Configuring custom properties to secure web services

You can configure name-value pairs of data, where the name is a property key and the value is a string value that you can use to set internal system configuration properties. Defining a new property enables you to configure a setting beyond that which is available through options in the administrative console.

• Set custom properties for Java API for XML-based RPC (JAX-RPC) applications.
  You can set custom properties to secure Web services for JAX-RPC applications in multiple locations within the administrative console. You can set these custom properties for the default consumer, default generator, or both bindings. Also, you can set custom properties as general additional properties. Collectively, the default consumer bindings, the default generator bindings, and the additional properties are referred to as the default bindings.

  • Custom bindings
    1. Expand Applications > Application Types.
    2. Click WebSphere enterprise applications > application_name.
    3. Under Modules, click Manage Modules > module_name.
    4. Under Web Services Security Properties, click Web services: Server security bindings or Web services: Client security bindings > Edit custom.
  • Default consumer bindings
    1. Expand Servers > Server types.
    2. Click WebSphere applications servers > server_name.
    3. Under Security, click JAX-WS and JAX-RPC security runtime.
    4. Under JAX-RPC Default Consumer Bindings, click Properties.
  • Default generator bindings
    1. Expand Servers > Server types.
    2. Click WebSphere applications servers > server_name.
    3. Under Security, click JAX-WS and JAX-RPC security runtime.
    4. Under JAX-RPC Default Generator Bindings, click Properties.
  • Additional properties
    1. Expand Servers > Server types.
    2. Click WebSphere applications servers > server_name.
    3. Under Security, click JAX-WS and JAX-RPC security runtime.
    4. Under Custom properties, click Custom properties.

  Order of precedence for custom properties with JAX-RPC applications: Custom properties that you set in the WS-Security extension and custom bindings take precedence over custom properties that you set in the default bindings. Custom properties that you set in the WS-Security bindings take precedence over custom properties that you set in the WS-Security extension. Custom properties that you set in the generator or sender and consumer or receiver bindings take precedence over custom properties that you set in the additional properties.
• Set custom properties for Java API for XML-Based Web Services (JAX-WS) applications.
  You can set custom properties to secure web services for JAX-WS applications in multiple locations within the administrative console. You can set these custom properties in the custom bindings for an application, in the WS-Security default bindings, or for inbound and outbound messages.

  • Custom bindings for an application
    1. Expand Services > Service clients or Services > Service providers.
    2. Click service_name > binding_name.
    3. Click WS-Security.
    4. Under the Main message security policy bindings heading, click Custom properties.
  • WS-Security default bindings
    1. Expand Services > Policy sets .
    2. Click General provider policy set bindings or General client policy set bindings > binding_name > WS-Security.
    3. Under Main Message Security Policy Bindings, click Custom properties.
  • Inbound and outbound custom properties
    1. Expand Services > Policy sets.
    2. Click Default policy set bindings.
    3. Under the Policy heading, click WS-Security.
    4. Under the Main message security policy bindings heading, click Custom properties.
    For more information, see the Inbound and outbound custom properties topic.

  Alternatively, you can set these properties as parameters or inbound binding properties for your JAX-WS application using wsadmin scripting. The following WS-Security policy type property names are used in the setBinding function:

  • application.parameters
  • application.securityinboundbindingconfig.properties
  • application.securityoutboundbindingconfig.properties

  Note: Custom properties for policy set bindings can not be set using the Web Services Security API. The custom properties must be set using the administrative console.