By using xFire, CAS supports remoting its protocol, which can help in 
this situation (we actually use it at Rutgers to authenticate 
services).  CAS also supports remoting its protocol via any of the 
remoting options Spring supports.

I'm not sure how your application/web services are set up, but we 
generally recommend using the proxying features of CAS if your web 
service is acting on behalf of a user (i.e. the user logs into a portal 
that accesses a web service on their behalf) and the API directly if 
your service is authenticating with the web service.  This is because we 
always preach to only give your credentials to CAS and no one else :-D

This works nicely with Acegi which supports accepting CAS ServiceTickets 
as passwords (when passed with a "_cas_stateless_" username.

-Scott

Matt DeHoust wrote:
> Check out CAS. It may be what you are looking for.
>
> -Matt
>
> On 7/17/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>   
>> I have been asked to write a webservice in java that when given a
>> username/password will return a security token to a .net client so that .net
>> can then use it for future calls to java Webservices and acegisecurity will
>> kick in.  I know that this doesn't sound desirable, but should it be
>> tolerable?  It is unclear to me how I would create a token and pass it back
>> from the webservice call as part of the soap body –  I don't see how to
>> obtain the entire token and serialize it.
>> Can anyone advise here?
>> Thanks a lot.
>>
>>     
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Home: http://acegisecurity.org
> Acegisecurity-developer mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
>   


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to