IC70823: WSDL SERVICE SCHEMA IS NOT INLINE (IMPORTED VIA SCHEMALOCATION) AND RESULTS IN 401 IF BACKEND REQUIRES FOR BASIC AUTHENTICATION

APAR status

• Closed as fixed if next.

Error description

• Backend server is set to Basic Authentication.
  
  In a DataPower WSP service, the XML Manager's user agent is
  configured for basic authentication. Customer queries wsdl with
  ?wsdl through DataPower without problem. The returned wsdl
  has xsd stored separately, indicated by 'schemalocation'.
  However, when customer tries to query this xsd, he gets a
  response "401 unauthorized".
  
  How to re-create:
  
  1. Configure a backend sever as http basic authentication for
  providing a WSDL.
  
  2. Import a configuration export with a WS-proxy
  
  
  3. Issue
  http://<DP_IP:port>/ABCService/services/ABC?wsdl
  from a web browser. If the wsdl is stored separately, you will
  get a WSDL back including contents such as:
  
  
  <xsd:schema><xsd:import schemaLocation="ABC.xsd1.xsd"
  namespace="http://www.datapower.com/Eli/ABC"/></xsd:schema>
  
  4. Issue
  http://<DP_IP:port>/ABCService/services/ABC.xsd1.xsd
  You will get an "Internal Error" back indicating you could
  not get the schema back.
  
  The more detailed errors from the Error Report or default-log
  are as follows:
  
  14:50:04 network error    6531830 request    0x80e00040 xslproxy
  (wsgw-myLoop): url-open: Remote error on url
  'https://<host:ip>/myapp/ABC?xsd=1'
  
  HTTP invalid response returned 401 Authorization Required, from
  URL 'http://<DP_IP:port>/ABCService.swaref.R288wsdl'
  (WWW-Authenticate: Basic , Authorization: N/A)
  
  Error occurred when connecting to URL
  'http://<DP_IP:port>/ABCService.swaref.R288.wsdl'
  
  wsdl: Request failed to compile. Unable to retrieve
  http://<DP_IP:port>/ABCService.swaref.R288.wsdl. This is
  referenced by http://<DP_IP:port>/APCService.swaref.R288.wsdl.
  
  The wsdl 'ABCService.swaref.R288.wsdl' could not be parsed or
  failed validation.
  

Local fix

• Create a proxy for all fetches of the WSDL and XSD
  through a local XML Firewall/Multi-Protocol
  Gateway where the firewall adds the correct
  header.  In the WSProxy, the remote location
  of the WSDL would be defined as a local port.  If this
  sounds like something you might want to try in lieu of
  upgrading firmware, we can get additional information for
  you.
  

Problem summary

• The authorization issue will be resolved.
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R381 PSN

     UP