You are viewing a plain text version of this content. The canonical link for it is here.
Posted to wss4j-dev@ws.apache.org by at4david <at...@gmail.com> on 2007/07/10 10:33:31 UTC

WSS4j:Differents Security Configurations on Server for differents kind of requests

Hi, I need to achieve two security configurations on server side, and I tried
to do it with differents "actor" and differents "handler names" to achieve
that one client request with UsernameToken and another request with
Signature. How could I do that??

I need that the server can support differents security configurations to
differents client requests.


I show below my deployserver.wsdd and  my deployclient.wsdd 

I need to know how implementing differents security configurations to
differents kind of requests but there is something that I am doing bad.
 
deployserver.wsdd

<deployment xmlns="http://xml.apache.org/axis/wsdd/"
            xmlns:java="http://xml.apache.org/axis/wsdd/providers/java">
 <service name="Calculadora" provider="java:RPC">
  <requestFlow>
   <handler name="RESTAP"
type="java:org.apache.ws.axis.security.WSDoAllReceiver">
    <parameter name="actor" value="clienteresta"/>
    <parameter name="passwordCallbackClass"  value="PWCallback"/>
    <parameter name="action" value="Signature" />
    <parameter name="signaturePropFile" value="crypto.properties" />
   </handler>
   <handler name="SUMAP"
type="java:org.apache.ws.axis.security.WSDoAllReceiver">
     <parameter name="actor" value="clientesuma"/>
     <parameter name="passwordCallbackClass" value="PWCallback"/>
     <parameter name="action" value="UsernameToken"/>	    
   </handler>
    </requestFlow>
  <responseFlow>
      <handler name="RESTARRA"
type="java:org.apache.ws.axis.security.WSDoAllSender" >
	<parameter name="actor" value="clienteresta2"/>
	<parameter name="passwordCallbackClass"  value="PWCallback"/>
    	<parameter name="action" value="Encrypt Signature"/>
	<parameter name="encryptionUser" value="useReqSigCert"/>
	<parameter name="user" value="calculadora" />	
	<parameter name="signaturePropFile" value="signature.properties" />
	<parameter name="encryptionPropFile" value="crypto.properties" />
	<parameter name="signatureKeyIdentifier" value="DirectReference" />
      </handler>
      <handler name="SUMAR"
type="java:org.apache.ws.axis.security.WSDoAllSender" >
    	<parameter name="actor" value="clientesuma2"/>
	<parameter name="passwordCallbackClass"  value="PWCallback"/>
    	<parameter name="action" value="UsernameToken"/>
	<parameter name="user" value="usercalculadora"/> 	      
        <parameter name="passwordType" value="PasswordDigest"/>
      </handler>	
   </responseFlow>	
  <parameter name="className" value="Calculator"/>
  <parameter name="allowedMethods" value="*"/>
 </service>
</deployment>

deployclient1.wsdd

<deployment xmlns="http://xml.apache.org/axis/wsdd/"
xmlns:java="http://xml.apache.org/axis/wsdd/providers/java">
 <transport name="http"
pivot="java:org.apache.axis.transport.http.HTTPSender"/>
  <globalConfiguration >
    <requestFlow>
      <handler name="SUMAP"
type="java:org.apache.ws.axis.security.WSDoAllSender" >
	<parameter name="actor" value="clientesuma"/>
    	<parameter name="user" value="david"/>
    	<parameter name="passwordCallbackClass"  value="PWCallback"/>
    	<parameter name="action" value="UsernameToken"/>
	<parameter name="passwordType" value="PasswordDigest"/>
      </handler>
    </requestFlow>
    <responseFlow>
       <handler name="SUMAR"
type="java:org.apache.ws.axis.security.WSDoAllReceiver">
       <parameter name="actor" value="clientesuma2"/>
	<parameter name="passwordCallbackClass"  value="PWCallback"/>
       <parameter name="action" value="UsernameToken"/>
       </handler>
    </responseFlow>
  </globalConfiguration >
</deployment>


Thank you
-- 
View this message in context: http://www.nabble.com/WSS4j%3ADifferents-Security-Configurations-on-Server-for-differents-kind-of-requests-tf4054492.html#a11516811
Sent from the WSS4J mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: wss4j-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: wss4j-dev-help@ws.apache.org