Configure the server to validate BasicAuth authentication information: WAS v5.1

Configure the server to validate BasicAuth authentication information
BasicAuth refers to the user ID and the password of a valid user in the registry of the target server. Once a request is received that contains basic authentication information, the server needs to log in to form a credential. The credential is used for authorization. If the user ID and the password supplied is invalid, an exception is thrown and the request ends without invoking the resource. For more information on BasicAuth authentication, see BasicAuth.
Complete the following steps to specify how the server validates the BasicAuth authentication information...

Launch the Assembly Toolkit.
Open the J2EE perspective by clicking Window > Open Perspective > Other > J2EE.
Select the Web services-enabled Enterprise JavaBean (EJB) or Web module.
In the Project Navigator window, locate the META-INF directory for an EJB module or the WEB-INF directory for a Web module.
Right-click the webservices.xml file, select Open With > Web Services Editor.
Click the Binding Configurations tab, which is located at the bottom of the Web services editor within the Assembly Toolkit.
Expand the Request Receiver Binding Configuration Details > Login Mapping section.
Click Edit to view the login mapping information or click Add to add new login mapping information.The login mapping dialog is displayed. Select or enter the following information:

Authentication method Specifies the type of authentication that occurs. Select BasicAuth to use basic authentication.

Configuration name Specifies the JAAS login configuration name. For the BasicAuth authentication method, enter WSLogin for the JAAS login Configuration name.

Use token valid type Determines if you want to specify a custom token type. For the default authentication method selections, you do not need to specify this option.

Token value type URI and Token value type URI local name When you select BasicAuth, you cannot edit the token value type URI and local name values. Specifies custom authentication types. For BasicAuth authentication leave these fields blank.

Callback handler factory class name Creates a JAAS CallbackHandler implementation that understands the following callbacks:

javax.security.auth.callback.NameCallback
javax.security.auth.callback.PasswordCallback
com.ibm.wsspi.wssecurity.auth.callback.BinaryTokenCallback
com.ibm.wsspi.wssecurity.auth.callback.XMLTokenReceiverCallback
com.ibm.wsspi.wssecurity.auth.callback.PropertyCallback

Callback handler factory property name and Callback handler factory property value Specifies callback handler properties for custom callback handler factory implementations. You do not need to specify any properties for the default callback handler factory implementation. For BasicAuth, you do not need to enter any property values.

Login mapping property name and Login mapping property value Specifies properties for a custom login mapping. For the default implementations including BasicAuth, leave these fields blank.

You must specify how the server handles the BasicAuth authentication method. See Configuring the server to handle BasicAuth authentication information if you have not previously specified this information.

See Also
BasicAuth authentication method
Securing Web services using XML encryption
Configuring the server to handle BasicAuth authentication information
Configuring the server security bindings using the Assembly Toolkit
Configuring the server security bindings using the administrative console

Authentication method	Specifies the type of authentication that occurs. Select BasicAuth to use basic authentication.
Configuration name	Specifies the JAAS login configuration name. For the BasicAuth authentication method, enter WSLogin for the JAAS login Configuration name.
Use token valid type	Determines if you want to specify a custom token type. For the default authentication method selections, you do not need to specify this option.
Token value type URI and Token value type URI local name	When you select BasicAuth, you cannot edit the token value type URI and local name values. Specifies custom authentication types. For BasicAuth authentication leave these fields blank.
Callback handler factory class name	Creates a JAAS CallbackHandler implementation that understands the following callbacks: javax.security.auth.callback.NameCallback javax.security.auth.callback.PasswordCallback com.ibm.wsspi.wssecurity.auth.callback.BinaryTokenCallback com.ibm.wsspi.wssecurity.auth.callback.XMLTokenReceiverCallback com.ibm.wsspi.wssecurity.auth.callback.PropertyCallback
Callback handler factory property name and Callback handler factory property value	Specifies callback handler properties for custom callback handler factory implementations. You do not need to specify any properties for the default callback handler factory implementation. For BasicAuth, you do not need to enter any property values.
Login mapping property name and Login mapping property value	Specifies properties for a custom login mapping. For the default implementations including BasicAuth, leave these fields blank.