How can I remove http basic authorization requirement for all IPs on all Soap Services.
search cancel

How can I remove http basic authorization requirement for all IPs on all Soap Services.

book

Article ID: 368366

calendar_today

Updated On:

Products

CA API Gateway

Issue/Introduction

The gateway added restrictions on downloading wsdl document

https://example/soap.service?wsdl

If the service is protected by authentication then we can't download the wsdl directly from web browser.

As it prompts for userid and password and we dont want to require authentication for this.

Environment

CA API Gateway 10.1, 11.x

Resolution

You need to configure Cluster Property 

service.passthroughdownloads    
Remote IPs of requestors allowed to download WSDL and policy documents without credentials. Separate each entry with a space. You may optionally add a netmask to the IP address. Both IPv4 and IPv6 addresses are supported.
Default: 127.0.0.1
The default value allows only pass-through from the localhost. The full IP address of a client must match one of the items in the list before a download is permitted.
Sample values:
Since this works with a cidr you can specify,
0.0.0.0/0 which would allow all ips.