April 2008 - jbossws-dev - Jboss List Archives

[Design of JBoss Web Services] - Re: UsernameToken authentication and authorization for POJO

by alessio.soldano＠jboss.com

"darran.lofthouse(a)jboss.com" wrote : I am thinking about having a look at this issue and just wanted to bring up some ideas here. The reason I am looking at this is because although there is a solution based on using EJB endpoints there is still a consistent demand for this capability for POJO endpoints. | | We currently have the following unscheduled issue: - | | http://jira.jboss.org/jira/browse/JBWS-1999 I Darran, interesting there's a consistent demand for these ws-security related features. That issue is assigned to me but you're welcome to reassing and work at it. anonymous wrote : I have seen the contributed code but this does not integrate with our current WS-Security handlers so I am proposing a more integrated solution. I think the idea of forcing the authentication calling the WSSecurityManager's .authenticate(...) method is good, that's imho the missing piece for pojo endpoints, since with ejb3 endpoints the ejb3 layer takes care of requesting the authentication. Of course I agree with you we can't have this called from other handlers; I didn't spend a lot of time looking at this, but I guess the current ReceiveUsernameOperation could be a nice place to do this. anonymous wrote : My idea would be to re-open the following issue to allow the UsernameToken to be set as a requirement on the incoming message: - | | http://jira.jboss.org/jira/browse/JBWS-1136 Generally speaking, I agree with you the should be a way to say "ok, the username token is required". anonymous wrote : The configuration should have an attribute 'authenicate=true', if set we can make use of the programatic web authentication available from JBoss 4.2.0.GA: - | | http://wiki.jboss.org/wiki/WebAuthentication | | In addition to this the configuration could then contain a set of the allowed roles to call the endpoint and if this is set after the authentication we could use isCallerInRole to verify if the user is in the allowed role. | | The use of the WebAuthentication above does mean that we can mainly use the standard servlet APIs after the authentication and this change would be achieved with a small amount of additional configuration, as we have authenticated then this will still be propagated to the calls to any subsequent EJBs. | I think it would be better to leave the configuration of the allowed roles to the login module configuration. May be I'm missing something, but I think we could simply let the user configure the security domain as usual and then the login module(s) configured for that security domain will have the roles configuration. Btw doing this you'll also get the digest/nonce feature of the UsernameToken Profile for free (see the test for JBWS-1988) also for pojo endpoints. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4147109#4147109 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4147109

16 years, 1 month

1
0
0 / 0

[Design of JBoss Web Services] - Re: Unlocking WS-Security in Metro

by richard.opalka＠jboss.com

"alessio.soldano(a)jboss.com" wrote : Hi Folks, | I've just committed some tests showing how to use ws-security with the jbossws-metro stack Nice job Alessio ;) "alessio.soldano(a)jboss.com" wrote : I found out on the wsit fisheye that more recent releases also scan the jar's META-INF folder and that's why I created JIRA-2158. Did you find more recent Metro tag than the current one metro1_1-release that would include your feature of scanning the jar's META-INF folder? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4147005#4147005 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4147005

16 years, 1 month

1
0
0 / 0

[Design of JBoss Web Services] - POJO not getting exposed as webservice

by amit.sfbay

This is the first time I am creating a WS using JBoss. When I add web service annotation(s) on my EJB, it does show up in the JBossWS/Services web page. When I put the same on a POJO(not an EJB component), it does not. Any ideas what I might be doing wrong? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4146950#4146950 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4146950

16 years, 1 month

1
0
0 / 0

[Design of JBoss Web Services] - Unlocking WS-Security in Metro

by alessio.soldano＠jboss.com

Hi Folks, I've just committed some tests showing how to use ws-security with the jbossws-metro stack (http://fisheye.jboss.com/changelog/JBossWS/?cs=6713). Documentation will come on the wiki. However the tests requiring keystore/trustore files (i.e. those involving signature and encryption) are currently disabled since the metro sources we're currently using do not scan the client/server application jars for the keystore/trustore files. This means we have to provide absolute paths to the filesystem in the configuration files to tell the stack where those files are. I found out on the wsit fisheye that more recent releases also scan the jar's META-INF folder and that's why I created JIRA-2158. I've also disabled the UsernameTokenProfile test since it's not possible to enable username token without using a transport security (i.e. https) or -again- message level protection (i.e. sign & encrypt). The problem with https is the same we currently have for the interop usernametoken+http tests which are excluded because they require a proper jboss-web tomcat configuration along with the references to the keystore/trustore to be used for ssl. Does anybody have an interesting idea about this? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4146888#4146888 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4146888

16 years, 1 month

1
0
0 / 0

[Design of JBoss Web Services] - UsernameToken authentication and authorization for POJO endp

by darran.lofthouse＠jboss.com

I am thinking about having a look at this issue and just wanted to bring up some ideas here. The reason I am looking at this is because although there is a solution based on using EJB endpoints there is still a consistent demand for this capability for POJO endpoints. We currently have the following unscheduled issue: - http://jira.jboss.org/jira/browse/JBWS-1999 I have seen the contributed code but this does not integrate with our current WS-Security handlers so I am proposing a more integrated solution. My idea would be to re-open the following issue to allow the UsernameToken to be set as a requirement on the incoming message: - http://jira.jboss.org/jira/browse/JBWS-1136 The configuration should have an attribute 'authenicate=true', if set we can make use of the programatic web authentication available from JBoss 4.2.0.GA: - http://wiki.jboss.org/wiki/WebAuthentication In addition to this the configuration could then contain a set of the allowed roles to call the endpoint and if this is set after the authentication we could use isCallerInRole to verify if the user is in the allowed role. The use of the WebAuthentication above does mean that we can mainly use the standard servlet APIs after the authentication and this change would be achieved with a small amount of additional configuration, as we have authenticated then this will still be propagated to the calls to any subsequent EJBs. I will need to consider the implications of this if a user enables it for an EJB endpoint as it does depend on the web app having a security domain but the primary purpose of this change is for POJO endpoints and not EJB endpoints. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4146806#4146806 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4146806

16 years, 1 month

1
0
0 / 0

Moving to SPI 3 M1

by Heiko Braun

Yesterday I commited the first cut of SPI 3 migration to - Container 4.2.2, 4.2.3 and 5.0.1 - Native and CXF Tonight Hudson runs seem to be OK, except for some JAX-RPC regression in Native. I am going to look at it today. One that is done, I am planning to continue with Metro and then finally take a look at the remaining containers 4.2.1 and 5.0.0. One of the things you already look at is the new Transport API, which allows us to use JBossWS embedded. Currently this features resides with native. Samples can be found under 'tests/embedded'. Rock on'

16 years, 1 month

2
3
0 / 0

Re: howto deploy:deploy-file to snapshot repo

by Thomas Diesler

merci, that worked Paul Gier wrote: > Hey Thomas, > > When you deploy you have to use https. I also just made some updates to > this page that should help. > http://wiki.jboss.org/auth/wiki/en/MavenSnapshotRepository > > > Thomas Diesler wrote: >> Hi Paul, >> >> how do I deploy a file to the snapshot repo? >> >> This >> >> mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jbosssx >> -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar >> -Dfile=server/default/lib/jbosssx.jar >> -DrepositoryId=snapshots.jboss.org >> -Durl=dav:http://snapshots.jboss.org/maven2 >> >> fails with >> >> [ERROR] BUILD ERROR >> [INFO] >> ------------------------------------------------------------------------ >> [INFO] Error deploying artifact: Failed to transfer file: >> http://snapshots.jboss.org/maven2/jboss/jbosssx/4.2.3-SNAPSHOT/jbosssx-4..... >> Return code is: 405 Method Not Allowed >> >> I can deploy a snapshot file using deploy:deploy >> >> cheers >> -thomas >> > -- xxxxxxxxxxxxxxxxxxxxxxxxxxxx Thomas Diesler Web Service Lead JBoss, a division of Red Hat xxxxxxxxxxxxxxxxxxxxxxxxxxxx

16 years, 1 month

1
0
0 / 0

howto deploy:deploy-file to snapshot repo

by Thomas Diesler

Hi Paul, how do I deploy a file to the snapshot repo? This mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jbosssx -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=server/default/lib/jbosssx.jar -DrepositoryId=snapshots.jboss.org -Durl=dav:http://snapshots.jboss.org/maven2 fails with [ERROR] BUILD ERROR [INFO] ------------------------------------------------------------------------ [INFO] Error deploying artifact: Failed to transfer file: http://snapshots.jboss.org/maven2/jboss/jbosssx/4.2.3-SNAPSHOT/jbosssx-4..... Return code is: 405 Method Not Allowed I can deploy a snapshot file using deploy:deploy cheers -thomas -- xxxxxxxxxxxxxxxxxxxxxxxxxxxx Thomas Diesler Web Service Lead JBoss, a division of Red Hat xxxxxxxxxxxxxxxxxxxxxxxxxxxx mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jbosssx -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=server/default/lib/jbosssx.jar -Durl=file:///home/tdiesler/svn/repository.jboss.org/maven2/ mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jboss-system -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=lib/jboss-system.jar -Durl=file:///home/tdiesler/svn/repository.jboss.org/maven2 mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jboss -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=server/default/lib/jboss.jar -Durl=file:///home/tdiesler/svn/repository.jboss.org/maven2 mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jboss-annotations-ejb3 -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=server/default/deploy/ejb3.deployer/jboss-annotations-ejb3.jar -Durl=file:///home/tdiesler/svn/repository.jboss.org/maven2 mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jboss-ejb3 -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=server/default/deploy/ejb3.deployer/jboss-ejb3.jar -Durl=file:///home/tdiesler/svn/repository.jboss.org/maven2 mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jboss-ejb3x -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=server/default/lib/jboss-ejb3x.jar -Durl=file:///home/tdiesler/svn/repository.jboss.org/maven2 mvn deploy:deploy-file -DgroupId=jboss -DartifactId=jboss-jmx -Dversion=4.2.3-SNAPSHOT -Dpackaging=jar -Dfile=lib/jboss-jmx.jar -Durl=file:///home/tdiesler/svn/repository.jboss.org/maven2

16 years, 1 month

1
0
0 / 0

[Design of JBoss Web Services] - Mavenization

by richard.opalka＠jboss.com

Hi Folks, I added Mavenization section to our Wiki: http://jbws.dyndns.org/mediawiki/index.php?title=Development Feel free to contribute there when you see some missing bits there. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4146167#4146167 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4146167

16 years, 1 month

1
0
0 / 0

Dear jbossws-dev@lists.jboss.org April 80% 0FF

by jbossws-dev＠lists.jboss.org

Canadian Doctor Eldon Best Price On Net http://www.google.com/pagead/iclk?sa=l&ai=nhysi&num=3222&adurl=http://lku...

16 years, 1 month

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jbossws-dev April 2008