April 2010 - jboss-dev-forums - Jboss List Archives

[JBoss Web Services Development] - JBWS-2210 : CXF Username Token JAAS integration

by Sergey Beryozkin

Sergey Beryozkin [http://community.jboss.org/people/sergeyb] created the discussion "JBWS-2210 : CXF Username Token JAAS integration" To view the discussion, visit: http://community.jboss.org/message/536321#536321 -------------------------------------------------------------- Hi I've been looking recently at resolving JBWS-2210 [1]. The issue is to do with the fact that a WS-Security UsernameToken can not be currently used in JBoss CXF to integrate with the JBoss security subsystem for authentication and authorization decisions be made. I've done some initial changes in CXF and started a discussion on the cxf dev list [2]. Here is the summary of the proposed approach. The idea is to override a CXF WSS4JInInterceptor and provide a CallbachHandler to the WSS4J module which will ensure that an authentication occurs but also that a current SecurityContext is properly populated. The CXF interceptor which overrides CXF WSS4JInInterceptor is an abstract one [3], its job is to ensure that irrespectively of whether a current password is digested or not, the concrete subclass is requested to authenticate and populate a Subject. CXF also includes an abstract AuthorizingInInterceptor[4] which requests a subclass for a list of expected roles and asks SecurityContext if a user is in role. Given the above, here's how I'm thinking of resolving JBWS-2210 : - provide a CXF interceptor (to be included in JBoss CXF) which will extend [3] and delegate to JBoss AuthenticationManager to populate a Subject - provide a CXF interceptor (to be included in JBoss CXF) which will extend [4] and retrieve a list of expected roles; JBoss CXF WS-Security UsernameToken-aware endpoints will include the above two interceptors if the authentication & authorization is needed. At the moment I'm working on a system test validating the above approach. If you have any comments then please let me know cheers, Sergey [1] https://jira.jboss.org/jira/browse/JBWS-2210 https://jira.jboss.org/jira/browse/JBWS-2210 [2] http://old.nabble.com/Using-WS-Security-UsernameToken-to-authenticate-use... http://old.nabble.com/Using-WS-Security-UsernameToken-to-authenticate-use... [3] http://svn.apache.org/repos/asf/cxf/trunk/rt/ws/security/src/main/java/or... http://svn.apache.org/repos/asf/cxf/trunk/rt/ws/security/src/main/java/or... [4] http://svn.apache.org/repos/asf/cxf/trunk/rt/core/src/main/java/org/apach... http://svn.apache.org/repos/asf/cxf/trunk/rt/core/src/main/java/org/apach... -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536321#536321] Start a new discussion in JBoss Web Services Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [JCA Development] - JcaXAResourceRecovery

by Scott Marlow

Scott Marlow [http://community.jboss.org/people/smarlow%40redhat.com] replied to the discussion "JcaXAResourceRecovery" To view the discussion, visit: http://community.jboss.org/message/536287#536287 -------------------------------------------------------------- I would consider re-engineering the codebase from MBEAN based to MC, to be out of scope for AS 5.x. As that could destabilize the code base and impact existing deployments in a negative way. The idea of minimizing risk when applying code changes to released versions of a product/project is an old idea that still makes sense (IMHO). At the moment, we are still figuring out the larger challenge of integrating as strongly as possible, with the xa recovery mechanism. Well, Jesper has a design in place but we are trying to apply that to the existing code still and it is challenging (there are a lot of moving parts to deal with). If we didn't have enough challenges already, we could probably figure out a way to re-engineer (safely) from a MBEAN approach to MC. Perhaps we should have this discussion on the phone if there is still disagreement. If all involved are willing to speak in person, that would be fine with me too. Might not be a bad idea to have a few phone meetings to discuss how things are going anyway (if you guys want that :-). -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536287#536287] Start a new discussion in JCA Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [jBPM Development] - Jbpm 4 and ehcache

by Maciej Swiderski

Maciej Swiderski [http://community.jboss.org/people/swiderski.maciej] replied to the discussion "Jbpm 4 and ehcache" To view the discussion, visit: http://community.jboss.org/message/536259#536259 -------------------------------------------------------------- Please use parent forum for such topics - this forum is intended for development of JBPM code base On parent forum you can get more attention from jBPM expirienced users. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536259#536259] Start a new discussion in jBPM Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [jBPM Development] - JBPM questions

by Maciej Swiderski

Maciej Swiderski [http://community.jboss.org/people/swiderski.maciej] replied to the discussion "JBPM questions" To view the discussion, visit: http://community.jboss.org/message/536258#536258 -------------------------------------------------------------- wrong forum - Please use parent forum for such topics - this forum is intended for development of JBPM code base -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536258#536258] Start a new discussion in jBPM Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [jBPM Development] - I need help

by Maciej Swiderski

Maciej Swiderski [http://community.jboss.org/people/swiderski.maciej] replied to the discussion "I need help" To view the discussion, visit: http://community.jboss.org/message/536257#536257 -------------------------------------------------------------- Please use parent forum for such topics - this forum is intended for development of JBPM code base -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536257#536257] Start a new discussion in jBPM Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [JCA Development] - Code generation for JBJCA

by Jesper Pedersen

Jesper Pedersen [http://community.jboss.org/people/jesper.pedersen] replied to the discussion "Code generation for JBJCA" To view the discussion, visit: http://community.jboss.org/message/536253#536253 -------------------------------------------------------------- Regarding the XML model - I think that using a StAX based model would be the best solution. See the javax.xml.stream package for details - we currently have some code in the repository using this method. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536253#536253] Start a new discussion in JCA Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [JCA Development] - Code generation for JBJCA

by Jesper Pedersen

Jesper Pedersen [http://community.jboss.org/people/jesper.pedersen] replied to the discussion "Code generation for JBJCA" To view the discussion, visit: http://community.jboss.org/message/536252#536252 -------------------------------------------------------------- A key feature of the tool would be to generate all the boiler plate code for all the config-property's for the various objects, and map them into ra.xml or annotate them. This is really painful work, so lets make it easy. Of course the skeleton must pass all validation rules of our validation module. So the config-property's comes into play there too for the equals() / hashCode() implementations. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536252#536252] Start a new discussion in JCA Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [Management Development] - To scope or not to scope (domain.xml)

by Emanuel Muckenhuber

Emanuel Muckenhuber [http://community.jboss.org/people/emuckenhuber] replied to the discussion "To scope or not to scope (domain.xml)" To view the discussion, visit: http://community.jboss.org/message/536251#536251 -------------------------------------------------------------- Hmm wouldn't the example you posted rather be a multi-domain configuration usage? I mean you could not deploy a deployment to a domain - rather to a subset of servers or profiles. Although all servers share a common configuration, they might not have all services active required by the deployment. So it depends more on the server configuration, than the domain. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536251#536251] Start a new discussion in Management Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [JCA Development] - Code generation for JBJCA

by Jesper Pedersen

Jesper Pedersen [http://community.jboss.org/people/jesper.pedersen] replied to the discussion "Code generation for JBJCA" To view the discussion, visit: http://community.jboss.org/message/536249#536249 -------------------------------------------------------------- Sounds good :) For the first iteration I would just take the input from the command line - like the seam-gen tool. Once we have all the input we need we can then make an XML model of that. That configuration can then be passed into the tool using f.ex. a -f switch. Create the code under a codegenerator modul in the repository, and follow the layout of our current modules. I think a good first step would be to generate a ResourceAdapter class into a specified output directory. Then we can add more input and generate additional code based on that. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536249#536249] Start a new discussion in JCA Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

Re: [jboss-dev-forums] [JCA Development] - JcaXAResourceRecovery

by Jesper Pedersen

Jesper Pedersen [http://community.jboss.org/people/jesper.pedersen] replied to the discussion "JcaXAResourceRecovery" To view the discussion, visit: http://community.jboss.org/message/536244#536244 -------------------------------------------------------------- Yeah, but the JCA container is still based on the old JMX kernel, so the only thing I have access to in the component is the ObjectName. -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/536244#536244] Start a new discussion in JCA Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&cont...]

15 years, 12 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-dev-forums April 2010