You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@servicemix.apache.org by obor <jo...@gmail.com> on 2010/04/12 11:42:52 UTC

Authentication and authorization is ServiceMix

Hello everyone,

We are trying to include authentication and authorization in servicemix. We
have a message that comes from a HTTP/SOAP and we want to go through the ESB
to access a service. 

We suppose we have to transform our message in WSS to access servicemix via
CXF bc (for example), could it be possible?? Is there any tutorial to do it?

Thank you very much in advance
-- 
View this message in context: http://old.nabble.com/Authentication-and-authorization-is-ServiceMix-tp28215627p28215627.html
Sent from the ServiceMix - User mailing list archive at Nabble.com.


Re: Authentication and authorization is ServiceMix

Posted by Freeman Fang <fr...@gmail.com>.
Hi,

My comment inline
On 2010-4-12, at 下午5:42, obor wrote:

>
> Hello everyone,
>
> We are trying to include authentication and authorization in  
> servicemix. We
> have a message that comes from a HTTP/SOAP and we want to go through  
> the ESB
> to access a service.
>
> We suppose we have to transform our message in WSS to access  
> servicemix via
> CXF bc (for example), could it be possible?? Is there any tutorial  
> to do it?
Yeah, it is possible to do it with cxf bc consumer for incoming soap  
message with ws-security UsernameToken action headers. Cxf bc consumer  
can delegate auth to smx AuthenticationService with the username/ 
password from  ws-security UsernameToken action header, so that you  
can restrict certain user to access certain service inside servicemix.

Take a look at CxfBcSecurityJAASTest[1]

Or you can find an cxf-ws-security demo shipped with FUSE ESB 3.4.0.x[2]

[1]https://svn.apache.org/repos/asf/servicemix/components/bindings/servicemix-cxf-bc/trunk/src/test/java/org/apache/servicemix/cxfbc/ws/security/CxfBcSecurityJAASTest.java
[2]http://repo.open.iona.com/maven2/org/apache/servicemix/apache-servicemix/3.4.0.4-fuse/

Freeman
>
> Thank you very much in advance
> -- 
> View this message in context: http://old.nabble.com/Authentication-and-authorization-is-ServiceMix-tp28215627p28215627.html
> Sent from the ServiceMix - User mailing list archive at Nabble.com.
>


-- 
Freeman Fang
------------------------
Open Source SOA: http://fusesource.com