Connection bundle properties

The connection bundle specifies the connection and security properties for SOAP Gateway when it communicates with IMS Connect.

The connection bundle properties refer to the location and other parameters that are required for creating a TCP/IP socket connection to IMS. In this case, SOAP Gateway is the client, and IMS Connect is the TCP/IP server.

These connection properties are in a connection bundle XML file. The connection bundle XML file contains all of the connection bundle entries for the server. You can create as many connection bundle entries as needed. However, each web service can be associated with only one connection bundle entry at a time, and a connection bundle entry name must be specified in the correlator file for that web service.

Important: Use the SOAP Gateway management utility to create, inquire, modify, or delete the connection bundle entries. Manual creation or modification can result in unexpected errors.

Each connection bundle entry consists of the following connection and security properties:

Connection bundle name: A name to identify this connection bundle entry, or set of connection properties.
IMS Connect hostname: The name or IP address of the host system where IMS Connect is running.
IMS Connect port number: The port number of IMS Connect.
IMS Connect data store ID: The name of the target IMS data store. The ID must match the ID parameter of the data store statement that is specified in the IMS Connect configuration member. It also serves as the XCF member name for IMS during internal XCF communications between IMS Connect and IMS OTMA.
IMS RACF user ID: The security authorization facility (SAF) user name to use for the connection to IMS. When WS-Security is disabled, SOAP Gateway passes this user ID to IMS Connect for authentication.
IMS RACF password: The security authorization facility (SAF) password to use for the connection to IMS. When WS-Security is disabled, SOAP Gateway passes this user password to IMS Connect for authentication.
IMS RACF group name: The security authorization facility (SAF) group name to use for the connection to IMS.

The following optional properties can be specified for SSL connections based on Java™ keystore (JKS) to support the web service provider scenario, where SOAP Gateway is the client to IMS Connect.

Important: Leave these properties blank if you are using IBM® z/OS® Communications Server AT-TLS feature to secure the connection between SOAP Gateway and IMS Connect. Specifying JKS SSL properties in AT-TLS environment will cause SSL handshake to fail.

SSL keystore name: Specifies the fully qualified path name of the keystore in which trusted certificates and private keys are stored.
SSL keystore password: Specifies the password for the keystore. The password length must be 6 - 20 alphanumeric characters.
SSL truststore name: Specifies the fully qualified path name of the truststore in which trusted certificates are stored.
SSL truststore password: Specifies the password of the truststore in which trusted certificates are stored. The password length must be 6 - 20 alphanumeric characters.
SSL encryption level: Specifies the encryption type. A value of Strong indicates that a strong cipher suite needs to be used. A value of Weak indicates that a weak cipher suite needs to be used. A value of None indicates that no encryption is used. The None encryption level is used only for authentication.

The following properties support the IMS applications as web service consumers (callout) scenario.

SOAP Gateway callout basic authentication user ID: Specifies the user ID to send to the server that hosts the web service for basic authentication.
SOAP Gateway callout basic authentication password: Specifies the password, for the user ID to send to the server that hosts the web service for basic authentication.
SOAP Gateway callout truststore name: Specifies the fully qualified path name of the truststore on SOAP Gateway that stores the certificates of trusted external web service servers. Required for client or server authentication.
SOAP Gateway callout truststore password: Specifies the password of the truststore on SOAP Gateway in which trusted external web service server certificates are stored.
SOAP Gateway callout keystore name: Specifies the fully qualified path name of the keystore on SOAP Gateway that stores the trusted client certificates for a callout application to authenticate with a target web service. Required for client authentication.
SOAP Gateway callout keystore password: Specifies the password of the keystore on SOAP Gateway. Required for client authentication.
Callout TPIPE names: An element for storing tpipe names that are associated with the connection bundle. This property is used by SOAP Gateway to open a connection to the comma-separated list of tpipes in order to pull messages for the callout function.