The HTTP parts that I suggested are using basicauth but with a password that is not intended to be secret.

From: <basex-talk-bounces@mailman.uni-konstanz.de> on behalf of Kendall Shaw <kendall.shaw@workday.com>
Date: Tuesday, October 17, 2017 at 2:39 PM
To: "basex-talk@mailman.uni-konstanz.de" <basex-talk@mailman.uni-konstanz.de>
Subject: Re: [basex-talk] AUTHMETHOD = Custom

Hi,

If you are using the http server because you plan to use basex over HTTP and you don’t want to require any authentication, then what I suggested should work.

For example, your program would use the HTTP protocol to interact with BaseX over REST:

http://docs.basex.org/wiki/REST

You could also write your basex side applications using RESTXQ and define your own protocol over HTTP for your z/OS program to use.

If you don’t want to use HTTP then you don’t need the HTTP server and can communicate with BaseX using its native protocol (I have not tried that):

http://docs.basex.org/wiki/Server_Protocol

If you can run Java on z/OS  and you can use the basex java libraries, you could use one of the wrappers over the server protocol (that’s what I use in one case). Or you could embed basex within your java application.

Kendall

From: <basex-talk-bounces@mailman.uni-konstanz.de> on behalf of Dave Day <David.Day@duke-software.com>
Date: Tuesday, October 17, 2017 at 2:26 PM
To: "basex-talk@mailman.uni-konstanz.de" <basex-talk@mailman.uni-konstanz.de>
Subject: Re: [basex-talk] AUTHMETHOD = Custom

Kendall,

   I did not make myself clear(again).  Please forgive.

    I've got my own application executing on an IBM z/OS platform that I want to have connect to the Basex server.  This is not a browser that is trying to connect.

    In the .bin file are scripts to start a server, and also what looks like an http server.

    The doc specifically mentions HTTP server, so maybe this doesn't apply to the non-HTTP server.

    I'm trying to figure out how to construct the response for the realm:nonce that the server sent, but not having a whole lot of luck so far.

    Regards,

    -- Dave

On 10/17/2017 4:05 PM, Kendall Shaw wrote:

From: <basex-talk-bounces@mailman.uni-konstanz.de> on behalf of Dave Day <David.Day@duke-software.com>
Date: Tuesday, October 17, 2017 at 9:53 AM
To: "basex-talk@mailman.uni-konstanz.de" <basex-talk@mailman.uni-konstanz.de>
Subject: [basex-talk] AUTHMETHOD = Custom

Greetings list,

    In the Basex configuration file, I added

    AUTHMETHOD = Custom

    After starting the server, the 1st response I get from the server when I connect to it is the realm:nonce values.

    In the Basex manual, it states for AUTHMETHOD

Specifies the default authentication method, which will be used by the HTTP server for negotiating
credentials. Allowed values are Basic, Digest, and Custom:

    With custom authentication, the server will not do any authentication.

    Is it possible to connect to Basex server without going thru any authentication?

Someone probably has a better answer than this. Web applications that you write using RESTXQ don’t have to require authentication. So, if RESTXQ fits with what you want to do, that would be one way to not require authentication for your applications. You could also create a user with a throw away password like “password”, grant the user admin permissions and then you can use that user to use BaseX REST functions or command from the basex server (not http).

For example, if you create user test with password test and granted the user admin, then:

http://test:test@localhost:8984/basex/rest?command=list

Also, by default admin user’s password is admin.

Or you could embed basex within a java application.

Kendall