Alessio Soldano [http://community.jboss.org/people/asoldano] created the 
discussion

"Re: Where is jboss-ws-security_1_0.xsd"

To view the discussion, visit: http://community.jboss.org/message/639883#639883

--------------------------------------------------------------
OK, sorry for the late reply on the forum, however here are some explanations 
in order for shading some light on this [1] topic:
* as of today the jbossws-security xsd is not published only, however it's 
available in the jbossws native core library
* the actual issue in your configuration for setting up jbossws-native 
ws-security w/ username token auth is in the fact the jboss-wsse-server.xml 
descriptor above should not have the <username/> element at all. That element 
is a client side configuration element for adding the username token header 
into the message, which is something the client does. The server will 
automatically check for existence of that header and try performing 
authentication. This is the reason why there's no "username" element in the 
"requiresType" in the schema, which is correct. There was an error in the 
samples, that I just noticed after years thanks to your thread (I should have 
checked the sample back when dealing with  
https://issues.jboss.org/browse/JBWS-2414 
https://issues.jboss.org/browse/JBWS-2414 which has basically the explanation 
of your issue)
* the descriptors in the samples are not validated against jbossws-security 
xsd; to be honest this is an area for improvement, even if I honestly think we 
won't spend internal efforts on that given the focus having been moved to 
JBossWS-CXF for WS-* functionalities. Any contribution here is in any case 
accepted
* the  http://community.jboss.org/docs/DOC-13567 
http://community.jboss.org/wiki/JBossWS-AdvancedSamples page needs also to be 
updated; the directions on simply running Ant (default target) was fine at the 
time of the JBossWS 3.1.x build (perhaps 3.2.x too, I haven't check recently), 
but it's not for JBWS 3.4.x / 4.0.x. To be honest the whole wiki needs to 
reviewed together with the website by (or around ;-) ) the time JBossWS 4.0.0 
goes final, because with the latest changes in the JBWS 4 major release, most 
of what there either does not apply anymore or is simply changed.


[1]  http://community.jboss.org/docs/DOC-13567#comment-8346 
http://community.jboss.org/wiki/JBossWS-AdvancedSamples#comment-8346
--------------------------------------------------------------

Reply to this message by going to Community
[http://community.jboss.org/message/639883#639883]

Start a new discussion in JBoss Web Services at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2044]

_______________________________________________
jboss-user mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/jboss-user

Reply via email to