[jira] [Commented] (CXF-3635) WS-Trust SPNego (WCF message level spnego)

["Colm O hEigeartaigh (Commented) (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CXF-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13173346#comment-13173346 ] 

Colm O hEigeartaigh commented on CXF-3635:
------------------------------------------

Hi Tom,

I have finally gotten around to reviewing this patch and have committed a fairly extensively modified version of it to trunk (it's a bit more robust and shares some code with the SecureConversation code, which does something very similar):

http://svn.apache.org/viewvc?view=revision&revision=1221366

I have also added support for the STS side of the SPNEGO exchange (solely for testing purposes), and added some system tests based around it. The System tests are here:

http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/java/org/apache/cxf/systest/ws/spnego/SpnegoTokenTest.java?view=markup

The client configuration is here:

http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/resources/org/apache/cxf/systest/ws/spnego/client/client.xml?view=markup

The server configuration is here:

http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/resources/org/apache/cxf/systest/ws/spnego/server/server.xml?view=markup

and the WSDL is here:

http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/resources/org/apache/cxf/systest/ws/spnego/DoubleItSpnego.wsdl?view=markup

The tests are @Ignored as they rely on a KDC. I have not tested this with WCF, only CXF, and so it would be great if you could modify the system test to use your test credentials and let me know if it works or not.

Thanks,

Colm.
                
> WS-Trust SPNego (WCF message level spnego)
> ------------------------------------------
>
>                 Key: CXF-3635
>                 URL: https://issues.apache.org/jira/browse/CXF-3635
>             Project: CXF
>          Issue Type: New Feature
>          Components: WS-* Components
>    Affects Versions: 2.3.5
>            Reporter: Tom Schneider
>            Assignee: Colm O hEigeartaigh
>         Attachments: cxf-wstrust-spnego.zip
>
>
> We have spent time implementing SPNego over WS-Trust support for CXF and wish to submit it for possible inclusion in CXF itself.  (Or at least as an example for others to follow)  This was implemented so we could use the webservice of MS CRM 2011 when configured for 'on-premise' security, although I think WCF 4.0 uses this type of security by default if you explicitly change it.  So I'm sure this functionality would be useful to others.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira