On Mar 20, 2009, at 2:48 PM, Jonathan Gallimore wrote:

I guess I'm thinking of something along the lines of:

<openejb-jar xmlns="http://openejb.apache.org/xml/ns/openejb-jar-2.2";>
 <global-ws-security>
   <configuration>
wss4j.in.action = Encrypt Signature
wss4j.in.signaturePropFile = path to file/ CalculatorSecurity.properties wss4j.in.encryptionPropFile = path to file/ CalculatorSecurity.properties

wss4j.out.action = Encrypt Signature
wss4j.out.signaturePropFile = path to file/ CalculatorSecurity.properties wss4j.out.encryptionPropFile = path to file/ CalculatorSecurity.properties
wss4j.out.user = something
wss4j.out.encryptionUser = bod
wss4j.out.signatureKeyIdentifier = DirectReference
wss4j.out.encryptionSymAlgorithm =
http://www.w3.org/2001/04/xmlenc#tripledes-cbc
...
   </configuration>
 </global-ws-security>

 <enterprise-beans>
     <session>
         <ejb-name>CalculatorImpl</ejb-name>
         <web-service-security>
             <security-realm-name/>
             <transport-guarantee>NONE</transport-guarantee>
             <auth-method>WS-SECURITY</auth-method>

             <configuration>
wss4j.some_bean_specific_property = foo
...
             </configuration>

         </web-service-security>
     </session>
 </enterprise-beans>
</openejb-jar>

Another thought is that if the properties all start with "wss4j." we could easily sift them out of the various existing properties buckets and do full overriding like we do with other things. In other words we'd take all "wss4j." properties from the system properties, override them with the "wss4j." system instance properties, override them with the "wss4j." openejb-jar.xml properties, and override them with "wss4j." openejb-jar.xml properties for bean foo. We don't have a per bean properties bucket in the openejb-jar.xml now, but we could add one.


-David

Reply via email to