WSS4J and Kerberos signatures

[Laurence Brockman]

Hello,   Sorry if this is a FAQ but I have been looking for answers to this high and low and have not seen this on the list.   We are going to try and use Kerberos to authenticate users on our SOAP server. What we envision is having the client send down the SOAP request with a service ticket from a KDC. The server (Axis using WSS4J on Tomcat) would then authenticate this user against said KDC. After briefly looking at the documentation within the WSS4J code I think what we would want to do is extend the WSDoAllHandler class (From the org.apache.axis.security.handler package). Is this the right direction to be going in? Has anybody looked at this? I’m relatively new to Axis/WSS4J and some guidance would be awesome!   Thanks, Laurence   Laurence Brockman Server Specialist, Shaw Operations Centre Shaw Communications Inc. Phone : (403) 303-4805 E-mail : [EMAIL PROTECTED]   ACCOUNTABLE    BALANCE    CUSTOMER FOCUSED    INTEGRITY    LOYALTY    POSITIVE, CAN DO ATTITUDE    TEAM PLAYER