cancel
Showing results for 
Search instead for 
Did you mean: 

Can SAP Data Services consume external REST Web Services using Kerberos authentication?

MarcusZwirner
Product and Topic Expert
Product and Topic Expert
0 Kudos
422

Hi experts,

we have the requirement to implement an SAP Data Services (version 4.3) job consuming an external REST web service that uses Kerberos for authentication.

The general approach seems to be clear: We need a WADL file defining the endpoints, methods, parameters and data structures. With that WADL file we can create a REST web services datastore and import the metadata of the published operations as functions which can be added to the SAP Data Services job (data flow).

So far so good. But what do we have to configure for using Kerberos authentication?

The only place in the SAP Data Services documentation where Kerberos is mentioned in the context of web services is the Integrator guide (https://help.sap.com/docs/SAP_DATA_SERVICES/ab33122a997f40d89e340549ff0bced8/574814b56d6d1014b3fc928...). But this information applies only to SOAP web services (since there is no option in a REST web services datastore for the Axis2/c config file path and the security policy file).

Where else (and how) can we configure the typical Kerberos information (e.g. the Kerberos realm or the Kerberos keytab)?

Does anyone have experience with this or has it possibly even been implemented?

Thanks a lot for your support.

Best regards

Marcus

Accepted Solutions (1)

Accepted Solutions (1)

jmuiruri
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi marcus.zwirner,

Unfortunately Kerberos authentication for web services is not supported.

Best Regards,

Joseph

Answers (1)

Answers (1)

MarcusZwirner
Product and Topic Expert
Product and Topic Expert

Hi Joseph,

thanks for your reply.

You’re right, the supported authorization schemas for REST web services can be found here: Authorization schemas for REST | SAP Help Portal. And unfortunately Kerberos is not supported.

But we found a workaround. We use cURL (called via the exec function within an SAP Data Services job) for requesting the data (cURL supports Kerberos).

Best regards

Marcus