Restrict AE Titles opening associations with Archive - dcm4che/dcm4chee-arc-light GitHub Wiki

Overview

This feature can be used when one needs to limit the AE titles opening associations with the archive. Enabling this feature ensures that not every AE title has access to store/retrieve the studies to/from the archive, but only the ones configured have the access to do so.

Configuration

Using Archive UI

Go to Menu->Configuration, then on Devices page, Edit the dcm4chee-arc device. Go to Child objects and select DCM4CHEE from the dropdown of Network AEs.
Go to Extensions and select Edit extension of Network AE Extension and add value in Accepted Calling AE Title field and Save.

Using LDAP

One may either

create a LDIF file (e.g.):

  version: 1		
  dn: dicomAETitle=DCM4CHEE1,dicomDeviceName=dcm4chee-arc,cn=Devices,cn=DICOM Configuration,dc=dcm4che,dc=org
  changetype: add
  add: dcmAcceptedCallingAETitle
  dcmAcceptedCallingAETitle: Customer1RAD
  -

and import it to the LDAP Server by using the ldapmodify command line utility.

or use the Add Attribute... and Add Value... function of Apache Directory Studio to add attributes on Application Entity Level (e.g: dicomAETitle=DCM4CHEE) in the Archive Configuration.

One may refer to Network AE to understand the description of attributes.

Go to the Control tab on Configuration page in archive UI and reload the configuration.

Testing

Store objects to archive using storescu dcm4che tool as shown below

 storescu -b Customer1RAD -c DCM4CHEE@localhost:11112 /path_to_study.dcm

Without -b option one will notice that errors are thrown saying that rejected-permanent, source: 1 - service-user, reason: 3 - calling-AE-title-not-recognized

For the study stored, try to retrieve it on similar lines using the storescp and movescu dcm4che tools as explained below a. Start the storescp tool as shown below
```
 storescp -b STORESCP:11115 
```
b. Retrieve object using movescu tool as shown below
```
 movescu -b Customer1RAD -c DCM4CHEE@localhost:11112 -m StudyInstanceUID=<StudyUID> --dest STORESCP
```