A few additions
From: Brian Reinhold [mailto:brianreinh...@lampreynetworks.com] Sent: Tuesday, October 30, 2012 10:38 AM To: java-dev@axis.apache.org; rterce...@gmail.com Subject: Configure Rampart STS I am trying to understand how to configure my own STS service to generate a custom SAML token. The instructions are confusing. First it states to remove the default rampart.mar from the modules. In my modules there is both a rampart.mar and a rahas.mar. Then it states to create a service.xml pointing to one's custom implementation of the TokenIssuer interface. The contents of the example service.xml provided looks very similar to the contents of the rahas.mar module and bears no resemblance to the rampart.mar. In addition, there is a 'saml-issuer-config' value of the configuration element. I have no idea what that element represents. Do I need to make some type of file containing configuration parameters, and if I do, what are the elements that go in it? Has anybody ever done this? Do I have to play with the axis.xml? Any insight would be greatly appreciated! Thanks, Brian PS Here is some stuff I found no documentation on with respect to saml-issuer-config <parameter name="saml-issuer-config"> <saml-issuer-config> <issuerName>SAMPLE_STS</issuerName> <issuerKeyAlias>service</issuerKeyAlias> <issuerKeyPassword>apache</issuerKeyPassword> <cryptoProperties> <crypto provider="org.apache.ws.security.components.crypto.Merlin"> <property name="org.apache.ws.security.crypto.merlin.keystore.type">JKS</property> <property name="org.apache.ws.security.crypto.merlin.file">service.jks</property> <property name="org.apache.ws.security.crypto.merlin.keystore.password">apache</proper ty> </crypto> </cryptoProperties> <timeToLive>864000000000</timeToLive> <keySize>256</keySize> <addRequestedAttachedRef /> <addRequestedUnattachedRef /> <keyComputation>2</keyComputation> <proofKeyType>BinarySecret</proofKeyType> <trusted-services> <service alias="service">*</service> </trusted-services> </saml-issuer-config> </parameter> There are several xml elements I cannot find documented anywhere except for the cryptoProperties. Some are easier to GUESS; but it would be nice not to guess. The bigger question is what other parameters exist that I don't see in this example? In general, the documentation on the xml part of Axis2/Rampart is lacking yet is so critical to its use. Does anyone have all the options one can place into the service.xmls and other xml config files (where ever they may be) documented?
