Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Secure web services > Secure web services
Securing JAX-RPC web services using message-level security
Standards and profiles address how to provide protection for messages that are exchanged in a web service environment.
Best practice: IBM WAS supports the JAX-WS
programming model and JAX-RPC. JAX-WS is the next generation web services programming model extending the foundation provided by JAX-RPC. Using the strategic JAX-WS programming model, development of web services and clients is simplified through support of a standards-based annotations model. Although JAX-RPC and applications are still supported, take advantage of the easy-to-implement JAX-WS programming model to develop new web services applications and clients.
bprac
JAX-WS
To secure web services with WAS, specify several different configurations. Although there is not a specific sequence in which specify these different configurations, some configurations reference other configurations. See Web Services Security configuration considerations.
Web service security is supported in the managed web service container. To establish a managed environment and to enforce constraints for Web Services Security, perform a JNDI lookup on the client to resolve the service reference.
Because of the relationship between the different Web Services Security configurations, IBM recommends that you specify the configurations on each level of the configuration in the following order. We can choose to configure Web Services Security for the application level, the server level or the cell level as it depends upon the environment and security needs.
Procedure
- Learn about Web Services Security.
- Decide which programming model, JAX-WS or JAX-RPC, works best for securing your web services applications.
- Configure Web Services Security.
- Specify the application-level configuration.
- Specify the server-level configuration.
- Specify the cell-level configuration.
- Specify the platform-level configuration.
- Develop and assemble a JAX-RPC application, or migrate an existing application.
- Deploy the JAX-RPC application.
Results
After completing these steps for WAS, we have secured web services.