You are viewing a plain text version of this content. The canonical link for it is here.
Posted to rampart-dev@ws.apache.org by Eran Chinthaka <er...@gmail.com> on 2009/09/03 18:20:30 UTC
Issues with Rampart
(Wearing my Axis2 user hats on)
When I was trying to use rampart with Axis2 I faced following issues.
1. Almost all the links within Axis2 web site to rampart is dead. For
example, I went to http://ws.apache.org/axis2/modules/index.html and clicked
on distros and the mirrors pointed my that links don't have that distro.
2. Went on to apache rampart web site and links to all the previous releases
are not working. I think previous releases must have been archived and
pointed to that instead of the mirrors. We had a policy only to mirror the
latest releases and archive the others.
3. Axis2 1.5 distro doesn't come with the jars required to engage and run
rampart. I know rampart was moved out from Axis2 project. BUT, there is no
information on Rampart READMEs instructing to download the rampart release,
copy the jars in the lib folder in to axis2 lib.
4. If I only want to use rampart without rahas, it still requires me to add
the trust jar because the TokenStore classes are in it. Is this a mistake or
by design?
With Mettha,
Eran Chinthaka
--------------------------------------------------------------------
Health is the greatest gift; contentment is the greatest wealth; trusting is
the best relationship; nirvana is the highest joy. - Dhammapada
Re: Issues with Rampart
Posted by Nandana Mihindukulasooriya <na...@gmail.com>.
Hi Eran,
Thanks for pointing out. I fixed the stuff mentioned in the mail. I will
go through the two web sites again to see whether I have missed anything.
On Thu, Sep 3, 2009 at 6:20 PM, Eran Chinthaka <er...@gmail.com>wrote:.
> 1. Almost all the links within Axis2 web site to rampart is dead. For
> example, I went to http://ws.apache.org/axis2/modules/index.html and
> clicked
> on distros and the mirrors pointed my that links don't have that distro.
>
Fixed now. Please point if there are any other places that should be fixed.
I will have a look too to see if there are any other dead links to Rampart
module.
> 2. Went on to apache rampart web site and links to all the previous
> releases
> are not working. I think previous releases must have been archived and
> pointed to that instead of the mirrors. We had a policy only to mirror the
> latest releases and archive the others.
>
Yeah, we moved the previous distro to to archive and didn't update the links
to point to archive :( , Fixed now.
> 3. Axis2 1.5 distro doesn't come with the jars required to engage and run
> rampart. I know rampart was moved out from Axis2 project. BUT, there is no
> information on Rampart READMEs instructing to download the rampart release,
> copy the jars in the lib folder in to axis2 lib.
>
The simplet way to do this is to run the ant script in the binary
distribution under samples and it will copy the necessary libraries and
module files to the Axis2 distribution. Yeah, it seems it is not well
documented in the README file. So I added a new section [1], "Installation"
which explicitly says where the files should be copied. Please review and
modify/add if the wording should be changed to make it more precise.
> 4. If I only want to use rampart without rahas, it still requires me to add
> the trust jar because the TokenStore classes are in it. Is this a mistake
> or
> by design?
>
Yes, Rampart engine (rampart-core) , depends on both rampart-policy and
rampart-trust. Some of the functionalities required for Rampart Engine such
as token management is provided by rampart-trust. Rahas module is only
required for WS-SecureConversation and WS-Trust scenarios. So we need to
have the rampart-trust library even if we don't need to use Rahas.
regards,
Nandana
[1] -
https://svn.apache.org/repos/asf/webservices/rampart/branches/java/1_5/release-docs/README.txt
Re: Issues with Rampart
Posted by Nandana Mihindukulasooriya <na...@gmail.com>.
Hi Eran,
Thanks for pointing out. I fixed the stuff mentioned in the mail. I will
go through the two web sites again to see whether I have missed anything.
On Thu, Sep 3, 2009 at 6:20 PM, Eran Chinthaka <er...@gmail.com>wrote:.
> 1. Almost all the links within Axis2 web site to rampart is dead. For
> example, I went to http://ws.apache.org/axis2/modules/index.html and
> clicked
> on distros and the mirrors pointed my that links don't have that distro.
>
Fixed now. Please point if there are any other places that should be fixed.
I will have a look too to see if there are any other dead links to Rampart
module.
> 2. Went on to apache rampart web site and links to all the previous
> releases
> are not working. I think previous releases must have been archived and
> pointed to that instead of the mirrors. We had a policy only to mirror the
> latest releases and archive the others.
>
Yeah, we moved the previous distro to to archive and didn't update the links
to point to archive :( , Fixed now.
> 3. Axis2 1.5 distro doesn't come with the jars required to engage and run
> rampart. I know rampart was moved out from Axis2 project. BUT, there is no
> information on Rampart READMEs instructing to download the rampart release,
> copy the jars in the lib folder in to axis2 lib.
>
The simplet way to do this is to run the ant script in the binary
distribution under samples and it will copy the necessary libraries and
module files to the Axis2 distribution. Yeah, it seems it is not well
documented in the README file. So I added a new section [1], "Installation"
which explicitly says where the files should be copied. Please review and
modify/add if the wording should be changed to make it more precise.
> 4. If I only want to use rampart without rahas, it still requires me to add
> the trust jar because the TokenStore classes are in it. Is this a mistake
> or
> by design?
>
Yes, Rampart engine (rampart-core) , depends on both rampart-policy and
rampart-trust. Some of the functionalities required for Rampart Engine such
as token management is provided by rampart-trust. Rahas module is only
required for WS-SecureConversation and WS-Trust scenarios. So we need to
have the rampart-trust library even if we don't need to use Rahas.
regards,
Nandana
[1] -
https://svn.apache.org/repos/asf/webservices/rampart/branches/java/1_5/release-docs/README.txt