Hi Chamikara, I need only WSSecCon. I may also need WSRM but they should not be tight. I want to use the username token policy assertion but ony the first time when the client connects the server. any furthure call shuld not send the user/pass info.Could i do that with rampart/sec. policies?
Thanks, Nencho 2007/4/26, Chamikara Jayalath <[EMAIL PROTECTED]>:
Hi Nencho, What is your requirement. Do you want to use both WSRM+WSSecCon or you wan't only WSSecCon ? Chamikara On 4/26/07, Nencho Lupanov <[EMAIL PROTECTED]> wrote: > > Hi Chamikara, > > I also noticed in the rampart sample04 that i can configure > WS Secure conversation using rampart policies without the need of using > sandesha, > whats the differences between the two ways? > > thanks, > Nencho > > > 2007/4/25, Chamikara Jayalath <[EMAIL PROTECTED]>: > > > > Hi Nencho, > > > > We tested the RampartBasedSecurityManager for quite a number of > scenarios. > > So ideally it should work. You can get an idea of the design and the > > client > > API from the following. > > > > http://wso2.org/library/1027 > > > > Chamikara > > > > > > > > > > On 4/25/07, Nencho Lupanov <[EMAIL PROTECTED]> wrote: > > > > > > Hi All, > > > > > > I am using UsernameToken to authenticate a user in the Password > Callback > > > class. > > > I nees to send this UsernameToken only once in order to implement > single > > > sign on, > > > or in other words some session context. > > > I now that WS Secure Conversation has a security context token for > that > > > needs and > > > I may specify Rampart security context manager in sandesha2 but is > there > > > any samples on doing that > > > and how far is this implemented? > > > > > > thanks, > > > Nencho > > > > > > > > > > > -- > > Chamikara Jayalath > > WSO2 Inc. > > http://wso2.com/ > > http://wso2.org/ - For your Oxygen needs > > > -- Chamikara Jayalath WSO2 Inc. http://wso2.com/ http://wso2.org/ - For your Oxygen needs