You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@ws.apache.org by chris snow <ch...@gmail.com> on 2012/03/26 21:50:05 UTC

example wsdl's / policies for wss4j configurations

Hi Forum,

Are there any example wsdl's / policies and the associated wss4j
configuration parameters?

The reason for asking is that in my organisation, we are investigating
using ws-security.  However, the solution architects would be responsible
for designing the wsdl's and policies, but the developers would be
responsible for configuring wss4j to implement the designs.

Ultimately, I would see a catalog of blueprints being created showing
example wsdl's with policies, that the developers could use to guide them
in the implementation.

Many thanks in advance,

Chris

Re: example wsdl's / policies for wss4j configurations

Posted by Freeman Fang <fr...@gmail.com>.
Hi,

There're lots of examples in CXF code base, in systests/ws-security  
folder, for a instance, this one[1]

[1]https://svn.apache.org/repos/asf/cxf/trunk/systests/ws-security/src/test/resources/org/apache/cxf/systest/ws/security/DoubleIt.wsdl

Freeman
On 2012-3-27, at 上午3:50, chris snow wrote:

> Hi Forum,
>
> Are there any example wsdl's / policies and the associated wss4j  
> configuration parameters?
>
> The reason for asking is that in my organisation, we are  
> investigating using ws-security.  However, the solution architects  
> would be responsible for designing the wsdl's and policies, but the  
> developers would be responsible for configuring wss4j to implement  
> the designs.
>
> Ultimately, I would see a catalog of blueprints being created  
> showing example wsdl's with policies, that the developers could use  
> to guide them in the implementation.
>
> Many thanks in advance,
>
> Chris

---------------------------------------------
Freeman Fang

FuseSource
Email:ffang@fusesource.com
Web: fusesource.com
Twitter: freemanfang
Blog: http://freemanfang.blogspot.com










Re: example wsdl's / policies for wss4j configurations

Posted by chris snow <ch...@gmail.com>.
Thanks for the excellent info guys.

Re: example wsdl's / policies for wss4j configurations

Posted by Daniel Kulp <dk...@apache.org>.
On Monday, March 26, 2012 08:50:05 PM chris snow wrote:
> Hi Forum,
> 
> Are there any example wsdl's / policies and the associated wss4j
> configuration parameters?
> 
> The reason for asking is that in my organisation, we are investigating
> using ws-security.  However, the solution architects would be responsible
> for designing the wsdl's and policies, but the developers would be
> responsible for configuring wss4j to implement the designs.
> 
> Ultimately, I would see a catalog of blueprints being created showing
> example wsdl's with policies, that the developers could use to guide them
> in the implementation.
> 
> Many thanks in advance,

Configuring raw WSS4J classes based on WS-SecurityPolicy documents is 
extremely complex as the security policy docs are extremely complex.   There 
really isn't an easy "mapping" for that.   You're best bet is to use a soap 
runtime that supports WS-SecurityPolicy  directly such as CXF or 
Axis2/Rampart or Metro.   

The WSS4J 2.0/trunk work being done will allow WSS4J to directly support the 
policies, but that's a little ways off and would be using new code paths and 
everything.


-- 
Daniel Kulp
dkulp@apache.org - http://dankulp.com/blog
Talend Community Coder - http://coders.talend.com