Re: [jbossws-dev] JBWS-3028
by Alessio Soldano
Sergey Beryozkin wrote:
> Hi Alessio
>
> Just would like to chat about the scope of JBWS-3028 (for jbosscxf-4.0).
>
> First, the integration with PicketBox - how far would we want to go ? At the moment it is only
> AuthenticationManager which is being asked to populate the subject and the actual authorization is done by CXF interceptor.
>
> I guess what is missing at the moment is a test and may be some code to do with authorizing an access to EJBs.
>
Yep, that would be perfect.
> 2nd part is about adding a test and enhancing the code for hashed passwords be dealt with...
>
+1
> By the way, did you want me to look into https://jira.jboss.org/browse/JBWS-2710 at some stage ? I can't recall...
>
Well, that's not a high priority one currently. Moreover I think the
first thing to do there would be to verify if CXF currently has
something for server side ws-trust at all (didn't followed this for
quite some time).
Anyway, let's talk about other issues for JBossWS CXF 4.0 this week.
Cheers
Alessio
--
Alessio Soldano
Web Service Lead, JBoss
13 years, 11 months
Re: [jbossws-dev] JBWS-2210
by Alessio Soldano
Hi Sergey,
Sergey Beryozkin wrote:
> Hi Alessio
>
> On Thu, May 13, 2010 at 4:47 PM, Alessio Soldano <asoldano(a)redhat.com
> <mailto:asoldano@redhat.com>> wrote:
>
> Hi Sergey,
> I've just committed your patch3 for JBWS-2210. Thanks again.
>
>
> thanks, I'm glad that you've found it acceptable.
>
>
> If nothing unexpected happens tonight during Hudson runs (but I'm
> really positive here), that will go to the next JBossWS 3.3.0
> release (which is currently scheduled for May, 21st).
> If you're fine with this, I'd solve the JBWS-2210 jira and move
> the missing bits (I see the digest stuff, etc. for instance) to
> new specific jiras.
>
>
> please do. As far as I recall we were also planning the support for
> digests, perhaps evaluating the possibility of changing the test
> interceptor's code to use PicketBox api, as well as moving it into the
> main source tree. A policy-fist case can probably be dealt with later
> on given that no related support exists in CXF 2.2.8
OK, I've created JBWS-3028.
>
>
> I'm just probably going to produce some kind of documentation for
> JBWS-2210 is our wiki.. unless you already have something ready to
> be used ;-)
>
>
> Sorry, not yet :-) May be the fragments from the test's beans.xml can
> help users to see how it is working...
Yep; I've added the following section to the wiki:
http://community.jboss.org/wiki/JBossWS-StackCXFUserGuide#Authentication_...
JBWS-2210 is now marked as resolved. Thanks.
Cheers
Alessio
--
Alessio Soldano
Web Service Lead, JBoss
13 years, 11 months
JBWS-2210
by Alessio Soldano
Hi Sergey,
I've just committed your patch3 for JBWS-2210. Thanks again. If nothing
unexpected happens tonight during Hudson runs (but I'm really positive
here), that will go to the next JBossWS 3.3.0 release (which is
currently scheduled for May, 21st).
If you're fine with this, I'd solve the JBWS-2210 jira and move the
missing bits (I see the digest stuff, etc. for instance) to new specific
jiras. I'm just probably going to produce some kind of documentation for
JBWS-2210 is our wiki.. unless you already have something ready to be
used ;-)
Cheers
Alessio
--
Alessio Soldano
Web Service Lead, JBoss
13 years, 11 months