
	    m_pMsgData->m_Protocol = pStream->getProtocol ();
//<mxiong debug 2006/5/25
	string username;
	if (NULL!=pStream->getTransportProperty("username"))
		username = (string)pStream->getTransportProperty("username");
		username = "";
	string password;
	if (NULL!=pStream->getTransportProperty("password"))
        	password = (string)pStream->getTransportProperty("password");
		password = "";
//>mxiong debug 2006/5/25
	    if (AXIS_SUCCESS != m_pDZ->setInputStream (pStream))

Apache2Transport.cpp: in const char* Apache2Transport::getTransportProperty(const char* pcKey,
bool response), add the below code at the beginning:
//<mxiong debug 2006/5/25
    static const char* USER_NAME = "username";
    static const char* PASSWORD = "password";
    if (!strcmp(USER_NAME, pcKey)) {
        return ((request_rec*)m_pContext)->user;
    } else if (!strcmp(PASSWORD, pcKey)) {
        const char* password = "";
        ap_get_basic_auth_pw((request_rec*)m_pContext, &password);
        return password;
//>mxiong debug 2006/5/25

This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
For more information on JIRA, see:

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message