RE: Axis security, when web-app can't use Basic Web Authenticatio n

ge header. In the case of Axis > clients, it would be something like: > > b > > > Hope it helps. > > > > Jai > > -Original Message- > From: sol myr [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 17, 2005 5:28 AM > To: [EMAIL PROTECTED] > Su

RE: Axis security, when web-app can't use Basic Web Authenticatio n

17, 2005 10:48 AMTo: [EMAIL PROTECTED]Subject: RE: Axis security, when web-app can't use Basic Web Authentication I like that solution, especially because of the ease of a client supplying credentials (call.setUsername()). But is there an interoperable solution that would work

RE: Axis security, when web-app can't use Basic Web Authentication

, February 17, 2005 11:22 AMTo: '[EMAIL PROTECTED]'Subject: RE: Axis security, when web-app can't use Basic Web Authentication There are couple of approaches you can take, but here's what I would do.    - Implement an Authentication handler and Authorization handler extending B

RE: Axis security, when web-app can't use Basic Web Authenticatio n

like:   call.setUsername(uid);  call.setPassword(pswd); Hope it helps.   Jai  -Original Message-From: sol myr [mailto:[EMAIL PROTECTED]Sent: Thursday, February 17, 2005 5:28 AMTo: [EMAIL PROTECTED]Subject: Axis security, when web-app can't use Basic Web Authentication Hi ,   I

Axis security, when web-app can't use Basic Web Authentication

in (namely, clients connecting to the web service must supply user + password ) .   Now, normally this should be handled by the servlet-container (configure "web.xml" to use "Basic Web Authentication", and put Security Constraints on the web-service URL ).   *Unfortunately*, we can&#

Re: Security Issue

Joe, You might want to look at UDDI authentication mechanism, which is based on simple token exchange model. http://uddi.org/pubs/ProgrammersAPI-V2.04-Published-20020719.htm#_Toc25137739 Mike. Joe Plautz wrote: Hello, I'm looking for some guidance in the realm of security. I am in charg

Security Issue

Hello, I'm looking for some guidance in the realm of security. I am in charge of creating some web services to be used by a PowerBuilder front end(changing this is not an option). What I've discovered is that PowerBuilder does not allow you to modify/add headers in any shape or

Basic authentication via security realm

The Axis Web Service Security page states that authenticating soap client calls is currently not integrated with the servlet API:   "Note that Axis does not yet integrate with the servlet API authentication stuff. Although the forms authentication is literally off-axis when it comes to

Web Service Security

While Axis creates WSDL's for you based off deployed java code they are not always secure. How do I add my own schemas to the created WSDL's. Do I use the Java2WSDL then edit them as needed, where do I put these documents on the server. How do I tell axis to use my custom WSDL rather then make it

Re: Problems with adding wss4j security token

Tim, Xalan is part of the JDK. I had similar problems when I tried to use my own (newer) version of xalan which I put in the endorsed directory of my tomcat server. Please check where you put xalan.jar and/or try to remove it completely from your classpath. Yves On Wed, 2005-01-12 at 09:34 +

Re: webservices security

Hi u can use the WSS4J to achive web services securiry for axis G J Asanka Priyanjith On Wed, 15 Dec 2004 14:33:16 -0800, Vikas Phonsa <[EMAIL PROTECTED]> wrote: > Hi Everybody, > > I want to know what kinda security mechanisms are people in this list > using for

Re: webservices security

Vikas Phonsa wrote: Hi Everybody, I want to know what kinda security mechanisms are people in this list using for their web services exposed on the Internet. We use SSL encryption only for web services open to everyone on the internet. We use SSL encryption and authentication for "pr

webservices security

Hi Everybody, I want to know what kinda security mechanisms are people in this list using for their web services exposed on the Internet. There is just too much information on the Internet and I find it hard to make sense out of it. My web services would be running in websphere and so would be

RE: Apache WSS4J's WS Security Implementation - WSS Licensing Requirements?

r any company that wants to go with WS-Security? As Dims pointed out that WSS4J has not signed anything, are users of the software implementing WS-Security illegally? Anyone have any thoughts, ideas? Thanks, Sharam From: Tony Opatha [mailto:[EMAIL PROTECTED] Sent

Re: Apache WSS4J's WS Security Implementation - WSS Licensing Requirements?

Tony, Apache has not signed anything with anyone. Thanks, dims On Fri, 3 Dec 2004 13:45:33 -0800 (PST), Tony Opatha <[EMAIL PROTECTED]> wrote: > > > Hi, > > It seems that WS Security requires licensing arrangements from Microsoft, > Verisign, > and IBM based

Apache WSS4J's WS Security Implementation - WSS Licensing Requirements?

Hi,   It seems that WS Security requires licensing arrangements from Microsoft, Verisign, and IBM based on OASIS WS Security TC IPR statement   http://www.oasis-open.org/committees/wss/ipr.php   So, can someone please clarify:   1) if the users who to develop and deploy AXIS clients (using WS

Re: Getting Tomcat Realm security working with Axis

wsdd: I've also set the init-param in the web.xml AxisServlet Apache-Axis Servlet org.apache.axis.transport.http.AxisServlet use-servlet-security 1 And in the same file, I

Re: Getting Tomcat Realm security working with Axis

he web.xml AxisServlet Apache-Axis Servlet org.apache.axis.transport.http.AxisServlet use-servlet-security 1 And in the same file, I define the security constraints SecurePages Security for OpenI

Getting Tomcat Realm security working with Axis

use-servlet-security 1 And in the same file, I define the security constraints SecurePages Security for OpenIMACCS site *.event POST GET

Re: WS-Security?

http://ws.apache.org/ws-fx/wss4j/ On Mon, 29 Nov 2004 15:34:58 -0800, Lyndon Tiu <[EMAIL PROTECTED]> wrote: > Hello, > > Has anyone here used WS-Security on Axis? > > Thanks. > > -- > Lyndon Tiu > -- Davanum Srinivas - http://webservices.apache.org/~dims/

WS-Security?

Hello, Has anyone here used WS-Security on Axis? Thanks. -- Lyndon Tiu

RE: Newbie Question on Security

That's great to know! Thanks for your help everyone who contributed. -Original Message- From: Greg Michalopoulos [mailto:[EMAIL PROTECTED] Sent: 22 November 2004 14:56 To: [EMAIL PROTECTED] Subject: RE: Newbie Question on Security Axis can call SSL encrypted web services as long

RE: Newbie Question on Security

] Sent: Monday, November 22, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: RE: Newbie Question on Security Hi Greg, Thanks for your response. Is your answer related to if we are hosting the web services? I think it is, but we aren't hosting them, we are calling them and I've got this picture

RE: Newbie Question on Security

sts over 'https'? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 22 November 2004 15:09 To: [EMAIL PROTECTED] Subject: RE: Newbie Question on Security It is somewhat unclear what you mean by 'webservices encrypted'. Do you mean that the web

RE: Newbie Question on Security

? In this case your client can use the xml-specific security stuff to extract and validate certificates, etc. For this there is sample code in axis (in the 'security' directory). Good luck, Zoltan -Original Message- From: ext Robin Mannering [mailto:[EMAIL PROTECTED] Sent:

RE: Newbie Question on Security

t. Any thoughts ? -Original Message- From: Greg Michalopoulos [mailto:[EMAIL PROTECTED] Sent: 22 November 2004 14:39 To: [EMAIL PROTECTED] Subject: RE: Newbie Question on Security If you are using a web server to handle all the requests and then forward to j2ee container (as typically is

RE: Newbie Question on Security

If you are using a web server to handle all the requests and then forward to j2ee container (as typically is done) then the web server will handle all the ssl stuff for you. WSS4J is a ws-security implementation by apache if you want to actually encrypt and/or sign the xml messages sent by axis

Newbie Question on Security

Hi all, It's just become apparent that the Web services we call are going to be encrypted using either 40bit or 128bit SSL encryption. My question is, will Axis be able to cope with the necessary encryption/decryption required on the responses we get from the remote Web Services? I've had a l

Axis 1.2 and WS-Security

After reading some previous posts, using WSS4J with Axis 1.2 seems like the current method for incorporation WS-Security. However, I can’t seem to find an answer regarding how close to production-ready is WSS4J? It seems like it is not? If that’s true, then for a production system there is

Re: web services security and authentication

rtain users/roles to run a specific method. That could be accomplished adding security tests at the method level in the implementation class and throwing a SecurityException or so when the user/role has not permission. A declarative way for doing that would be nice. What about implementing an

web services security and authentication

Title: Axis 1.2RC1 and WebSphere Application Developer 5.1.2 Hi Everybody,   I’m trying to develop a B2B web service (for the first time) and am looking for some direction regarding security and authentication mechanisms that could be used with web services in Axis (in web sphere 5.1

Re: beginning with WS-Security

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 05 November 2004 19:11, Yves Langisch wrote: > Ilias, > > you also need the activation.jar and mail.jar which you can find at > sun's site. > > Yves thank's, it was just a classpath temporary problem... i got always the same error. Ciao,

Re: beginning with WS-Security

ith tomcat 4 and java1.4... everything went smooth. Now i'm tring WS-Security from CVS with axis 1.2RC1 and tomcat 5 and java 1.5 but i'm unable to deploy example3 from user guide... error: - -- - - Unable to find required classes (javax.activation.DataHandler and javax.mail.in

beginning with WS-Security

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, i'm a master student from university of Bologna, some week ago i tried the examples in the documentation of axis 1.1 with tomcat 4 and java1.4... everything went smooth. Now i'm tring WS-Security from CVS with axis 1.2RC1 and to

Re: adding security to webservices in axis

FYI, Here's the build log using latest CVS: C:\APACHE\ws-fx\wss4j>ant test Buildfile: build.xml init: [echo] --- [echo] -- Apache-WS-Security-J v1.0.Beta [2004]

Re: adding security to webservices in axis

, 29 Oct 2004 13:04:34 -0400, Greg Michalopoulos > <[EMAIL PROTECTED]> wrote: > > Check out wss4j from Apache (http://ws.apache.org/ws-fx/wss4j/). This is an > > implementation of the WS-Security spec. Documentation is a little weak at > > this point in time, but I was ab

Re: adding security to webservices in axis

is wss4j even usable at this point? I downloaded the source yesterday, but it wouldn't build. On Fri, 29 Oct 2004 13:04:34 -0400, Greg Michalopoulos <[EMAIL PROTECTED]> wrote: > Check out wss4j from Apache (http://ws.apache.org/ws-fx/wss4j/). This is an > implementation of the

RE: adding security to webservices in axis

Check out wss4j from Apache (http://ws.apache.org/ws-fx/wss4j/). This is an implementation of the WS-Security spec. Documentation is a little weak at this point in time, but I was about to use the UsernameToken in the SOAP header and a password callback class to authenticate a user making a

RE: adding security to webservices in axis

We implemented security at the transport level using SSL with client-authentication. The good thing about this is the web services code does not have to deal with security related aspects at all. It works well, and in a predictable manner. We had a binary level of security - either a client can

RE: adding security to webservices in axis

http://www-128.ibm.com/developerworks/webservices/library/ws-sec1.html The following article provides good introduction to different options available to implement security in Tomcat + Axis. Regards, Ashutosh -Original Message- From: Marco Mistroni [mailto:[EMAIL PROTECTED] Sent

adding security to webservices in axis

Hello all, I have a question for axis mailing list.. I would like to add security to my axis webservice, and I am looking For tips.. What I want to avoid is to going and modify the web.xml in tomcat for adding Users I am sure that there is at least someone on this list which came

RE: WS-Security

Jim - I think you had the right idea...Thanks. -Original Message- From: Jim Murphy [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 15, 2004 2:56 PM To: [EMAIL PROTECTED] Subject: Re: WS-Security Is it in the servlet container's class path or the webapp classpath? I belie

Re: WS-Security

Is it in the servlet container's class path or the webapp classpath? I believe it must be reachable by the webapp classloader - which does not delegate to a "higher level" class loader. Jim Murphy Mindreef, Inc. Greg Michalopoulos wrote: Could be a real dumb question but... Using apache wss4j,

WS-Security

Could be a real dumb question but... Using apache wss4j, and trying to use a custom password callback class. Thing is, if I don't add the custom password callback class to the wss4j jar file, I get a java.lang.NoClassDefFound exception - even if the custom class is in the class path of the servlet

Re: Web Service Security

There are 2 fundamental choices: 1. Secure the message at the SOAP layer 2. Secure the channel at the protocol layer WS-Security is for #1. It means you can perform security related functions like authentication, signing and privacy(encryption) entirely by manipulating the XML messages. This

RE: Web Service Security

/webservices/library/ws-sec1.html http://www.informit.com/articles/article.asp?p=24600   Thanks Bhuvan From: Suzy Fynes [mailto:[EMAIL PROTECTED] Sent: Friday, August 20, 2004 2:45 PMTo: [EMAIL PROTECTED]Subject: Web Service Security Hi,   Can anyone tell me the best approach to take for securing

Web Service Security

Hi,   Can anyone tell me the best approach to take for securing a web services server? Its set up using java and I’ve been currently looking at xws-security but it seems to causing more trouble than anything else. Does anyone know if this is the best approach or is there another option

webservice with ws security

Hi.,     I'm using axis toll for creating webservice.I have created few samples and its working well. Now i'm planning to implement the security like ws security,xml security,digital signature and authentication like that. Is anyone can give me some idea to implement this.I am ju

Security Policy Use by Axis?

back from the RMI server: java.rmi.UnmarshalException: error unmarshalling return; nested exception is: java.lang.ClassNotFoundException: labone.CommandLineInterfaceImpl_Stub (no security manager: RMI class loader disabled) This only occurs when I invoke the RMI server from my web service; I do not ge

Security Policy Use by Axis?

back from the RMI server: java.rmi.UnmarshalException: error unmarshalling return; nested exception is: java.lang.ClassNotFoundException: labone.CommandLineInterfaceImpl_Stub (no security manager: RMI class loader disabled) This only occurs when I invoke the RMI server from my web service; I do not ge

webservice security problem with tomcat

Hi All, I tried to run the sample application given in the samples\security folder given in the axis1.1 distribution. In the read me file it is written that to run the application with  apache server with the command java "org.apache.axis.transport.http.SimpleAxisServer -p 8080"  and t

web service security.

Hi All, I tried to un the same given in the samples\security application given in the axis distribution. In the read me file it is written that to run the application with  apache server with the command java "org.apache.axis.transport.http.SimpleAxisServer -p 8080"  and then deploy t

Re: Security Token Service - wsdl2java generated code

Please open a JIRA bug report... thanks, dims - Original Message - From: Malinda Kaushalye <[EMAIL PROTECTED]> Date: Mon, 14 Jun 2004 11:37:09 +0600 Subject: Security Token Service - wsdl2java generated code To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], [EMAIL PROTECTED],

Security Token Service - wsdl2java generated code

Hi All,   I could generate the Security Token Service using wsdl2java tool with ws-trust.wsdl and other related .xsd files.  But there are some bugs (I guess so) in the generated code.   //   In the RequestTypeEnum class there

Re: security/authentication

Antoine Lefebvre wrote: Hi all, I use axis to provide services to a .net client. It works fine, but I've some question about security/authentication... -How are the "username" and "password" members set in the MessageContext? -Is it possible to use the NetworkCredentia

security/authentication

Hi all, I use axis to provide services to a .net client. It works fine, but I've some question about security/authentication... -How are the "username" and "password" members set in the MessageContext? -Is it possible to use the NetworkCredential class in my .net cl

Re: security vulnerability with DTD/Axis?

yep. On Thu, 20 May 2004 21:51:05 -0400, insoo lee <[EMAIL PROTECTED]> wrote: > > > > Could you please let me know if following security issue has been resolved? > > http://xmlfr.org/cache/0014.html > > Thanks much. > Insoo > > >>> > >

security vulnerability with DTD/Axis?

Could you please let me know if following security issue has been resolved? http://xmlfr.org/cache/0014.html Thanks much. Insoo >>> => Summary: Using the DTD part of the XML document, it is possible to cause the XML parser to consume 100% CPU and/or a lot of memory, therefore re

WS-I Releases Draft of Basic Security Profile

  FYI, here’s the link to the news..   http://www.eweek.com/article2/0,1759,1594919,00.asp   and here’s the link to the draft..   http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0-2004-05-12.html   Sanjesh          

RE: Web Service Security

OASIS Web Services Security: SOAP Message Security (aka WSS or WS-Security). See http://www.oasis-open.org/specs/index.php#wssv1.0. Dims is working on an implementation of WSS for Axis. See http://ws.apache.org/ws-fx/wss4j/. (He's a little busy working on the Axis 1.2 bug list, but I&#

RE: Web Service Security

OASIS Web Services Security: SOAP Message Security (aka WSS or WS-Security). See http://www.oasis-open.org/specs/index.php#wssv1.0. Dims is working on an implementation of WSS for Axis. See http://ws.apache.org/ws-fx/wss4j/. (He's a little busy working on the Axis 1.2 bug list, but I&#

Web Service Security

In regards to security, what is any is the "standard", if any, that everyone is moving towards such that security will work across .Net, Axis, and et. al? As a follow up, where is Axis in regards to that standard. Ross

Security

Title: Security Hi What do I need do configure to use the SimpleSecurityProvider? Thx Pascal Auderset

Security Problem!!

Hello, I have an axis web service running over a Tomcat Server. If I make a request to this service, where there's an arg of type array with around 7 items, the Tomcat goes out of memory and crashes down. Is there a way to fix it? A way of limit the request maximum size in the server side

Re: Per-Method Security?

see http://ws.apache.org/axis/wss4j/ --- [EMAIL PROTECTED] wrote: > Hi, > > This is a rather naive question, as I only recently started examining web > service security, but is it possible to set per-method security constraints (at > the transport level)? From everything i'v

Per-Method Security?

Hi, This is a rather naive question, as I only recently started examining web service security, but is it possible to set per-method security constraints (at the transport level)? From everything i've read I would guess not, but maybe i missed something? I suppose I could set message-

Re: Questions Regarding Security example ClientSigningHandler

Hi Peter, > 1) Can I verify that the handler has actually been deployed? When I run the command "java > org.apache.axis.utils.Admin client samples/security/clientsecuritydeploy.wsdd", I get no feedback, > though no Exceptions either. You can check wheather Client-Config.wsdd h

Re: where are the xml-Security api docs v 1.4?

isn't it in the src/doc? I think I downloaded the source bundle and doc is in there. - Original Message - From: "pacow" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 26, 2004 4:43 PM Subject: where are the xml-Security api docs v 1.4?

where are the xml-Security api docs v 1.4?

where can i find the xml-Security api docs for version 1.4? \ am i blind? i can't find them anywhere!! -peter

Re: Questions Regarding Security example ClientSigningHandler

thanks, will try that... - Original Message - From: "pacow" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 26, 2004 12:02 AM Subject: Re: Questions Regarding Security example ClientSigningHandler > ahh.. look for the files client-config.ws

Re: Questions Regarding Security example ClientSigningHandler

ent: Thursday, March 25, 2004 10:56 PM > Subject: Re: Questions Regarding Security example ClientSigningHandler > > > ah.. that may be it, as i'm using precompile class files from the > AxisBinary > > distribution. > > > > though now i have to figure out how to und

Re: Questions Regarding Security example ClientSigningHandler

nt: Thursday, March 25, 2004 10:56 PM Subject: Re: Questions Regarding Security example ClientSigningHandler > ah.. that may be it, as i'm using precompile class files from the AxisBinary > distribution. > > though now i have to figure out how to undeploy the Handler, since the >

Re: Questions Regarding Security example ClientSigningHandler

came with the Axis binary, not Clients i have created on my own... ??? thanks, -peter Mei Wu wrote: > looks to me like you have an mismatched xml security library, have you > checked which version Axis supports? > I believe I am use 1.4... > - Original Message - > F

Re: Questions Regarding Security example ClientSigningHandler

looks to me like you have an mismatched xml security library, have you checked which version Axis supports? I believe I am use 1.4... - Original Message - From: "pacow" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, March 25, 2004 10:06 PM Subjec

Questions Regarding Security example ClientSigningHandler

1) Can I verify that the handler has actually been deployed? When I run the command "java org.apache.axis.utils.Admin client samples/security/clientsecuritydeploy.wsdd", I get no feedback, though no Exceptions either. 2) When I run "java org.apache.axis.client.AdminClient list&q

Re: about performance between ws security & https

I expect that https will give you better performance than ws-security, but even if you're only using http, the functionality is not the same. https gives you point-to-point message security, but it does not effectively support end-to-end security, e.g., strong authentication, authorizatio

about performance between ws security & https

  Anyone knows which has better performance, ws security or https? Our application run under http, so it’s the same for us have ws security under soap or https.   thanks

Re: Ws-Security ds:keyInfo for secrete key

http://ws.apache.org/ws-fx/wss4j/ --- Mei Wu <[EMAIL PROTECTED]> wrote: > Hi, > > I am developing a message level security framework in which secrete key is > included. I am a bit confused about how to create a ds:KeyInfo for such a > secrete key, since if I follow

Re: Ws-Security ds:keyInfo for secrete key

org.apache.axis.client.AdminClient samples/security/serversecuritydeploy.wsdd My webserver is running at 8080, and it does seem to do some work that prints out a lot of information when I executed it and at last it showed : - org.apache.axis.i18n.resource::handleGetObject(empty00) - NSPop (empty) Done processing But, the

Ws-Security ds:keyInfo for secrete key

Hi, I am developing a message level security framework in which secrete key is included. I am a bit confused about how to create a ds:KeyInfo for such a secrete key, since if I follow WS-Security to create: only, it will give me an AxisFault : "Didn't

RE: Web Service Security - what's the best way to achieve it?

easiest solution. Which webserver are you using ? Regards, Abhinav -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, March 15, 2004 2:55 PM To: [EMAIL PROTECTED] Subject: Web Service Security - what's the best way to achieve it? Hi people, I am consid

RE: Web Service Security - what's the best way to achieve it?

VPN? What about throughput? Is your service deployed in a clustered, load balanced environment? All of these things factor in, I'm afraid. It's a nasty, nasty problem domain right now. We're using WSS4J to apply WS-Security 1.0 compliant digital signatures to SOAP messages, but th

How to implement SSL security within Axis?

Hi people, What i am trying to do is this: a client sends a HTTPS request to my axis-based Web Service. I want to have a Handler class which extracts the Certificate from the request and checks the Distinguished Name in it against a database of names. I know how to use Handler classes, I just d

Re: Web Service Security - what's the best way to achieve it?

http://ws.apache.org/ws-fx/wss4j/ --- [EMAIL PROTECTED] wrote: > Hi people, > > I am considering two different ways of using Certificate based authentication of a > client > connecting to our Web Service: > > 1. Certificate is contained in the HTTPS request. I intercept the Request in my Web >

Web Service Security - what's the best way to achieve it?

Hi people, I am considering two different ways of using Certificate based authentication of a client connecting to our Web Service: 1. Certificate is contained in the HTTPS request. I intercept the Request in my Web Service, get the Certificate out of it, and do the authentication. 2. Certific

RE: what is the status of axis ws-security implementation?

Hi, We are trying to use Apache's xml security (http://xml.apache.org/security/) for signing and BSafe for encryption (or BouncyCastl http://www.bouncycastle.org/ ) then, build SOAP message conforming to WS-Security format... I found this article was helpful for me (http://www.devx.com/sec

Re: what is the status of axis ws-security implementation?

http://ws.apache.org/ws-fx/wss4j/ --- Maciek Zywno <[EMAIL PROTECTED]> wrote: > Hello > > I would like to use ws-security standard to secure my webservice. My > question is whether I would have to implement ws-security: > - on my own by using axis handlers that use some

what is the status of axis ws-security implementation?

Hello I would like to use ws-security standard to secure my webservice. My question is whether I would have to implement ws-security: - on my own by using axis handlers that use some external api ? - or does axis support ws-security out of the box? - or there is some apache ws-security library

SOAP Security Gateway Referal

Hi All,   I am looking for products that can easily add Web Service security to my existing published interface with little to no change to current Axis impl. Ideally the product would extend the Basic-Auth over SSL providing the ability to assign method rights to user roles and come

Re: FYI: WS-I New Webserice Security Document

Forwarding to fx-dev@ mailing list as WSS4J is now under ws-fx (http://ws.apache.org/ws-fx/wss4j/) --- "Parley, Thunder Jon" <[EMAIL PROTECTED]> wrote: > FYI > > WS-I has released a working draft of "Security Scenarios". It's a pretty decent read > an

FYI: WS-I New Webserice Security Document

FYI WS-I has released a working draft of "Security Scenarios". It's a pretty decent read and I know the topic comes up enough on the list... it may give some an idea of where WS security is heading and maybe expose some limitations that exist today in theory and practice...

RE: Will Axis ever support WS-Security

wow finally someone talking about security on axis.. is there is a reason we want to go with wss4j? I have been posting to this mailing list trying to get information on message level security and signing of mesages and how we are thinking of handling that as I was also looking into providing

RE: Will Axis ever support WS-Security

Thanks -Original Message- From: Davanum Srinivas [mailto:[EMAIL PROTECTED] Sent: Mon 09/02/2004 20:33 To: [EMAIL PROTECTED] Cc: Subject: Re: Will Axis ever support WS-Security

Re: Will Axis ever support WS-Security

The idea is to get wss4j as part of http://ws.apache.org/ws-fx/ soon. thanks, dims --- [EMAIL PROTECTED] wrote: > Dims, > > > Does WSS4J count as part of Apache Axis ? I'm trying to pull together a report > for very senior > managers about WS-Security, a

Will Axis ever support WS-Security

Dims, Does WSS4J count as part of Apache Axis ? I'm trying to pull together a report for very senior managers about WS-Security, and when we should start using it. Part of this will be a section on the implementations. We're all familiar with Axis, so shou

Re: Will Axis ever support WS-Security

Yes, see CVS at http://wss4j.sf.net/. When the spec is final the code will be ready too :) -- dims --- [EMAIL PROTECTED] wrote: > and if so when ? > > Thanks > > Dave > UK > = Davanum Srinivas - http://webservices.apache.org/~dims/

Will Axis ever support WS-Security

and if so when ? Thanks Dave UK

Security Handler, returning error message instead of throwing axi s fault

hello everybody, I have a Login handler which will check from which IP address the request is coming and then return an error message if the IP address is not the intended one. Instead of throwing axis fault, I want to send a SOAP response like the following which is how the customer receives.

Antwort: RE: question regarding WSDL and WS-Security

: 10.01.2004 19:11Thema:RE: question regarding WSDL and WS-Security Bitte antworten an

RE: question regarding WSDL and WS-Security

later uses this framework to define the policy related to WS-Security. Thomas -Original Message- From: Ricky Ho [mailto:[EMAIL PROTECTED] Sent: Friday, January 09, 2004 5:00 PM To: [EMAIL PROTECTED] Subject: Re: question regarding WSDL and WS-Security Here is what I'm thinking ...

  1   2   3   >