lib/wsdl/System.Session.wsdl in f5-icontrol-0.1.6 vs lib/wsdl/System.Session.wsdl in f5-icontrol-0.2.0
- old
+ new
@@ -1,8 +1,8 @@
<?xml version="1.0" ?>
<!--
-Copyright (c) 1996-2013, F5 Networks, Inc., Seattle, Washington. All rights reserved.
+Copyright (c) 1996-2016, F5 Networks, Inc., Seattle, Washington. All rights reserved.
F5, F5 Networks, the F5 logo, BIG-IP, 3-DNS, iControl, GLOBAL-SITE, SEE-IT, EDGE-FX, FireGuard, Internet Control Architecture, IP Application Switch, iRules, PACKET VELOCITY, SYN Check, CONTROL YOUR WORLD, OneConnect, ZoneRunner, uRoam, FirePass, and TrafficShield are registered trademarks or trademarks of F5 Networks, Inc., in the U.S. and certain other countries.
All other trademarks mentioned in this document are the property of their respective owners. F5 Networks' trademarks may not be used in connection with any product or service except as permitted in writing by F5.
@@ -95,10 +95,22 @@
</message>
<message name="System.Session.get_maximum_sessionsResponse">
<part name="return" type="xsd:long"/>
</message>
+<message name="System.Session.set_force_sessions_stateRequest">
+ <part name="state" type="tns:Common.EnabledState"/>
+</message>
+<message name="System.Session.set_force_sessions_stateResponse">
+</message>
+
+<message name="System.Session.get_force_sessions_stateRequest">
+</message>
+<message name="System.Session.get_force_sessions_stateResponse">
+ <part name="return" type="tns:Common.EnabledState"/>
+</message>
+
<message name="System.Session.start_transactionRequest">
</message>
<message name="System.Session.start_transactionResponse">
<part name="return" type="xsd:long"/>
</message>
@@ -159,10 +171,22 @@
</message>
<message name="System.Session.get_recursive_query_stateResponse">
<part name="return" type="tns:Common.EnabledState"/>
</message>
+<message name="System.Session.set_dtd_processing_stateRequest">
+ <part name="state" type="tns:Common.EnabledState"/>
+</message>
+<message name="System.Session.set_dtd_processing_stateResponse">
+</message>
+
+<message name="System.Session.get_dtd_processing_stateRequest">
+</message>
+<message name="System.Session.get_dtd_processing_stateResponse">
+ <part name="return" type="tns:Common.EnabledState"/>
+</message>
+
<message name="System.Session.get_versionRequest">
</message>
<message name="System.Session.get_versionResponse">
<part name="return" type="xsd:string"/>
</message>
@@ -272,10 +296,50 @@
</documentation>
<input message="tns:System.Session.get_maximum_sessionsRequest"/>
<output message="tns:System.Session.get_maximum_sessionsResponse"/>
</operation>
+ <operation name="set_force_sessions_state">
+ <documentation>
+ Sets the state for all future iControl SOAP requests whether or not to
+ force non-default iControl SOAP sessions to be established before
+ SOAP requests are processed. This will disable the use of the default
+ session identifier (the username) and force the use of a system
+ provided identifier received from a call to get_session_identifier.
+ This is set to STATE_DISABLED by default. Only
+ administrators can set this value. This was introduced in
+ BIG-IP_v12.0.0 to enable enhanced protections against CSRF attacks.
+ Any attempts to run a command without a session will return a
+ "Could not find the iControl session for <user> error". Use caution
+ before turning this feature on as it may break existing SOAP clients,
+ many of which may not establish sessions before making requests. This
+ will also set the "iControl.ForceSessions" DB variable to "enable" or
+ "disable" respectively. If modifying the DB variable directly,
+ restart httpd to make the changes go into effect.
+
+ In order tune iControl SOAP sessions to your needs, see:
+ get_session_identifier: which will return the session ID for
+ a given session.
+ set_session_timeout: which will set the amount of time a session will
+ be in effect.
+ set_maximum_sessions: which will set the maximum number of concurrent
+ user sessions at any given time.
+
+ </documentation>
+ <input message="tns:System.Session.set_force_sessions_stateRequest"/>
+ <output message="tns:System.Session.set_force_sessions_stateResponse"/>
+ </operation>
+ <operation name="get_force_sessions_state">
+ <documentation>
+ Gets the state for all future iControl SOAP requests that indicates
+ whether or not to force non-default iControl SOAP sessions to be
+ established before SOAP requests are processed.
+
+ </documentation>
+ <input message="tns:System.Session.get_force_sessions_stateRequest"/>
+ <output message="tns:System.Session.get_force_sessions_stateResponse"/>
+ </operation>
<operation name="start_transaction">
<documentation>
Start an iControl transaction, which combines the effects of a
number of iControl methods into a single atomic transaction.
@@ -468,10 +532,35 @@
</documentation>
<input message="tns:System.Session.get_recursive_query_stateRequest"/>
<output message="tns:System.Session.get_recursive_query_stateResponse"/>
</operation>
+ <operation name="set_dtd_processing_state">
+ <documentation>
+ Sets the state for all future iControl SOAP requests whether or not to
+ process SOAP requests received with Document Type Definitions (DTDs).
+ This is set to STATE_DISABLED by default. Only administrators can set
+ this value. This was introduced in BIG-IP_v12.0.0 to conform to SOAP
+ specifications that disallow DTDs. SOAP requests that use DTDs will
+ return a "parsing aborted" error and not parse the request. This
+ will also set the "iControl.DTDParsing" DB variable to "enable" or
+ "disable" respectively. If modifying the DB variable directly,
+ restart httpd to make the changes go into effect.
+
+ </documentation>
+ <input message="tns:System.Session.set_dtd_processing_stateRequest"/>
+ <output message="tns:System.Session.set_dtd_processing_stateResponse"/>
+ </operation>
+ <operation name="get_dtd_processing_state">
+ <documentation>
+ Gets the state for all future iControl SOAP requests whether or not to
+ process SOAP requests received with Document Type Definitions (DTDs).
+
+ </documentation>
+ <input message="tns:System.Session.get_dtd_processing_stateRequest"/>
+ <output message="tns:System.Session.get_dtd_processing_stateResponse"/>
+ </operation>
<operation name="get_version">
<documentation>
Gets the version information for this interface.
</documentation>
@@ -646,10 +735,74 @@
namespace="urn:iControl:System/Session"
encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
</output>
</operation>
+ <operation name="set_force_sessions_state">
+ <documentation>
+ Sets the state for all future iControl SOAP requests whether or not to
+ force non-default iControl SOAP sessions to be established before
+ SOAP requests are processed. This will disable the use of the default
+ session identifier (the username) and force the use of a system
+ provided identifier received from a call to get_session_identifier.
+ This is set to STATE_DISABLED by default. Only
+ administrators can set this value. This was introduced in
+ BIG-IP_v12.0.0 to enable enhanced protections against CSRF attacks.
+ Any attempts to run a command without a session will return a
+ "Could not find the iControl session for <user> error". Use caution
+ before turning this feature on as it may break existing SOAP clients,
+ many of which may not establish sessions before making requests. This
+ will also set the "iControl.ForceSessions" DB variable to "enable" or
+ "disable" respectively. If modifying the DB variable directly,
+ restart httpd to make the changes go into effect.
+
+ In order tune iControl SOAP sessions to your needs, see:
+ get_session_identifier: which will return the session ID for
+ a given session.
+ set_session_timeout: which will set the amount of time a session will
+ be in effect.
+ set_maximum_sessions: which will set the maximum number of concurrent
+ user sessions at any given time.
+
+ </documentation>
+ <soap:operation soapAction="urn:iControl:System/Session"/>
+ <input>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </input>
+ <output>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </output>
+ </operation>
+
+ <operation name="get_force_sessions_state">
+ <documentation>
+ Gets the state for all future iControl SOAP requests that indicates
+ whether or not to force non-default iControl SOAP sessions to be
+ established before SOAP requests are processed.
+
+ </documentation>
+ <soap:operation soapAction="urn:iControl:System/Session"/>
+ <input>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </input>
+ <output>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </output>
+ </operation>
+
<operation name="start_transaction">
<documentation>
Start an iControl transaction, which combines the effects of a
number of iControl methods into a single atomic transaction.
@@ -957,9 +1110,58 @@
<operation name="get_recursive_query_state">
<documentation>
Gets the state to recursively query the contents of the active
folder.
+
+ </documentation>
+ <soap:operation soapAction="urn:iControl:System/Session"/>
+ <input>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </input>
+ <output>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </output>
+ </operation>
+
+ <operation name="set_dtd_processing_state">
+ <documentation>
+ Sets the state for all future iControl SOAP requests whether or not to
+ process SOAP requests received with Document Type Definitions (DTDs).
+ This is set to STATE_DISABLED by default. Only administrators can set
+ this value. This was introduced in BIG-IP_v12.0.0 to conform to SOAP
+ specifications that disallow DTDs. SOAP requests that use DTDs will
+ return a "parsing aborted" error and not parse the request. This
+ will also set the "iControl.DTDParsing" DB variable to "enable" or
+ "disable" respectively. If modifying the DB variable directly,
+ restart httpd to make the changes go into effect.
+
+ </documentation>
+ <soap:operation soapAction="urn:iControl:System/Session"/>
+ <input>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </input>
+ <output>
+ <soap:body
+ use="encoded"
+ namespace="urn:iControl:System/Session"
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
+ </output>
+ </operation>
+
+ <operation name="get_dtd_processing_state">
+ <documentation>
+ Gets the state for all future iControl SOAP requests whether or not to
+ process SOAP requests received with Document Type Definitions (DTDs).
</documentation>
<soap:operation soapAction="urn:iControl:System/Session"/>
<input>
<soap:body