Hi Narayan,
This has been already acknowledged. I have raised an JIRA issue
for the same. You can track it here
https://issues.apache.org/jira/browse/RAMPART-155
Regards,
Abhay
Shared Services and Architecture | Smith Barney Technology | CitiGroup
GWM | New York
(212) 657 - 9358
-----Original Message-----
From: Narayan Dhillon [mailto:[EMAIL PROTECTED]
Sent: Friday, May 16, 2008 11:23 AM
To: [email protected]
Subject: Username token without password
Hi,
WS-Security policy for Username token doesn't mandate the presence of
password field, one of the use cases for this could be using Username
token as signed supporting token.
>From WSS-username-token-profile-1.0
>>
/wsse:UsernameToken/wsse:Password
This optional element provides password information (or equivalent such
as a hash). It is
RECOMMENDED that this element only be passed when a secure transport
(e.g.
HTTP/S) is being used or if the token itself is being encrypted.
<<
Rampart & WSS4J doesn't seem to support it? What you people think about
it?
Regards, Narayan
*****************************************************
This email is issued by a VocaLink group company. It is confidential and
intended for the exclusive use of the addressee only. You should not
disclose its contents to any other person. If you are not the addressee
(or responsible for delivery of the message to the addressee), please
notify the originator immediately by return message and destroy the
original message. The contents of this email will have no contractual
effect unless it is otherwise agreed between a specific VocaLink group
company and the recipient.
The VocaLink group companies include, among others: VocaLink Limited
(Company No 06119048, VAT No. 907 9619 87) which is registered in
England and Wales at registered office Drake House, Homestead Road,
Rickmansworth, WD3 1FX. United Kingdom, Voca Limited (Company no
1023742, VAT No. 907 9619 87) which is registered in England and Wales
at registered office Drake House, Three Rivers Court, Homestead Road,
Rickmansworth, Hertfordshire. WD3 1FX. United Kingdom, LINK Interchange
Network Limited (Company No 3565766, VAT No. 907 9619 87) which is
registered in England and Wales at registered office Arundel House, 1
Liverpool Gardens, Worthing, West Sussex, BN11 1SL and VocaLink Holdings
Limited (Company No 06119036, VAT No. 907 9619 87) which is registered
in England and Wales at registered office Drake House, Homestead Road,
Rickmansworth, WD3 1FX. United Kingdom.
The views and opinions expressed in this email may not reflect those of
any member of the VocaLink group. This message and any attachments have
been scanned for viruses prior to leaving the VocaLink group network;
however, VocaLink does not guarantee the security of this message and
will not be responsible for any damages arising as a result of any virus
being passed on or arising from any alteration of this message by a
third party. The VocaLink group may monitor emails sent to and from the
VocaLink group network.
This message has been checked for all email viruses by MessageLabs.
*************************************************************
