PASOE: Securing both REST and APSV transports

OE 11.6.1: I’m having some trouble both mentioned transports for an ABL application. Securing just REST works perfectly as described in the docs. But when I want to secure APSV as well and then it’s becoming a bit misty. I’m trying to setup form oerealm.

I setup oeablSecurity-form-oerealm.xml (and pointed to that in web.xml) like:

<b:bean id="OERealmUserDetails" class="com.progress.appserv.services.security.OERealmUserDetailsImpl" >  

<b:property name="realmURL" value="localhost:10600/.../apsv" />

<b:property name="realmClass" value="auth.AuthenticationRealm" />

…

Note: I’m setting up security for the /auth1 application, the /auth2 is the app which performs the actual authentication. /auth1 and /auth2 run on the same instance.

So far so good. This works for REST, the AuthenticationRealm class performs as expected. I can connect to the APSV from ABL with whatever credentials. But then securing the APSV part. I uncomment <b:import resource="apsv-basic.xml"/> and then restart the pasoe instance.  The REST transport still asks for authorization and if the correct credentials are given I get the expected response. Trying to connect to APSV no longer works (..:connect("-URL localhost:10600/.../apsv", "bfv", "bfv"))

Now I switch to the apsv-basic.xml file. In this file I comment <http-basic /> and uncomment <http-basic entry-point-ref="OEAuthenticationEntryPoint" /> as described. Obviously the file comments: “for oeablSecurity-basic-oerealm.xml”. But I’m working on oeablSecurity-form-oerealm.xml. Maybe here is the problem. When I restart the instance I get for REST: 403 - Forbidden: the server refuses to fullfill the client's request - GET /auth1/rest/restauth/person and for APSV I still can’t login but now with a 9328 error (unable to communicate with AIA).

What am I doing wrong here?