[JBoss JIRA] Updated: (JBWS-1141) EJB Proxy doesn't call Client.connect()
by Thomas Diesler (JIRA)
[ http://jira.jboss.com/jira/browse/JBWS-1141?page=all ]
Thomas Diesler updated JBWS-1141:
---------------------------------
Fix Version/s: jbossws-1.0.6
(was: jbossws-1.0.5)
> EJB Proxy doesn't call Client.connect()
> ----------------------------------------
>
> Key: JBWS-1141
> URL: http://jira.jboss.com/jira/browse/JBWS-1141
> Project: JBoss Web Services
> Issue Type: Sub-task
> Security Level: Public(Everyone can see)
> Components: jaxrpc
> Reporter: Heiko Braun
> Assigned To: Heiko Braun
> Fix For: jbossws-1.0.6
>
>
> junit.extensions.TestSetup.run(TestSetup.java:23)Caused by: java.lang.Exception: Can not make remoting client invocation due to not being connected to server. at org.jboss.remoting.Client.invoke(Client.java:616) at org.jboss.remoting.Client.invoke(Client.java:604) at org.jboss.aspects.remoting.InvokeRemoteInterceptor.invoke(InvokeRemoteInterceptor.java:55) at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101) at org.jboss.aspects.tx.ClientTxPropagationInterceptor.invoke(ClientTxPropagationInterceptor.java:61) at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101) at org.jboss.aspects.security.SecurityClientInterceptor.invoke(SecurityClientInterceptor.java:53) at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101) at org.jboss.ejb3.remoting.IsLocalInterceptor.invoke(IsLocalInterceptor.java:78) at org.jboss.aop.joinpoint.MethodInvocation.invokeNext(MethodInvocation.java:101) at org.jboss.ejb3.stateless.StatelessRemoteProxy.invoke(StatelessRemoteProxy.java:102) ... 21 more
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
18 years, 2 months
[JBoss JIRA] Updated: (JBWS-723) Protect access to wsdl
by Thomas Diesler (JIRA)
[ http://jira.jboss.com/jira/browse/JBWS-723?page=all ]
Thomas Diesler updated JBWS-723:
--------------------------------
Fix Version/s: jbossws-1.0.6
(was: jbossws-1.0.5)
> Protect access to wsdl
> ----------------------
>
> Key: JBWS-723
> URL: http://jira.jboss.com/jira/browse/JBWS-723
> Project: JBoss Web Services
> Issue Type: Task
> Security Level: Public(Everyone can see)
> Components: jaxrpc
> Reporter: Thomas Diesler
> Fix For: jbossws-1.0.6
>
>
> Hello,
> the reason for protecting the wsdl file, is that the wsdl file can give
> valuable information for starting a Web Service related attack,
> according to the bibliography (see for example: Hacking Exposed, Web Applications, Scambray J., Shema M., McGraw Hill; Hacking Exposed,
> J2EE & Java, Taylor B., Buege R., Layman A., McGraw Hill).
> Spyros Halkidis
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
18 years, 2 months
[JBoss JIRA] Updated: (JBWS-299) Tools: "NoDataBinding" option for doc/literal Web Services
by Thomas Diesler (JIRA)
[ http://jira.jboss.com/jira/browse/JBWS-299?page=all ]
Thomas Diesler updated JBWS-299:
--------------------------------
Fix Version/s: jbossws-1.0.6
(was: jbossws-1.0.5)
> Tools: "NoDataBinding" option for doc/literal Web Services
> ----------------------------------------------------------
>
> Key: JBWS-299
> URL: http://jira.jboss.com/jira/browse/JBWS-299
> Project: JBoss Web Services
> Issue Type: Feature Request
> Components: wstools
> Reporter: Anil Saldhana
> Assigned To: Darran Lofthouse
> Priority: Optional
> Fix For: jbossws-1.0.6
>
>
> wscompile has an option "-f:nodatabinding" that turns off data binding in the input parameters and return types for doc/lit web services. More information is available in the feature matrix. That info is copy/pasted here:
>
> wscompile uses this option to turn off data binding for literal encoding. This is a very important option when dealing with doc/literal wsdl files. Let us take an example of a web service that returns employee data.
>
> The SEI generated by wscompile will look as follows:
> public interface EmployeeQuery extends Remote {
> public double getSalary() throws RemoteException;
> public String getManagerName(int level) throws RemoteException;
> }
> Now if the -f:nodatabinding option is used, the generated SEI will not have any typed arguments or return types, but they will all be mapped to javax.xml.soap.SOAPElement (xsd:any equivalent).
> public interface EmployeeQuery extends Remote {
> public javax.xml.soap.SOAPElement getSalary() throws RemoteException;
> public javax.xml.soap.SOAPElement getManagerName(javax.xml.soap.SOAPElement level) throws RemoteException;
> }
> Supported by jbossws with the "nodatabinding" attribute in the <wsdltojava> element.
> A point to be noted is the user will have to use SAAJ to construc messages to invoke the webservice and has to decode the return message (if any) using SAAJ.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
18 years, 2 months