You are viewing a plain text version of this content. The canonical link for it is here.
Posted to fx-dev@ws.apache.org by Sean Shubin <se...@integralnet.com> on 2005/05/27 20:05:35 UTC
Can anyone tell me where to download the wss4j binaries?
I could not find a link anywhere on the home site:
http://ws.apache.org/ws-fx/wss4j/
Sean Shubin
Re: Can anyone tell me where to download the wss4j binaries?
Posted by Ashok Shah <as...@sfu.ca>.
Hello Werner,
> Second NOTE: recently we discovered a problem in Axis
> that could cause problems if you use the fully dynamic option.
> Thus I would advise to use deploymentfiles to setup
> the handler chain, other parameters like action,
> user, etc. can be set via the configuration properties.
I was wondering if you could brief me on the problem that was discovered
in using the dynamic deploymentfiles option. It is critical for our system
to not use configuration files. Whole environment is setup from the
program including the handlers, actions and other required paramets,
including on the client side.
Apperericate your help.
Thanks,
Ashok.
Re: Can anyone tell me where to download the wss4j binaries?
Posted by Werner Dittmann <We...@t-online.de>.
Ashok,
well it seems that Axis has a problem when you dynamically
(programatically) setup the handler chain as it is done in the JAX-RPC
testcase. The Axis code may not initialize some internal parameters or
properties correctly if you don't use deployment files. Because
of the non-initialized (or wrong initialized) properties it is not
possible to replace the original content of the request with the
security enhanced SOAP request - thus your client will never send a
correct SOAP request with security elements.
Some guys over at the Axis development are just trying to figure out
what is going on.
I will also do some more testing at WSS4J and try to get some more info
about the problem. Already tested some ways for a workaround, but
without success yet.
Regards,
Werner
Ashok Shah schrieb:
> Hello Werner,
>
>
>> Second NOTE: recently we discovered a problem in Axis
>> that could cause problems if you use the fully dynamic option.
>> Thus I would advise to use deploymentfiles to setup
>> the handler chain, other parameters like action,
>> user, etc. can be set via the configuration properties.
>
>
>
> I was wondering if you could brief me on the problem that was
> discovered in using the dynamic deploymentfiles option. It is critical
> for our system to not use configuration files. Whole environment is
> setup from the program including the handlers, actions and other
> required paramets, including on the client side.
>
> Apperericate your help.
>
> Thanks,
>
> Ashok.
>
Re: Can anyone tell me where to download the wss4j binaries?
Posted by Ashok Shah <as...@sfu.ca>.
Hello Werner,
> Second NOTE: recently we discovered a problem in Axis
> that could cause problems if you use the fully dynamic option.
> Thus I would advise to use deploymentfiles to setup
> the handler chain, other parameters like action,
> user, etc. can be set via the configuration properties.
I was wondering if you could brief me on the problem that was discovered
in using the dynamic deploymentfiles option. It is critical for our system
to not use configuration files. Whole environment is setup from the
program including the handlers, actions and other required paramets,
including on the client side.
Apperericate your help.
Thanks,
Ashok.
Re: Can anyone tell me where to download the wss4j binaries?
Posted by Werner Dittmann <We...@t-online.de>.
Hi,
your code configures a HTTP authentication, not the
WSS handler. This is a big difference.
Just adding the handlers as Torgeir proposes is not enough.
The handlers must be configured as well.
first note: first try to do the wohle stuff using normal
Axis client deployment files. A complete dynamic setup
is somewhat more difficult. An example of a dynamic
setup to use the handler can be found in the test/interop
directory (JAXRPC testcase). This testcase uses the
JAX-RPC compliant handler (works similir to the Axis
dependend handlers)
Second NOTE: recently we discovered a problem in Axis
that could cause problems if you use the fully dynamic option.
Thus I would advise to use deploymentfiles to setup
the handler chain, other parameters like action,
user, etc. can be set via the configuration properties.
Torgeir Veimo schrieb:
> On Fri, 2005-05-27 at 11:18 -0700, Sean Shubin wrote:
>
>>Ok, thanks. I was trying to make a SOAP call to an https service like so,
>>
>> private Object invoke(String operationName, Object... params) throws
>>ServiceException, MalformedURLException, RemoteException {
>> String endpoint = WEB_SERVICE_URL;
>> Service service = new Service();
>> Call call = (Call) service.createCall();
>> call.setUsername(USERNAME);
>> call.setPassword(PASSWORD);
>> call.setTargetEndpointAddress(new URL(endpoint));
>> call.setOperationName(operationName);
>> Object ret = call.invoke(params);
>> return ret;
>> }
>>
>>But I would still get the error "This service method requires user
>>authentication. Username/password is required.". Do you know if wss4j
>>has the solution? Or am I looking in the wrong place?
>
>
> Try adding
>
> call.setClientHandlers(new WSDoAllSender(), new WSDoAllReciever());
>
Re: Can anyone tell me where to download the wss4j binaries?
Posted by Torgeir Veimo <to...@pobox.com>.
On Fri, 2005-05-27 at 11:18 -0700, Sean Shubin wrote:
> Ok, thanks. I was trying to make a SOAP call to an https service like so,
>
> private Object invoke(String operationName, Object... params) throws
> ServiceException, MalformedURLException, RemoteException {
> String endpoint = WEB_SERVICE_URL;
> Service service = new Service();
> Call call = (Call) service.createCall();
> call.setUsername(USERNAME);
> call.setPassword(PASSWORD);
> call.setTargetEndpointAddress(new URL(endpoint));
> call.setOperationName(operationName);
> Object ret = call.invoke(params);
> return ret;
> }
>
> But I would still get the error "This service method requires user
> authentication. Username/password is required.". Do you know if wss4j
> has the solution? Or am I looking in the wrong place?
Try adding
call.setClientHandlers(new WSDoAllSender(), new WSDoAllReciever());
--
Torgeir Veimo <to...@pobox.com>
Re: Can anyone tell me where to download the wss4j binaries?
Posted by "José M. Selman" <js...@bee.cl>.
Sean:
WSS4J it's an implementation of Oasis Web Services Security
Specification which basically describes a placeholder for security
information inside a security header. On of the possible "security
tokens" supported by the spec includes the UsernameToken.
When you are using the methods setUsername and setPassword you are
including authentication information but not inside WS-Security's
security header... Then you need to know what kind of authentication
information your service is waiting for and where it's going to look for
it. If your service is expecting a WS-Security header then wss4j is the
right tool for you.
Hope this helps,
Jos� M. Selman
Sean Shubin wrote:
> They implemented it as an https: service with an unsigned certificate,
> so I have already had to go through some hoops to just get the
> non-authenticated methods working.
>
> I shut off certificate checking with the line:
> System.setProperty("axis.socketSecureFactory",
> "org.apache.axis.components.net.SunFakeTrustSocketFactory");
>
> Now according to the docs I have to pass "username" and "password" in
> the soap header for the other methods. The docs say that "This
> information should be passed to the URL".
>
> So I am not 100% certian I need to use wss4j, but as the methods
> call.setUsername() and call.setPassword() aren't working, I don't know
> what else to do.
>
> Jos� M. Selman wrote:
>
>> Yes, I guess so... It might be that the target service is expecting a
>> UsernameToken inside a security header (this is where wss4j comes to
>> play)... However it might be expecting just basic HTTP-based
>> authentication in which case you could just use Axis by itself...
>> Can't you get more information on what the target service is expecting?
>>
>> Jos� M. Selman
>>
>>
>>
>> Sean Shubin wrote:
>>
>>> Ok, thanks. I was trying to make a SOAP call to an https service
>>> like so,
>>>
>>> private Object invoke(String operationName, Object... params)
>>> throws ServiceException, MalformedURLException, RemoteException {
>>> String endpoint = WEB_SERVICE_URL;
>>> Service service = new Service();
>>> Call call = (Call) service.createCall();
>>> call.setUsername(USERNAME);
>>> call.setPassword(PASSWORD);
>>> call.setTargetEndpointAddress(new URL(endpoint));
>>> call.setOperationName(operationName);
>>> Object ret = call.invoke(params);
>>> return ret;
>>> }
>>>
>>> But I would still get the error "This service method requires user
>>> authentication. Username/password is required.". Do you know if
>>> wss4j has the solution? Or am I looking in the wrong place?
>>>
>>>
>>> Jos� M. Selman wrote:
>>>
>>>> As far as I know there are no binaries available for download since
>>>> there hasn't been an official release. You need to check out the
>>>> source from CVS and build ir using either Ant or Maven.
>>>>
>>>> Cheers,
>>>>
>>>> Jos� M. Selman
>>>>
>>>>
>>>>
>>>> Sean Shubin wrote:
>>>>
>>>>> I could not find a link anywhere on the home site:
>>>>>
>>>>> http://ws.apache.org/ws-fx/wss4j/
>>>>>
>>>>> Sean Shubin
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> No virus found in this incoming message.
>>>> Checked by AVG Anti-Virus.
>>>> Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 5/25/2005
>>>>
>>>>
>>>
>> No virus found in this incoming message.
>> Checked by AVG Anti-Virus.
>> Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 5/25/2005
>>
>>
>
Re: Can anyone tell me where to download the wss4j binaries?
Posted by Sean Shubin <se...@integralnet.com>.
They implemented it as an https: service with an unsigned certificate,
so I have already had to go through some hoops to just get the
non-authenticated methods working.
I shut off certificate checking with the line:
System.setProperty("axis.socketSecureFactory",
"org.apache.axis.components.net.SunFakeTrustSocketFactory");
Now according to the docs I have to pass "username" and "password" in
the soap header for the other methods. The docs say that "This
information should be passed to the URL".
So I am not 100% certian I need to use wss4j, but as the methods
call.setUsername() and call.setPassword() aren't working, I don't know
what else to do.
José M. Selman wrote:
> Yes, I guess so... It might be that the target service is expecting a
> UsernameToken inside a security header (this is where wss4j comes to
> play)... However it might be expecting just basic HTTP-based
> authentication in which case you could just use Axis by itself...
> Can't you get more information on what the target service is expecting?
>
> José M. Selman
>
>
>
> Sean Shubin wrote:
>
>> Ok, thanks. I was trying to make a SOAP call to an https service
>> like so,
>>
>> private Object invoke(String operationName, Object... params)
>> throws ServiceException, MalformedURLException, RemoteException {
>> String endpoint = WEB_SERVICE_URL;
>> Service service = new Service();
>> Call call = (Call) service.createCall();
>> call.setUsername(USERNAME);
>> call.setPassword(PASSWORD);
>> call.setTargetEndpointAddress(new URL(endpoint));
>> call.setOperationName(operationName);
>> Object ret = call.invoke(params);
>> return ret;
>> }
>>
>> But I would still get the error "This service method requires user
>> authentication. Username/password is required.". Do you know if
>> wss4j has the solution? Or am I looking in the wrong place?
>>
>>
>> José M. Selman wrote:
>>
>>> As far as I know there are no binaries available for download since
>>> there hasn't been an official release. You need to check out the
>>> source from CVS and build ir using either Ant or Maven.
>>>
>>> Cheers,
>>>
>>> José M. Selman
>>>
>>>
>>>
>>> Sean Shubin wrote:
>>>
>>>> I could not find a link anywhere on the home site:
>>>>
>>>> http://ws.apache.org/ws-fx/wss4j/
>>>>
>>>> Sean Shubin
>>>
>>>
>>>
>>>
>>> No virus found in this incoming message.
>>> Checked by AVG Anti-Virus.
>>> Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 5/25/2005
>>>
>>>
>>
>No virus found in this incoming message.
>Checked by AVG Anti-Virus.
>Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 5/25/2005
>
>
Re: Can anyone tell me where to download the wss4j binaries?
Posted by "José M. Selman" <js...@bee.cl>.
Yes, I guess so... It might be that the target service is expecting a
UsernameToken inside a security header (this is where wss4j comes to
play)... However it might be expecting just basic HTTP-based
authentication in which case you could just use Axis by itself... Can't
you get more information on what the target service is expecting?
Jos� M. Selman
Sean Shubin wrote:
> Ok, thanks. I was trying to make a SOAP call to an https service like
> so,
>
> private Object invoke(String operationName, Object... params)
> throws ServiceException, MalformedURLException, RemoteException {
> String endpoint = WEB_SERVICE_URL;
> Service service = new Service();
> Call call = (Call) service.createCall();
> call.setUsername(USERNAME);
> call.setPassword(PASSWORD);
> call.setTargetEndpointAddress(new URL(endpoint));
> call.setOperationName(operationName);
> Object ret = call.invoke(params);
> return ret;
> }
>
> But I would still get the error "This service method requires user
> authentication. Username/password is required.". Do you know if
> wss4j has the solution? Or am I looking in the wrong place?
>
>
> Jos� M. Selman wrote:
>
>> As far as I know there are no binaries available for download since
>> there hasn't been an official release. You need to check out the
>> source from CVS and build ir using either Ant or Maven.
>>
>> Cheers,
>>
>> Jos� M. Selman
>>
>>
>>
>> Sean Shubin wrote:
>>
>>> I could not find a link anywhere on the home site:
>>>
>>> http://ws.apache.org/ws-fx/wss4j/
>>>
>>> Sean Shubin
>>
>>
>>
>> No virus found in this incoming message.
>> Checked by AVG Anti-Virus.
>> Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 5/25/2005
>>
>>
>
Re: Can anyone tell me where to download the wss4j binaries?
Posted by Sean Shubin <se...@integralnet.com>.
Ok, thanks. I was trying to make a SOAP call to an https service like so,
private Object invoke(String operationName, Object... params) throws
ServiceException, MalformedURLException, RemoteException {
String endpoint = WEB_SERVICE_URL;
Service service = new Service();
Call call = (Call) service.createCall();
call.setUsername(USERNAME);
call.setPassword(PASSWORD);
call.setTargetEndpointAddress(new URL(endpoint));
call.setOperationName(operationName);
Object ret = call.invoke(params);
return ret;
}
But I would still get the error "This service method requires user
authentication. Username/password is required.". Do you know if wss4j
has the solution? Or am I looking in the wrong place?
José M. Selman wrote:
> As far as I know there are no binaries available for download since
> there hasn't been an official release. You need to check out the
> source from CVS and build ir using either Ant or Maven.
>
> Cheers,
>
> José M. Selman
>
>
>
> Sean Shubin wrote:
>
>> I could not find a link anywhere on the home site:
>>
>> http://ws.apache.org/ws-fx/wss4j/
>>
>> Sean Shubin
>
>
>No virus found in this incoming message.
>Checked by AVG Anti-Virus.
>Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 5/25/2005
>
>
Re: Can anyone tell me where to download the wss4j binaries?
Posted by "José M. Selman" <js...@bee.cl>.
As far as I know there are no binaries available for download since
there hasn't been an official release. You need to check out the source
from CVS and build ir using either Ant or Maven.
Cheers,
Jos� M. Selman
Sean Shubin wrote:
> I could not find a link anywhere on the home site:
>
> http://ws.apache.org/ws-fx/wss4j/
>
> Sean Shubin