You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@geronimo.apache.org by Alexey Kakunin <ak...@emdev.ru> on 2008/07/01 11:31:16 UTC
Re: Re: Re: Using WS-Security with Geronimo 2.1.1
2008/6/30 Sainath Chowdary <sa...@gmail.com>:
> Hi Alexey Kakunin,
>
> If you know how to work with security and if cxf-rt-ws-security is not
> present in Geronimo then you should try copying the jar file
> (cxf-rt-ws-security-*.*.jar) into the project folder class path default
> location (i.e WEB-INF/lib) and use it is any normal library that is present
> on server.
Yes, this is exactly what I did. I placed required library into project's
WEB-INF/lib, and changed version used from 2.1 to 2.0.2 (in my case it was
not critical) to avoid version incompatibility with CXF bundled with
Geronimo.
It only looks strange, why Geronimo included most, but not all CXF
libraries.
>
>
> Be careful with the version as it can create some mismatches with CXF
> version present in Geronimo (2.0.2-incubator).
>
> Regards,
>
>
> On Sat, Jun 28, 2008 at 1:00 AM, Alexey Kakunin <ak...@emdev.ru> wrote:
>
>> CXF Should work fine with WS-Security - only problem what package
>> cxf-rt-ws-security is not included into Geronimo repository
>>
>> 2008/6/27 <Jo...@bgs-ag.de>:
>>
>>
>>> Hi Lin and all WS-Experts,
>>>
>>> with the help of Sainath I configured now CXF for my Geronimo.
>>> In my Geronimo 2.1.1 Installation I found in the METAINF-File for
>>> cxf-rt-core-2.0.2-incubator.jar:
>>>
>>> Manifest-Version: 1.0
>>> Archiver-Version: Plexus Archiver
>>> Created-By: Apache Maven
>>> Built-By: dkulp
>>> Build-Jdk: 1.5.0_12
>>> Implementation-Title: Apache CXF Runtime Core
>>> Implementation-Vendor: The Apache Software Foundation
>>> Implementation-Vendor-Id: org.apache
>>> Implementation-Version: 2.0.2-incubator
>>> Specification-Title: Apache CXF Runtime Core
>>> Specification-Vendor: The Apache Software Foundation
>>> Specification-Version: 2.0.2-incubator
>>>
>>> So I think Geronimo uses Version 2.0.2 from CXF ? If I understand http://www.nabble.com/-ANNOUNCE--Apache-CXF-2.0.2-incubator-is-released!-to12892222.html
>>> right this version is from September 2007. At the moment 2.1.1 is released.<http://www.nabble.com/-ANNOUNCE--Apache-CXF-2.0.2-incubator-is-released%21-to12892222.html>
>>>
>>> But this old version should work with WS-Security ?!
>>>
>>> * Web Services Standards Support: CXF supports a variety of web service
>>> standards including SOAP, the Basic Profile, WSDL, WS-Addressing,
>>> WS-Policy, WS-ReliableMessaging, and WS-Security.
>>>
>>> Mit freundlichen Grüßen / Kind regards*
>>> Josef Eisele*
>>> *
>>> Direkt: +49 (0) 6131 / 914-180*
>>>
>>>
>>>
>>> *"Lin Sun" <li...@gmail.com>*
>>>
>>> 27.06.2008 15:25
>>> Bitte antworten an
>>> user@geronimo.apache.org
>>>
>>> An
>>> user@geronimo.apache.org Kopie
>>> Thema
>>> Re: Re: Using WS-Security with Geronimo 2.1.1
>>>
>>>
>>>
>>>
>>> Hi, You are right that G comes with 2 webservice implementations. I
>>> actually don't know if this function is avail with CXF. I was hoping
>>> others could comment on that.
>>>
>>> Lin
>>>
>>> On Fri, Jun 27, 2008 at 4:37 AM, <Jo...@bgs-ag.de> wrote:
>>> >
>>> > Hi Lin,
>>> >
>>> > thank you very much for your quick response. If I understand you right
>>> > Geronimo comes with 2 webservice implementations: Apache Axis2 and
>>> Apache
>>> > CXF. If we want to use the 'WS Security 1.1" functionality we should
>>> use
>>> > Apache CXF. Is this what you mean?
>>> >
>>> > I haven't found any documentation concerning that topic and a lot of
>>> > questions to this:
>>> > * How can I switch in Geronimo between CXF and Axis2?
>>> > * How can I configure CXF?
>>> > * Is there any documentation on that topic?
>>> >
>>> > Thanx in advance
>>> >
>>> > Josef
>>> >
>>> >
>>> >
>>> >
>>> > "Lin Sun" <li...@gmail.com>
>>> >
>>> > 26.06.2008 16:12
>>> >
>>> > Bitte antworten an
>>> > user@geronimo.apache.org
>>> > An
>>> > user@geronimo.apache.org
>>> > Kopie
>>> > Thema
>>> > Re: Using WS-Security with Geronimo 2.1.1
>>> >
>>> >
>>> >
>>> >
>>> > Hi, I don't think we support WS-Security 1.1 in Geronimo with Axis2
>>> > implmentation. This Rampart module seems to be a seperate module that
>>> is
>>> > not included in Axis2's default installation and are not included in
>>> > Geronimo either AFAIK.
>>> >
>>> > We do have our own version of axis2.xml file, think it is called
>>> > geronimo-axis2.xml file, that is bundled in one of the geronimo-axis2
>>> jars.
>>> >
>>> > This function may be avail with the CXF implmentation.
>>> >
>>> > Lin
>>> >
>>> > On 6/26/08, Josef.Eisele@bgs-ag.de<Jo...@bgs-ag.de> wrote:
>>> >
>>> > Hi all,
>>> >
>>> > we would like to use WS - Security 1.1 in Geronimo. Geronimo uses the
>>> > Webservice Framework AXIS-2, therefore the WS-Security Rampart has to
>>> be
>>> > used ?
>>> > I found infos howto config Rampart:
>>> > http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html
>>> >
>>> > Is this the right way, or should we use another WS open source stack
>>> like
>>> > Apache CXF, JBossWS or Sun's Metro?
>>> > Is there any documentation howto config/integrate the
>>> Security-Functionality
>>> > into Geronimo?
>>> > (With JavaEE5 everything is so easy, @WebService is enough and the
>>> > Webservice is running. I have no clue even how to get started with the
>>> > configuration of Axis2:
>>> >
>>> > from
>>> <http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html>http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html
>>> :
>>> > ....
>>> > First it should be engaged by inserting the following in the axis2.xml
>>> file.
>>> >
>>> > <module ref="rampart"/>
>>> >
>>> > ...
>>> > => I couldn't find the axis2.xml File :-(
>>> > )
>>> >
>>> > Any help would be wonderful.
>>> >
>>> > Josef
>>> >
>>> > ________________________________
>>> > BGS Beratungsgesellschaft
>>> > Software Systemplanung AG
>>> >
>>> > Niederlassung Rhein/Main
>>> > Robert-Koch-Straße 41
>>> > 55129 Mainz
>>> > Fon: +49 (0) 6131 / 914-0
>>> > Fax: +49 (0) 6131 / 914-400
>>> > www.bgs-ag.deGeschäftssitz Mainz
>>> > Registergericht
>>> > Amtsgericht Mainz
>>> > HRB 62 50
>>> > Aufsichtsratsvorsitzender
>>> > Dr. Wolfgang Trommer
>>> > Vorstand
>>> > Hanspeter Gau
>>> > Hermann Kiefer
>>> > Nils Manegold
>>> > Heinz-Jörg Zimmermann
>>> >
>>> > ________________________________
>>> > BGS Beratungsgesellschaft
>>> > Software Systemplanung AG
>>> > Niederlassung Rhein/Main
>>> > Robert-Koch-Straße 41
>>> > 55129 Mainz
>>> > Fon: +49 (0) 6131 / 914-0
>>> > Fax: +49 (0) 6131 / 914-400
>>> > www.bgs-ag.de Geschäftssitz Mainz
>>> > Registergericht
>>> > Amtsgericht Mainz
>>> > HRB 62 50
>>> > Aufsichtsratsvorsitzender
>>> > Dr. Wolfgang Trommer
>>> > Vorstand
>>> > Hanspeter Gau
>>> > Hermann Kiefer
>>> > Nils Manegold
>>> > Heinz-Jörg Zimmermann
>>> >
>>> >
>>> <http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html>
>>> ------------------------------
>>> BGS Beratungsgesellschaft
>>> Software Systemplanung AG *Niederlassung Rhein/Main*
>>> Robert-Koch-Straße 41
>>> 55129 Mainz
>>> Fon: +49 (0) 6131 / 914-0
>>> Fax: +49 (0) 6131 / 914-400
>>> www.bgs-ag.de *Geschäftssitz Mainz*
>>> *Registergericht*
>>> Amtsgericht Mainz
>>> HRB 62 50
>>> *Aufsichtsratsvorsitzender*
>>> Dr. Wolfgang Trommer
>>> *Vorstand*
>>> Hanspeter Gau
>>> Hermann Kiefer
>>> Nils Manegold
>>> Heinz-Jörg Zimmermann [image: BGS Systemplanung AG]<http://www.bgs-ag.de>
>>>
>>> [image: Ein Unternehmen der nextevolution consulting group]<http://www.nextevolution.de>
>>>
>>
>>
>>
>> --
>> With best regards,
>> Alexey Kakunin
>
>
>
>
> --
> Sainath Chowdary
> B.Tech III yr, Spring Semester
> Electronics & Communication Engg
> Indian Institute of Technology Roorkee
>
--
With best regards,
Alexey Kakunin
Re: Re: Re: Using WS-Security with Geronimo 2.1.1
Posted by Daniel Kulp <dk...@apache.org>.
Geronimo pretty much includes just the parts of CXF that are needed to pass
the JAX-WS parts of the TCK. It doesn't include the "extra" things like
ws-addressing, ws-security, ws-rm, aegis databinding, etc.... Geronimo
didn't need them so they didn't pull them in.
When adding the jar like that, keep in mind that you may need other
dependencies like wss4j, xml-sec, etc.. that ws-security requires that might
not be shipped with Geronimo.
One thing to keep in mind is that the CXF ws-security implementation (and
the Axis2/Rampart implementation as well) is based on WSS4J which isn't up
to WS-Security 1.1 level yet. Some of the profiles it supports are "close"
to 1.1 levels, but for the most part, it's 1.0. A note to the wss4j dev
list (wss4j-dev@ws.apache.org) would probably a good start to figure out
what wss4j supports.
That said, it would be great if Geronimo could update to CXF 2.0.7
(non-incubator) for a 2.1.2 release.
Dan
Alexey Kakunin-3 wrote:
>
> 2008/6/30 Sainath Chowdary <sa...@gmail.com>:
>
>> Hi Alexey Kakunin,
>>
>> If you know how to work with security and if cxf-rt-ws-security is not
>> present in Geronimo then you should try copying the jar file
>> (cxf-rt-ws-security-*.*.jar) into the project folder class path default
>> location (i.e WEB-INF/lib) and use it is any normal library that is
>> present
>> on server.
>
> Yes, this is exactly what I did. I placed required library into project's
> WEB-INF/lib, and changed version used from 2.1 to 2.0.2 (in my case it was
> not critical) to avoid version incompatibility with CXF bundled with
> Geronimo.
> It only looks strange, why Geronimo included most, but not all CXF
> libraries.
>
>
>>
>>
>> Be careful with the version as it can create some mismatches with CXF
>> version present in Geronimo (2.0.2-incubator).
>>
>> Regards,
>>
>>
>> On Sat, Jun 28, 2008 at 1:00 AM, Alexey Kakunin <ak...@emdev.ru>
>> wrote:
>>
>>> CXF Should work fine with WS-Security - only problem what package
>>> cxf-rt-ws-security is not included into Geronimo repository
>>>
>>> 2008/6/27 <Jo...@bgs-ag.de>:
>>>
>>>
>>>> Hi Lin and all WS-Experts,
>>>>
>>>> with the help of Sainath I configured now CXF for my Geronimo.
>>>> In my Geronimo 2.1.1 Installation I found in the METAINF-File for
>>>> cxf-rt-core-2.0.2-incubator.jar:
>>>>
>>>> Manifest-Version: 1.0
>>>> Archiver-Version: Plexus Archiver
>>>> Created-By: Apache Maven
>>>> Built-By: dkulp
>>>> Build-Jdk: 1.5.0_12
>>>> Implementation-Title: Apache CXF Runtime Core
>>>> Implementation-Vendor: The Apache Software Foundation
>>>> Implementation-Vendor-Id: org.apache
>>>> Implementation-Version: 2.0.2-incubator
>>>> Specification-Title: Apache CXF Runtime Core
>>>> Specification-Vendor: The Apache Software Foundation
>>>> Specification-Version: 2.0.2-incubator
>>>>
>>>> So I think Geronimo uses Version 2.0.2 from CXF ? If I understand
>>>> http://www.nabble.com/-ANNOUNCE--Apache-CXF-2.0.2-incubator-is-released!-to12892222.html
>>>> right this version is from September 2007. At the moment 2.1.1 is
>>>> released.<http://www.nabble.com/-ANNOUNCE--Apache-CXF-2.0.2-incubator-is-released%21-to12892222.html>
>>>>
>>>> But this old version should work with WS-Security ?!
>>>>
>>>> * Web Services Standards Support: CXF supports a variety of web service
>>>> standards including SOAP, the Basic Profile, WSDL, WS-Addressing,
>>>> WS-Policy, WS-ReliableMessaging, and WS-Security.
>>>>
>>>> Mit freundlichen Grüßen / Kind regards*
>>>> Josef Eisele*
>>>> *
>>>> Direkt: +49 (0) 6131 / 914-180*
>>>>
>>>>
>>>>
>>>> *"Lin Sun" <li...@gmail.com>*
>>>>
>>>> 27.06.2008 15:25
>>>> Bitte antworten an
>>>> user@geronimo.apache.org
>>>>
>>>> An
>>>> user@geronimo.apache.org Kopie
>>>> Thema
>>>> Re: Re: Using WS-Security with Geronimo 2.1.1
>>>>
>>>>
>>>>
>>>>
>>>> Hi, You are right that G comes with 2 webservice implementations. I
>>>> actually don't know if this function is avail with CXF. I was hoping
>>>> others could comment on that.
>>>>
>>>> Lin
>>>>
>>>> On Fri, Jun 27, 2008 at 4:37 AM, <Jo...@bgs-ag.de> wrote:
>>>> >
>>>> > Hi Lin,
>>>> >
>>>> > thank you very much for your quick response. If I understand you
>>>> right
>>>> > Geronimo comes with 2 webservice implementations: Apache Axis2 and
>>>> Apache
>>>> > CXF. If we want to use the 'WS Security 1.1" functionality we should
>>>> use
>>>> > Apache CXF. Is this what you mean?
>>>> >
>>>> > I haven't found any documentation concerning that topic and a lot of
>>>> > questions to this:
>>>> > * How can I switch in Geronimo between CXF and Axis2?
>>>> > * How can I configure CXF?
>>>> > * Is there any documentation on that topic?
>>>> >
>>>> > Thanx in advance
>>>> >
>>>> > Josef
>>>> >
>>>> >
>>>> >
>>>> >
>>>> > "Lin Sun" <li...@gmail.com>
>>>> >
>>>> > 26.06.2008 16:12
>>>> >
>>>> > Bitte antworten an
>>>> > user@geronimo.apache.org
>>>> > An
>>>> > user@geronimo.apache.org
>>>> > Kopie
>>>> > Thema
>>>> > Re: Using WS-Security with Geronimo 2.1.1
>>>> >
>>>> >
>>>> >
>>>> >
>>>> > Hi, I don't think we support WS-Security 1.1 in Geronimo with Axis2
>>>> > implmentation. This Rampart module seems to be a seperate module
>>>> that
>>>> is
>>>> > not included in Axis2's default installation and are not included in
>>>> > Geronimo either AFAIK.
>>>> >
>>>> > We do have our own version of axis2.xml file, think it is called
>>>> > geronimo-axis2.xml file, that is bundled in one of the geronimo-axis2
>>>> jars.
>>>> >
>>>> > This function may be avail with the CXF implmentation.
>>>> >
>>>> > Lin
>>>> >
>>>> > On 6/26/08, Josef.Eisele@bgs-ag.de<Jo...@bgs-ag.de> wrote:
>>>> >
>>>> > Hi all,
>>>> >
>>>> > we would like to use WS - Security 1.1 in Geronimo. Geronimo uses the
>>>> > Webservice Framework AXIS-2, therefore the WS-Security Rampart has to
>>>> be
>>>> > used ?
>>>> > I found infos howto config Rampart:
>>>> > http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html
>>>> >
>>>> > Is this the right way, or should we use another WS open source stack
>>>> like
>>>> > Apache CXF, JBossWS or Sun's Metro?
>>>> > Is there any documentation howto config/integrate the
>>>> Security-Functionality
>>>> > into Geronimo?
>>>> > (With JavaEE5 everything is so easy, @WebService is enough and the
>>>> > Webservice is running. I have no clue even how to get started with
>>>> the
>>>> > configuration of Axis2:
>>>> >
>>>> > from
>>>> <http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html>http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html
>>>> :
>>>> > ....
>>>> > First it should be engaged by inserting the following in the
>>>> axis2.xml
>>>> file.
>>>> >
>>>> > <module ref="rampart"/>
>>>> >
>>>> > ...
>>>> > => I couldn't find the axis2.xml File :-(
>>>> > )
>>>> >
>>>> > Any help would be wonderful.
>>>> >
>>>> > Josef
>>>> >
>>>> > ________________________________
>>>> > BGS Beratungsgesellschaft
>>>> > Software Systemplanung AG
>>>> >
>>>> > Niederlassung Rhein/Main
>>>> > Robert-Koch-Straße 41
>>>> > 55129 Mainz
>>>> > Fon: +49 (0) 6131 / 914-0
>>>> > Fax: +49 (0) 6131 / 914-400
>>>> > www.bgs-ag.deGeschäftssitz Mainz
>>>> > Registergericht
>>>> > Amtsgericht Mainz
>>>> > HRB 62 50
>>>> > Aufsichtsratsvorsitzender
>>>> > Dr. Wolfgang Trommer
>>>> > Vorstand
>>>> > Hanspeter Gau
>>>> > Hermann Kiefer
>>>> > Nils Manegold
>>>> > Heinz-Jörg Zimmermann
>>>> >
>>>> > ________________________________
>>>> > BGS Beratungsgesellschaft
>>>> > Software Systemplanung AG
>>>> > Niederlassung Rhein/Main
>>>> > Robert-Koch-Straße 41
>>>> > 55129 Mainz
>>>> > Fon: +49 (0) 6131 / 914-0
>>>> > Fax: +49 (0) 6131 / 914-400
>>>> > www.bgs-ag.de Geschäftssitz Mainz
>>>> > Registergericht
>>>> > Amtsgericht Mainz
>>>> > HRB 62 50
>>>> > Aufsichtsratsvorsitzender
>>>> > Dr. Wolfgang Trommer
>>>> > Vorstand
>>>> > Hanspeter Gau
>>>> > Hermann Kiefer
>>>> > Nils Manegold
>>>> > Heinz-Jörg Zimmermann
>>>> >
>>>> >
>>>> <http://ws.apache.org/axis2/modules/rampart/1_0/security-module.html>
>>>> ------------------------------
>>>> BGS Beratungsgesellschaft
>>>> Software Systemplanung AG *Niederlassung Rhein/Main*
>>>> Robert-Koch-Straße 41
>>>> 55129 Mainz
>>>> Fon: +49 (0) 6131 / 914-0
>>>> Fax: +49 (0) 6131 / 914-400
>>>> www.bgs-ag.de *Geschäftssitz Mainz*
>>>> *Registergericht*
>>>> Amtsgericht Mainz
>>>> HRB 62 50
>>>> *Aufsichtsratsvorsitzender*
>>>> Dr. Wolfgang Trommer
>>>> *Vorstand*
>>>> Hanspeter Gau
>>>> Hermann Kiefer
>>>> Nils Manegold
>>>> Heinz-Jörg Zimmermann [image: BGS Systemplanung
>>>> AG]<http://www.bgs-ag.de>
>>>>
>>>> [image: Ein Unternehmen der nextevolution consulting
>>>> group]<http://www.nextevolution.de>
>>>>
>>>
>>>
>>>
>>> --
>>> With best regards,
>>> Alexey Kakunin
>>
>>
>>
>>
>> --
>> Sainath Chowdary
>> B.Tech III yr, Spring Semester
>> Electronics & Communication Engg
>> Indian Institute of Technology Roorkee
>>
>
>
>
> --
> With best regards,
> Alexey Kakunin
>
>
--
View this message in context: http://www.nabble.com/Using-WS-Security-with-Geronimo-2.1.1-tp18132211s134p18345527.html
Sent from the Apache Geronimo - Users mailing list archive at Nabble.com.