Frequenty Asked Questions
Q: How do you provide the username and password on Initiate?
A: The username and password credentials can be provided in the flags parameter of the RemoteServer.Initiate() method. For example:
rso.Initiate( ..., flags=':testuser:xyz::');
If the username and password are not provided, the user will be prompted to provide the credentials (only on the first Initiate).
Q: How is security applied?
A: Authorization is performed using the web server.
An authorized user may call any SCP provided by the application configured with the OpenROAD_ServerApp config parameter. Additional security should be provided by using SSL encryption. For more information, see
http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html.
Customized authentication or authorization can be accomplished through advanced web server configuration or customizing the Java source of the Gatekeeper (this requires a Java SDK).
Q: Can the authorization be switched off?
A: You can switch off web server authentication by removing the <security-constraint>, <login-config>, and <security-role> tags from the web.xml file.
This can be useful for testing or if you use applications in a trusted environment.
Q: What is the URL of the gatekeeper?
A: The URL is the address of the web server extended by the name of the directory for the web application, for example:
http://myhost:8080/openroad/
Or:
https://myhost:8443/openroad/
Some web servers require the trailing slash when using the directory name (for example, Tomcat 7, if the attribute "sessionCookiePathUsesTrailingSlash" is not set to "false" for the <Context> used). Otherwise, errors could occur (for example, "0x8004C001 Your HTTP session has timed out. You must initiate again.").
Appending the name of the servlet is not required because it is already configured in the web.xml file, but is optional:
http://myhost:8080/openroad/OpenROADGatekeeper