Put the following snippet in the web.xml file
just before the end tag ""
And in the orion-web.xml file, put the following xml snippet:
Now you are all set. Just deploy the web service again and you would be prompted to provide a user id and password.
As for the java client accessing the wsdl :
In the auto generated constructor, assuming u r using jdeveloper to create and deploy your web services: just provide the properties to the http connection.
Properties props = new Properties();