[Spce-user] Denied access to method SOAP error

[Daniel Tiefnig]

On 01/03/2011 02:31 PM, Robert C. Chandler II wrote:
> SoapFault exception: [soap:Client] Denied access to method 
> (get_subscriber) in class (SOAP::Provisioning) at 
> /usr/share/perl5/SOAP/Lite.pm line 2678.

Hmm, this is a SOAP::Lite error, looks like there's something wrong
while dispatching the request to our backend. Often this has to do with
the namespace of the method in the SOAP body. Did you get this error in
response to the dumped message you included in your e-mail? The request
looks fine, AFAICS.

> I can access the https//../SOAP/Provisioning.wsdl URL with the 
> credentials admin/admin.

That's ok for the HTTP basic auth, but be aware you can't authenticate
the SOAP message using HTTP users. You'll have to create separate
service users for that. There are basically three possibilities to do so:

1) Use a SIP subscriber. (set type to "user" or "webuser")

2) Use an administrator. (set type to "admin")

3) Create an acl entry in config.yml (set type to "system").

For the latter you'll have to create an "ossbss.provisioning.acl" array
in the config.yml. Find the "  provisioning:" entry below "ossbss:" and
add the following:

    acl:
      - user: youruser
        pass: yourpass
        allow:
          - Voip
          - Billing

Make sure you use the correct spacing at the beginning of the lines.

> I changed the port from 2443 to 80 so that I could capture the SOAP 
> request and the screen shot in the attachment shows what is being 
> sent to the server.

Please note that all traffic to the server still has to be SSL
encrypted, as only the port number is changed by modifying the port
setting. To disable SSL you'd have to set "SSLEngine off" in the apache
site config and use an "http:" URL in you client. (As you've been able
to dump the request, you've likely already done that.)

br,
daniel

PS: You should subscribe to the list to get your messages automatically
approved, thanks.