# Apache Security

**URL:** <https://techcommunity.softwareag.com/t/apache-security/57903>\
**Category:** Forum\
**Tags:** Adabas-Natural, Adabas, Adabas-Add-on-Products, Other-Adabas-add-on-products, Adabas-SOA-Gateway\
**Created:** [March 8, 2006, 7:54pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903 "2006-03-08T19:54:55Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Guest](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/guest/32/75_2.png) [@Guest](https://techcommunity.softwareag.com/u/Guest)\
**Post date:** [March 8, 2006, 7:54pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/1 "2006-03-08T19:54:55Z")

</div>

:shock: Hi all :shock:

is there anybody who has some examples or tested Apache mod\_security in combination with ADABAS SOA Gateway?

P.S. Or some kind of user authorization

I don’t want to invent the wheel again

Best regards

SOA - Dago

---

<div class="post-metadata">

**Author:** ![Guest](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/guest/32/75_2.png) [@Guest](https://techcommunity.softwareag.com/u/Guest)\
**Post date:** [March 8, 2006, 8:01pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/2 "2006-03-08T20:01:51Z")

</div>

:shock:

As add-on:

How can I prevent users who should only use the Adabas SOA Gateway as “application users” and not as “client administration users” from accessing adminstration functionality, i.e. application user should not be able to use administration functions like import, export, create resources and so on.

Any advice is welcome

Regards  
SOA-Dago

---

<div class="post-metadata">

**Author:** ![Brian\_Reynolds](https://avatars.discourse-cdn.com/v4/letter/b/6a8cbe/32.png) [@Brian\_Reynolds](https://techcommunity.softwareag.com/u/Brian_Reynolds)\
**Post date:** [March 8, 2006, 8:45pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/3 "2006-03-08T20:45:06Z")

</div>

Hi Dago,

We’re currently working on a document which will outline exactly how the ASG security is going to work, and very soon after that I’m going to get down to work on it’s implementation.

Some of the things we’ve already investigated:

→ We plan to use Apache SSL ( not mod\_ssl )  
 → All the ASG configuration is channelled through a WS endpoint, which is served by Apache. What we will do is restrict users accessing this Apache URL.

Does this make sense?

---

<div class="post-metadata">

**Author:** ![Guest](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/guest/32/75_2.png) [@Guest](https://techcommunity.softwareag.com/u/Guest)\
**Post date:** [March 21, 2006, 3:57pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/4 "2006-03-21T15:57:48Z")

</div>

:DHi Brian:D,

this make sense.

If possible, is this information available for internal usage?

Best regards

Dago

---

<div class="post-metadata">

**Author:** ![Guest](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/guest/32/75_2.png) [@Guest](https://techcommunity.softwareag.com/u/Guest)\
**Post date:** [March 24, 2006, 2:50pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/5 "2006-03-24T14:50:06Z")

</div>

😃 Hi Brian 😃

just a question to the Apache SSL.

Do you know or do you consider if there are issues of Apache SSL due to any export restrictions?

Best regards

Dago

---

<div class="post-metadata">

**Author:** ![John\_Power](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/john_power/32/93_2.png) [@John\_Power](https://techcommunity.softwareag.com/u/John_Power)\
**Post date:** [March 24, 2006, 2:57pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/6 "2006-03-24T14:57:54Z")

</div>

Dago, I’m quite sure there are export restrictions with the Apache SSL. We are currently working on a standard implementation of this for ASG and we will specifically work towards enabling ASG to be delivered with and without SSL security for that reason. One thing that is interesting is that we in Ireland will have less restrictions than you in Germany so this is something that will perhaps allow us more flexibility into the future

---

<div class="post-metadata">

**Author:** ![Bernard\_Grandjean](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@Bernard\_Grandjean](https://techcommunity.softwareag.com/u/Bernard_Grandjean)\
**Post date:** [August 21, 2006, 3:39pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/7 "2006-08-21T15:39:11Z")

</div>

Hallo,  
I install ADABAS SOA Gateway on a z/OS and it work.  
I will security this service but i don’t know about APACHE Security.

Can somebody help me?  
It will be helpful wen i can see some examples.

Then i can make installation, tests and give my feedback.

Best Regards, Bernard.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/techcommunity/original/3X/c/d/cd19967bb605d28a72d77eb83a1cae22f3df2eb8.svg) [@system](https://techcommunity.softwareag.com/u/system)\
**Post date:** [August 21, 2006, 5:00pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/8 "2006-08-21T17:00:44Z")

</div>

Bernard,

I will send you some information (will be included in the ASG documentation soon) offlist.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/techcommunity/original/3X/c/d/cd19967bb605d28a72d77eb83a1cae22f3df2eb8.svg) [@system](https://techcommunity.softwareag.com/u/system)\
**Post date:** [April 2, 2021, 2:38pm UTC](https://techcommunity.softwareag.com/t/apache-security/57903/9 "2021-04-02T14:38:56Z")

</div>


