How To Disable SOAP In Applications 11i (Doc ID 389596.1)

Last updated on DECEMBER 02, 2013

Applies to:

Oracle Applications Technology Stack - Version 11.5.10.0 to 11.5.10.2 [Release 11.5 to 11.5.10]
Information in this document applies to any platform.

Goal

Important
  • There have been some mis-understanding around the default deployment of the SOAP server that was shipped with EBS in 11i. A security alert was raised back in 2001.  (<Document 166869.1>)  That specific Alert is not applicable to EBS and the version of SOAP that comes with EBS. 
  • The remainder of this document is for "aesthetics" only.  To simply allow for the exchange of one informational message from the server and replace it with a "404 Not found" message.


In general SOAP is NOT used by default in 11.5.10 and below for EBS and it is safe to disable. 

  • iAS 1.0.2.2.2 (Apache 1.3.19) comes by default with the SOAP Server enabled.
  • SOAP is a manual implementation in 11.5.10.x for any product that is wanting to take advantage of the SOAP protocol.
  • Products taking advantage of SOAP will go ahead and provide steps explicitly on what needs to be configured in order to work with SOAP.

Testing:
Access the following URL in your web browser:

http://<HOSTNAME>:<PORT>/soap/servlet/soaprouter
(e.g. http://soapmachine.somewhere.com:8000/soap/servlet/soaprouter)

If SOAP has already been disabled the page should come back with -
HTTP 404 - "Page note found"
However if the page returns.
SOAP Server
Sorry, I don't speak via HTTP GET- you have to use HTTP POST to talk to me.
Then follow the steps below to disable the SOAP server.

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms