Axis2/Rampart 1.7.0 doesnt work with PKCS11 NSS certificate store.

2017-03-17 Thread Resnicow, Bill
Hello all, I have this problem when upgrading from Axis2/Rampart 1.6.0 to Axis2/Rampart 1.7.4. Our security provider is NSS which is the FIPS compliant PKCS11 certificate keystore. This worked fine with Axis2/Rampart 1.6.0 but with 1.7.4 it does not work. The problem is that when trying to

RE: axis2 rampart

2014-12-12 Thread Martin Gainty
> Date: Fri, 12 Dec 2014 12:45:51 +0100 > From: j.s...@fz-juelich.de > To: java-user@axis.apache.org > Subject: axis2 rampart > > hi, MG>Guten Tag > > i tried to authenticate soap service users against an microsoft active > directory. > is it possible with

Re: axis2 rampart

2014-12-12 Thread juergen sorg
hi joerg, thanks for your reply. but this do not work for me, because pwcb.getPassword() returns always null when usage is WSPasswordCallback.USERNAME_TOKEN. In this case you have to set the password with pwcb.setPassword(pw) and rampart compares this password with the transmitted password (

Re: axis2 rampart

2014-12-12 Thread wp11034684-001
Hi, it is quite simple to fetch the username/password from the WS-Security UserNameToken : public class PasswordCBHandler implements CallbackHandler { @Override public void handle( Callback[] callbacks ) throws IOException, UnsupportedCallbackException { for

axis2 rampart

2014-12-12 Thread juergen sorg
hi, i tried to authenticate soap service users against an microsoft active directory. is it possible within the CallbackHandler to get the password provided by the user within the soap message? i read something about getUsage==USERNAME_TOKEN_UNKOWN but i do not know the settings in rampart to ge

[AXIS2][RAMPART] encryption and signature performance

2012-09-25 Thread FILIPPO AGAZZI
Hi all, i need an information that i can't find on the web. I I need to know how much time is taken from Ramparto to sign end encrypt a soap message, in relation to message size. Is there any documentation? I find some studies, like http://www.ibm.com/developerworks/java/library/j-jws11/ but i can'

RE: Need advice how to run Axis2/Rampart client from Websphere

2012-08-17 Thread Stromas, Aaron
thods that take parameters refer to objects either on the filesystem or classpath. Sorry for being so dense -a From: Martin Gainty [mailto:mgai...@hotmail.com] Sent: Thursday, 16 August, 2012 20:33 To: java-user@axis.apache.org Subject: RE: Need advice how to run Axis2/Rampart client from Webs

RE: Need advice how to run Axis2/Rampart client from Websphere

2012-08-16 Thread Martin Gainty
From: aaron.stro...@rsa.com To: java-user@axis.apache.org Date: Thu, 16 Aug 2012 19:15:16 -0400 Subject: RE: Need advice how to run Axis2/Rampart client from Webshere Really thank you for taking time to explain this. I now understand the rational, but I still need to resolve the practical business o

RE: Need advice how to run Axis2/Rampart client from Webshere

2012-08-16 Thread Stromas, Aaron
order to be engaged? Thank you, -a From: Martin Gainty [mailto:mgai...@hotmail.com] Sent: Thursday, 16 August, 2012 17:48 To: java-user@axis.apache.org Subject: RE: Need advice how to run Axis2/Rampart client from Webshere MG>your focus seems to be implementing WS-Security which is imple

RE: Need advice how to run Axis2/Rampart client from Webshere

2012-08-16 Thread Martin Gainty
ok at some tutorialsMG>but beforehand It would be helpful to have a firm grasp on Axis2 fundamentals MG>http://axis.apache.org/axis2/java/core/docs/installationguide.html Thanks, MG>Youre welcome -a From: Martin Gainty [mailto:mgai...@hotmail.com] Sent: Thursday, 16 August, 2012 14:27 To: java-user@ax

RE: Need advice how to run Axis2/Rampart client from Webshere

2012-08-16 Thread Stromas, Aaron
2012 14:27 To: java-user@axis.apache.org Subject: RE: Need advice how to run Axis2/Rampart client from Webshere I would use Fernando's Test Code for WSS4J contents of wss40.properties: org.apache.ws.security.crypto.provider=org.apache.ws.security

RE: Need advice how to run Axis2/Rampart client from Webshere

2012-08-16 Thread Martin Gainty
gatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. From: aaron.stro...@rsa.com To: java-user@axis.apache.org Date: Thu, 16 Aug 2012 12:19:14 -0400 Subject: Need advice how to run Axis2/Rampart client

Need advice how to run Axis2/Rampart client from Webshere

2012-08-16 Thread Stromas, Aaron
Hello, I need to be able to make web service calls using WS-Security from the application that runs on Websphere. Are there any instructions how to do that? My prototype standalone client sets up the ConfigurationContext as follows ConfigurationContext ctx = ConfigurationContextFactory.createCo

Re: Axis2/Rampart 1.6.2 Policy not supported

2012-07-04 Thread Kishanthan Thangarajah
On Thu, Jun 21, 2012 at 2:55 AM, Christopher Legan < christopher.le...@lextech.com> wrote: > I explicitly engage the rampart module on the stub > > client.engageModule("rampart-1.6.2"); > AFAIK, the above will not engage rampart module. You have to use "client.engageModule("rampart");" to

Axis2/Rampart 1.6.2 Policy not supported

2012-06-20 Thread Christopher Legan
I explicitly engage the rampart module on the stub client.engageModule("rampart-1.6.2"); But I see this issue -- 2012-06-20 15:53:29,261 [main] DEBUG org.apache.axis2.description.AxisDescription - can't find any module to process {http://schemas.microsoft.com/xrm/201

Axis2+Rampart issue with signature

2012-03-28 Thread Gabriel Millaire
Hi all, I have this problem that is intermitent: I am using Rampart with Axis2 1.6.0. The security header contains a signature. Sometimes when I try to send a request, I get that error: Caused by: java.lang.NullPointerException at org.apache.rampart.builder.BindingBuilder.getSi

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-12 Thread Amila Jayasekara
Hi Fliippo, I am not sure whether i understood your question properly. As far as I understood signature material is within element. As you mentioned below, Rampart is capable of processing security information when there is a security header. So I believe it is not possible to use Rampart to proc

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-12 Thread FILIPPO AGAZZI
2012/2/10 Ruchith Fernando > Hi Filippo, > > > Yes, this is like yet another web service now. What rampart provides > at this point is an API to construct required elements and if you > apply security policy to an operation then the results of processing > the security header will be available at

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-10 Thread Ruchith Fernando
Hi Filippo, On Fri, Feb 10, 2012 at 1:43 PM, FILIPPO AGAZZI wrote: > Thank you very much Ruchith! > I was successful in running your code! I think this could be a nice > beginning point. Do you think in this way i can add in > RequestSecuritTokenResponse exchanged by client and custom token issue

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-10 Thread FILIPPO AGAZZI
Thank you very much Ruchith! I was successful in running your code! I think this could be a nice beginning point. Do you think in this way i can add in RequestSecuritTokenResponse exchanged by client and custom token issuer, any xml structure i need as child of RequestSecurityTokenResponse and then

Re: [Axis2] [Rampart] two questions

2012-02-09 Thread Ruchith Fernando
Hi James, On Thu, Feb 9, 2012 at 7:37 AM, James Annesley < james.annes...@infoshare-is.com> wrote: > Hi, > > ** ** > > Two questions: > > ** ** > > Introduction: > > ** ** > > I use Rampart 1.5.0 and Axis2 1.5.1. The SOAP server is WCF and it works > ok. The policy is embedded in the

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-09 Thread Ruchith Fernando
Hi Filippo, On Thu, Feb 9, 2012 at 3:51 PM, Ruchith Fernando wrote: > On Thu, Feb 9, 2012 at 7:03 AM, FILIPPO AGAZZI > wrote: >> Hi Amila, >> thanks for your response. So you suggest to use >> http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT, instead of >> http://schemas.xmlsoap.org/ws/2005/0

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-09 Thread Ruchith Fernando
On Thu, Feb 9, 2012 at 7:03 AM, FILIPPO AGAZZI wrote: > Hi Amila, > thanks for your response. So you suggest to use > http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT, instead of > http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue ? I've already think > about this, but i don't understand wh

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-09 Thread Ruchith Fernando
>> wrote: >>>> >>>> Hi Filippo, >>>> >>>> >>>> >>>> I don’t believe the Axis2 STS is mature enough to support what you are >>>> asking about. Neither rampart contains a general-purpose WS-Trust client. >>>> AFAIK the main

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-09 Thread Sardar Hussain
>>>> try checking out the Apache CFX STS implementation which was donated by >>>> Talend which could be more mature. CXF also might have a more mature >>>> client. >>>> Other than that, you can also check Sun’s OpenSSO or any other more >>>> co

[Axis2] [Rampart] two questions

2012-02-09 Thread James Annesley
Hi, Two questions: Introduction: I use Rampart 1.5.0 and Axis2 1.5.1. The SOAP server is WCF and it works ok. The policy is embedded in the SOAP and the AXIS2 client works after engaging Rampart without specifying a policy file. The authentication is done on the SOAP server. For each c

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-09 Thread FILIPPO AGAZZI
ng you ask for is available as open source. You can > >>> try checking out the Apache CFX STS implementation which was donated by > >>> Talend which could be more mature. CXF also might have a more mature > client. > >>> Other than that, you can also check Sun’s Ope

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-09 Thread Amila Jayasekara
gt; >>> I am not sure anything you ask for is available as open source. You can >>> try checking out the Apache CFX STS implementation which was donated by >>> Talend which could be more mature. CXF also might have a more mature client. >>> Other than that, you can also

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-08 Thread FILIPPO AGAZZI
. [1] contains some starting point links. >> >> >> ** ** >> >> George >> >> ** ** >> >> ** ** >> >> [1] http://kantarainitiative.org/wordpress/programs/iop-saml/ >> >> ** ** >> >> *From:* FILIPPO AGA

Re: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-07 Thread Prabath Siriwardena
om:* FILIPPO AGAZZI [mailto:filippo.aga...@studenti.unipr.it] > *Sent:* Tuesday, February 07, 2012 7:28 AM > *To:* java-user@axis.apache.org > *Subject:* [Axis2] [Rampart] ws-trust negotiation and challenge extension > support > > ** ** > > Hi all, > i'm Filipp

RE: [Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-07 Thread George Stanchev
2012 7:28 AM To: java-user@axis.apache.org Subject: [Axis2] [Rampart] ws-trust negotiation and challenge extension support Hi all, i'm Filippo Agazzi, an Informatic Engineer student at University of Parma, Italy. i'm working on a thesis about "Automated trust negotiation using ws-

[Axis2] [Rampart] ws-trust negotiation and challenge extension support

2012-02-07 Thread FILIPPO AGAZZI
Hi all, i'm Filippo Agazzi, an Informatic Engineer student at University of Parma, Italy. i'm working on a thesis about "Automated trust negotiation using ws-* standard", and i need, as a basis, to have a client and a service (probably a STS), challenging each other and exchanging multiple RequestS

Re: [Axis2,Rampart]

2011-11-30 Thread Amila Jayasekara
On Tue, Oct 25, 2011 at 5:24 PM, Stadelmann Josef wrote: > Can anyone answer this. > > Our  soap xml payload has represent collections and have lot of elements > sensible data we  now need to protect better. > > Is it possible to define a WS-Security-Policy that defines that Rapart é all > shall o

Re: AW: [Axis2/Rampart] 1.6.1 interop issues

2011-11-30 Thread Afkham Azeez
you > will be unable to use it's https connector at port 8443 > > ** ** > > and that is an issue the axis2/rampart/sample-tomcat/README file does not > address. > > ** ** > > I am just about to learn about web service security ! > > ** ** > >

AW: [Axis2/Rampart] 1.6.1 interop issues

2011-11-30 Thread Stadelmann Josef
h, 30. November 2011 14:05 An: java-user@axis.apache.org Betreff: Re: [Axis2/Rampart] 1.6.1 interop issues As per the stacktrace below, it looks like the System properties needed for talking to the server via HTTPS have not been properly set. $ ant create.and.run.c

Re: [Axis2/Rampart] 1.6.1 interop issues

2011-11-30 Thread Afkham Azeez
As per the stacktrace below, it looks like the System properties needed for talking to the server via HTTPS have not been properly set. > ** > > $ ant create.and.run.client > > produces > > ** ** > > check.tomcat: > > clean: > > Deleting directory > E:\Users\C770817\SW-PROJEKTE\Ra

Re: [Axis2/Rampart] 1.6.1 interop issues

2011-11-30 Thread Afkham Azeez
On Wed, Nov 30, 2011 at 5:11 PM, Stadelmann Josef < josef.stadelm...@axa-winterthur.ch> wrote: > Hi Prabath > > ** ** > > Thanks for taking the ball and asking me about my issues; well I have > some…. > > ** ** > > *I believe you, that your WCF-AXIS2 interop-tests run fine. * > > ** ** > >

Re: [Axis2/Rampart] 1.6.1 interop issues

2011-11-30 Thread Prabath Siriwardena
WS-Trust, WS-Policy, etc., they don't seem to talk > to each other and one or the other will throw cryptic exceptions or ignore > security headers. We are using .NET 3.5, WCF Federation binding on the MS > side, and Axis2/Rampart/Rahas on the java side. Has anyone ever been able &

Re: [Axis2/Rampart] 1.6.1 interop issues

2011-11-30 Thread Afkham Azeez
STS. Despite the fact that both sides are compliant with the > standards, WS-Security, WS-Trust, WS-Policy, etc., they don't seem to talk > to each other and one or the other will throw cryptic exceptions or ignore > security headers. We are using .NET 3.5, WCF Federation binding on t

[Axis2/Rampart] 1.6.1 interop issues

2011-11-28 Thread Stadelmann Josef
are compliant with the standards, WS-Security, WS-Trust, WS-Policy, etc., they don't seem to talk to each other and one or the other will throw cryptic exceptions or ignore security headers. We are using .NET 3.5, WCF Federation binding on the MS side, and Axis2/Rampart/Rahas on the java side

[Axis2,Rampart]

2011-10-25 Thread Stadelmann Josef
Can anyone answer this. Our soap xml payload has represent collections and have lot of elements sensible data we now need to protect better. Is it possible to define a WS-Security-Policy that defines that Rapart é all shall only encrypt >mysecretpassword< and >5000< ? WSIN 4 Userna

AW: [Axis2] Rampart and .NET WCF Interoperability / Aproach Questions

2011-09-15 Thread Stadelmann Josef
would be fine too. Josef -Ursprüngliche Nachricht- Von: Amila Jayasekara [mailto:ami...@wso2.com] Gesendet: Mittwoch, 14. September 2011 15:50 An: java-user@axis.apache.org Cc: axis-u...@ws.apache.org Betreff: Re: [Axis2] Rampart and .NET WCF Interoperability / Aproach Questions

Re: [Axis2] Rampart and .NET WCF Interoperability / Aproach Questions

2011-09-14 Thread Amila Suriarachchi
On Tue, Sep 13, 2011 at 7:11 AM, Stadelmann Josef < josef.stadelm...@axa-winterthur.ch> wrote: > ** > > Hi developers, > > We have a Axis2 and Addressing.mar on Tomcat on JDK 1.5 on OpenVMS – > > And our Web Service runs in scope="soapsession", which makes long lasting > sessions. > > We have a .N

Re: [Axis2] Rampart and .NET WCF Interoperability / Aproach Questions

2011-09-14 Thread Amila Jayasekara
Hello Josef, You mail has few questions. Let me answer those, one by one. What technology shall we use to encrypt the password in a SOAP-BOADY ? According to your description and to my knowledge the best methodology to secure SOAP body is to use message level encryption. Thus i believe "sy

[Axis2] Rampart and .NET WCF Interoperability / Aproach Questions

2011-09-13 Thread Stadelmann Josef
Hi developers, We have a Axis2 and Addressing.mar on Tomcat on JDK 1.5 on OpenVMS - And our Web Service runs in scope="soapsession", which makes long lasting sessions. We have a .NET .VB .C# WCF 3.5 WS Client communicating through a SOAP-XML over HTTP Protocoll using the ServicegroupId Header

Re: Problem creating Axis2 Rampart Client

2011-07-02 Thread Louis Amstutz
vice using Axis2 which uses Rampart for >> authentication. In all the samples for Rampart, the client needs to have a >> client side repository for Axis2. Rampart is started on the client as >> follows: >> >> ConfigurationContext ctx = >> ConfigurationConte

Re: Problem creating Axis2 Rampart Client

2011-07-02 Thread Thilina Mahesh Buddhika
t; client side repository for Axis2. Rampart is started on the client as > follows: > > ConfigurationContext ctx = > ConfigurationContextFactory.createConfigurationContextFromFileSystem("path/to/client/repo", > null); > SecureServiceStub stub = new > SecureServiceSt

Problem creating Axis2 Rampart Client

2011-07-01 Thread Louis Amstutz
I'm creating a web service using Axis2 which uses Rampart for authentication. In all the samples for Rampart, the client needs to have a client side repository for Axis2. Rampart is started on the client as follows: ConfigurationContex

Re: axis2+rampart: Must Understand check failed for header Security

2011-04-04 Thread Michal Niklas
W dniu 2011-04-04 11:20, Michal Niklas pisze: >> Hello, >> >> I have problem with axis2+rampart WS-Security response in case of server >> internal error. >> When server returns "200 OK" all seems ok. Response is checked by >> rampart if it has pro

Re: axis2+rampart: Must Understand check failed for header Security

2011-04-04 Thread Michal Niklas
W dniu 2011-04-01 12:32, Michal Niklas pisze: > Hello, > > I have problem with axis2+rampart WS-Security response in case of server > internal error. > When server returns "200 OK" all seems ok. Response is checked by > rampart if it has proper timestamp, sig

axis2+rampart: Must Understand check failed for header Security

2011-04-01 Thread Michal Niklas
Hello, I have problem with axis2+rampart WS-Security response in case of server internal error. When server returns "200 OK" all seems ok. Response is checked by rampart if it has proper timestamp, signature and decrypts function response XML. But when server returns "500 Intern

[Axis2] rampart - supported WS-Securitypolicy specification

2011-03-09 Thread planet bob
Hi guys, which WS-Securitypolicy specification is supported in Rampart 1.5.1. Especially i want to know if WS-Securitypolicy v1.3 is supported best regards bob

Re: Problem with Axis2 Rampart Threads

2010-03-18 Thread Ruchith Fernando
lem? or is there any inconsistency in this > regard. > > Thank you very much for your help. > -- > View this message in context: > http://old.nabble.com/Problem-with-Axis2-Rampart-Threads-tp27902114p27902114.html > Sent from the Axis - User mailing list archive at Nabble.com. > >

Problem with Axis2 Rampart Threads

2010-03-15 Thread TIOMAX
is there any inconsistency in this regard. Thank you very much for your help. -- View this message in context: http://old.nabble.com/Problem-with-Axis2-Rampart-Threads-tp27902114p27902114.html Sent from the Axis - User mailing list archive at Nabble.com