Skip to content

Integration with SOAP services

Jump to bottom
Kamil Jarmusik edited this page Mar 23, 2023 · 7 revisions

1. In version 2.7.4.1 there will be a security corrected for SOAP services:

  • Access to the endpoint from wsdl is available without logged: /services/API?wsdl
  • Access to service operations requires Basic Auth, via Https.
  • A special soap-services user will be created with access only to SOAP services, you cannot login to the Application with it, user is disabled by default; (username: soap-services, default password: soap-services);

2. Integrate with SOAP services:

2.1. You need to generate the keys:

  1. Login to the user system on which you want to launch tomcat with the application, and execute the command there: (if keytool not installed go to JAVA_HOME/bin, keytool included with the JRE)

keytool -genkey -alias tomcat -keyalg RSA -storepass your_password -keypass your_password -dname 'CN=Scada-LTS;O=Scada-LTS;OU=Scada-LTS'

This command will create a file in home directory logged user: .keystore

2.2. Next, you need to update the tomcat configuration with https communication, for this purpose, in file:

CATALINA_HOME/conf/server.xml you need to add an additional connector in tag:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="${user.home}/.keystore" keystorePass="your_password"
compression="on"/>

2.3. The third step is to enable the soap-services user, for this you need to log in to the Admin, go to the "Users" tab, find "soap-services" and uncheck the "disabled" box and then click "save".

3. Use SOAP services:

Address: https://localhost:8443/Scada-LTS/services/API?wsdl

The default password for soap-services user can be changed after logging in to the administrator, in the Users tab, find the soap-services user, enter the new password in the password field and click "save".

soap

Clone this wiki locally