You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by "S. Ali Tokmen" <sa...@bull.net> on 2010/03/04 10:52:29 UTC

Issue with CXF bundle's imports

Hello

In its version 2.2.6, the cxf-bundle-minimal has a certain number of 
imports; some of them are optional and some other mandatory.

One that's mandatory is org.apache.xml.security, but I have the 
impression that it actually is not: I've modified the bundle so this 
dependency is optional, and it still is working very well in my use cases.

More interestingly, org.apache.ws.security* is already marked as 
resolution:=optional (see 
https://svn.apache.org/repos/asf/cxf/tags/cxf-2.2.6/distribution/bundle/minimal/pom.xml 
where it's clearly visible)

Would it be possible to also mark the import of org.apache.xml.security* 
as optional as well?

Cheers

-- 

S. Ali Tokmen
savas-ali.tokmen@bull.net

Office: +33 4 76 29 76 19
GSM:    +33 66 43 00 555

Bull, Architect of an Open World TM
http://www.bull.com



Re: Issue with CXF bundle's imports

Posted by "S. Ali Tokmen" <sa...@bull.net>.
Hello

Here's the link to the issue: https://issues.apache.org/jira/browse/CXF-2694

I've also attached a patch

Cheers

S. Ali Tokmen
savas-ali.tokmen@bull.net

Office: +33 4 76 29 76 19
GSM:    +33 66 43 00 555

Bull, Architect of an Open World TM
http://www.bull.com


Le 04/03/2010 23:33, Daniel Kulp a écrit :
> Can you file a JIRA issue?   It definitely looks like it could be made
> optional, but I want to double check a bit before hand.   A jira would make
> sure the idea doesn't get lost.   :-)
>
> Dan
>
>
>
> On Thursday 04 March 2010 7:40:27 am S. Ali Tokmen wrote:
>    
>> Hello
>>
>> No, I am not. And my request was because there are many Web Services
>> that don't actually require any security policy (stock ticker, weather,
>> ...) and it's a pity to require to have it if not needed.
>>
>> More importantly, org.apache.ws.security is already marked as optional.
>> Only org.apache.xml.security is not...
>>
>> Cheers
>>
>> S. Ali Tokmen
>> savas-ali.tokmen@bull.net
>>
>> Office: +33 4 76 29 76 19
>> GSM:    +33 66 43 00 555
>>
>> Bull, Architect of an Open World TM
>> http://www.bull.com
>>
>> Le 04/03/2010 13:09, Glen Mazza a écrit :
>>      
>>> Unsure, but I think that is marked as mandatory so that WS-SecurityPolicy
>>> will be activated by default (out-of-the-box).  Are you using security
>>> policy statements in your WSDL?  If not, that might be why CXF is working
>>> for you without that dependency.
>>>
>>> Glen
>>>
>>> S. Ali Tokmen-4 wrote:
>>>        
>>>> Hello
>>>>
>>>> In its version 2.2.6, the cxf-bundle-minimal has a certain number of
>>>> imports; some of them are optional and some other mandatory.
>>>>
>>>> One that's mandatory is org.apache.xml.security, but I have the
>>>> impression that it actually is not: I've modified the bundle so this
>>>> dependency is optional, and it still is working very well in my use
>>>> cases.
>>>>
>>>> More interestingly, org.apache.ws.security* is already marked as
>>>> resolution:=optional (see
>>>> https://svn.apache.org/repos/asf/cxf/tags/cxf-2.2.6/distribution/bundle/
>>>> minimal/pom.xml where it's clearly visible)
>>>>
>>>> Would it be possible to also mark the import of org.apache.xml.security*
>>>> as optional as well?
>>>>
>>>> Cheers
>>>>
>>>>
>>>> S. Ali Tokmen
>>>> savas-ali.tokmen@bull.net
>>>>
>>>> Office: +33 4 76 29 76 19
>>>> GSM:    +33 66 43 00 555
>>>>
>>>> Bull, Architect of an Open World TM
>>>> http://www.bull.com
>>>>          
>    


Re: Issue with CXF bundle's imports

Posted by Daniel Kulp <dk...@apache.org>.
Can you file a JIRA issue?   It definitely looks like it could be made 
optional, but I want to double check a bit before hand.   A jira would make 
sure the idea doesn't get lost.   :-)

Dan



On Thursday 04 March 2010 7:40:27 am S. Ali Tokmen wrote:
> Hello
> 
> No, I am not. And my request was because there are many Web Services
> that don't actually require any security policy (stock ticker, weather,
> ...) and it's a pity to require to have it if not needed.
> 
> More importantly, org.apache.ws.security is already marked as optional.
> Only org.apache.xml.security is not...
> 
> Cheers
> 
> S. Ali Tokmen
> savas-ali.tokmen@bull.net
> 
> Office: +33 4 76 29 76 19
> GSM:    +33 66 43 00 555
> 
> Bull, Architect of an Open World TM
> http://www.bull.com
> 
> Le 04/03/2010 13:09, Glen Mazza a écrit :
> > Unsure, but I think that is marked as mandatory so that WS-SecurityPolicy
> > will be activated by default (out-of-the-box).  Are you using security
> > policy statements in your WSDL?  If not, that might be why CXF is working
> > for you without that dependency.
> > 
> > Glen
> > 
> > S. Ali Tokmen-4 wrote:
> >> Hello
> >> 
> >> In its version 2.2.6, the cxf-bundle-minimal has a certain number of
> >> imports; some of them are optional and some other mandatory.
> >> 
> >> One that's mandatory is org.apache.xml.security, but I have the
> >> impression that it actually is not: I've modified the bundle so this
> >> dependency is optional, and it still is working very well in my use
> >> cases.
> >> 
> >> More interestingly, org.apache.ws.security* is already marked as
> >> resolution:=optional (see
> >> https://svn.apache.org/repos/asf/cxf/tags/cxf-2.2.6/distribution/bundle/
> >> minimal/pom.xml where it's clearly visible)
> >> 
> >> Would it be possible to also mark the import of org.apache.xml.security*
> >> as optional as well?
> >> 
> >> Cheers
> >> 
> >> 
> >> S. Ali Tokmen
> >> savas-ali.tokmen@bull.net
> >> 
> >> Office: +33 4 76 29 76 19
> >> GSM:    +33 66 43 00 555
> >> 
> >> Bull, Architect of an Open World TM
> >> http://www.bull.com

-- 
Daniel Kulp
dkulp@apache.org
http://dankulp.com/blog

Re: Issue with CXF bundle's imports

Posted by "S. Ali Tokmen" <sa...@bull.net>.
Hello

No, I am not. And my request was because there are many Web Services 
that don't actually require any security policy (stock ticker, weather, 
...) and it's a pity to require to have it if not needed.

More importantly, org.apache.ws.security is already marked as optional. 
Only org.apache.xml.security is not...

Cheers

S. Ali Tokmen
savas-ali.tokmen@bull.net

Office: +33 4 76 29 76 19
GSM:    +33 66 43 00 555

Bull, Architect of an Open World TM
http://www.bull.com


Le 04/03/2010 13:09, Glen Mazza a écrit :
> Unsure, but I think that is marked as mandatory so that WS-SecurityPolicy
> will be activated by default (out-of-the-box).  Are you using security
> policy statements in your WSDL?  If not, that might be why CXF is working
> for you without that dependency.
>
> Glen
>
>
> S. Ali Tokmen-4 wrote:
>    
>> Hello
>>
>> In its version 2.2.6, the cxf-bundle-minimal has a certain number of
>> imports; some of them are optional and some other mandatory.
>>
>> One that's mandatory is org.apache.xml.security, but I have the
>> impression that it actually is not: I've modified the bundle so this
>> dependency is optional, and it still is working very well in my use cases.
>>
>> More interestingly, org.apache.ws.security* is already marked as
>> resolution:=optional (see
>> https://svn.apache.org/repos/asf/cxf/tags/cxf-2.2.6/distribution/bundle/minimal/pom.xml
>> where it's clearly visible)
>>
>> Would it be possible to also mark the import of org.apache.xml.security*
>> as optional as well?
>>
>> Cheers
>>
>> -- 
>>
>> S. Ali Tokmen
>> savas-ali.tokmen@bull.net
>>
>> Office: +33 4 76 29 76 19
>> GSM:    +33 66 43 00 555
>>
>> Bull, Architect of an Open World TM
>> http://www.bull.com
>>
>>
>>
>>
>>      
>    


Re: Issue with CXF bundle's imports

Posted by Glen Mazza <gl...@gmail.com>.
Unsure, but I think that is marked as mandatory so that WS-SecurityPolicy
will be activated by default (out-of-the-box).  Are you using security
policy statements in your WSDL?  If not, that might be why CXF is working
for you without that dependency.

Glen


S. Ali Tokmen-4 wrote:
> 
> Hello
> 
> In its version 2.2.6, the cxf-bundle-minimal has a certain number of 
> imports; some of them are optional and some other mandatory.
> 
> One that's mandatory is org.apache.xml.security, but I have the 
> impression that it actually is not: I've modified the bundle so this 
> dependency is optional, and it still is working very well in my use cases.
> 
> More interestingly, org.apache.ws.security* is already marked as 
> resolution:=optional (see 
> https://svn.apache.org/repos/asf/cxf/tags/cxf-2.2.6/distribution/bundle/minimal/pom.xml 
> where it's clearly visible)
> 
> Would it be possible to also mark the import of org.apache.xml.security* 
> as optional as well?
> 
> Cheers
> 
> -- 
> 
> S. Ali Tokmen
> savas-ali.tokmen@bull.net
> 
> Office: +33 4 76 29 76 19
> GSM:    +33 66 43 00 555
> 
> Bull, Architect of an Open World TM
> http://www.bull.com
> 
> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Issue-with-CXF-bundle%27s-imports-tp27778720p27779932.html
Sent from the cxf-user mailing list archive at Nabble.com.