Re: karaf 3.0.0.RC1 ?

2013-02-20 Thread Christoph Gritschenberger
Hi JB, Any update on karaf-3.0.0(.RC1)? AFAICS the aries libs and pax-url have already been released. regards, christoph On 2013-01-18 00:34, Jean-Baptiste Onofré wrote: Hi Andrei, A first artifact (Aries plugin) has been cut off yesterday and the vote is in progress. The other artifacts

Re: karaf 3.0.0.RC1 ?

2013-02-20 Thread Jean-Baptiste Onofré
Hi Christoph, I'm focus on fixing the latest issues for Karaf 2.3.1. We have a couple of major issues on subshell. I gonna ping Jamie to plan the 3.0.0.RC1 release (it's a RC1 after all, not a 3.0.0 ;)). Regards JB On 02/20/2013 12:02 PM, Christoph Gritschenberger wrote: Hi JB, Any update

Re: Problem/Error installing cellar-webconsole

2013-02-20 Thread Jean-Baptiste Onofré
Hi Andreas, Yes, it's just a version range (the plugin interface didn't change in Felix WebConsole). However, it means that I have to release a new Cellar version (2.2.6) with this fix. Is it OK for you ? Regards JB On 02/20/2013 09:13 AM, Andreas wrote: Hello JB, thanks for your

Re: karaf 3.0.0.RC1 ?

2013-02-20 Thread Jamie G.
The release notes online and in-kit for 2.3.1 just require some updates, and the dependencies table a good review. This it's platform test builds, and the proper RC process. Karaf 3.0.0.RC1 is going to require the release notes to be generated, then edited to note duplications, and which

Re: Problem/Error installing cellar-webconsole

2013-02-20 Thread Jean-Baptiste Onofré
FYI, if you want to follow the progress: https://issues.apache.org/jira/browse/KARAF-2202 Regards JB On 02/20/2013 09:13 AM, Andreas wrote: Hello JB, thanks for your feedback. Do you think you kann fix this for the mentioned version(s)? The setup above works stable and we want to use it in a

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Łukasz Dywicki
I think you may get this with chaining JAAS login modules in login context configuration, however we don't ship certificate login module yet. Which certificate login module do you use now? Lukasz Wiadomość napisana przez Achim Nierbeck bcanh...@googlemail.com w dniu 20 lut 2013, o godz.

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Achim Nierbeck
Lukasz, Pax-Web should work with Certificates already, it just needs a proper combination of the authentication which should be done by Pax-Web and the authorization which should be done by the JAAS part of Karaf. regards, Achim 2013/2/20 Łukasz Dywicki l...@code-house.org I think you may

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Łukasz Dywicki
I was thinking about something more complex [1] where principals may be populated from peer certificate. [1] https://github.com/jboss-switchyard/core/blob/master/security/base/src/main/java/org/switchyard/security/login/CertificateLoginModule.java Cheers, Lukasz Wiadomość napisana przez Achim

Re: Problem/Error installing cellar-webconsole

2013-02-20 Thread Andreas
Hi JB, yes of course, sounds good to me. If the cellar functionality is untouched (because we tested our setup properly). Thanks for your effort. Regards Andreas -- View this message in context:

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Lars-Erik Helander
Lukasz Achim, Thanks for the feedback. No, I do not have a working stand alone jetty solution to port. The solution works as follows today: The client which is another system and not a human user, autthenticates to the Karaf server using a client cert. No login takes place so its just a

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Achim Nierbeck
Hi Lars, I think it should be possible. At least right now I don't see anything objecting to this. As Pax Web already does work with certs, you have the credentials for it. Now you just need to make sure you're configuration for the authorization is delegated to the underlying JAAS. This should

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Lars-Erik Helander
Thanks Achim, do you have any suggestions on where I can find documentation/examples that could be of help to me, e.g. how to configure my web app to force login via client certs? Thanks Lars Skickat från min iPhone 20 feb 2013 kl. 17:41 skrev Achim Nierbeck bcanh...@googlemail.com: Hi

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Christian Schneider
I am currently trying to do a similar thing. I try to authenticate against a CXF Secure Token Service using a client cert. Currently CXF STS has some modules for authorization. To get this out of STS I try to switch the authorization to JAAS. The problem is that in JAAS you can not simply get

Re: Https 2-way authentication and JAAS

2013-02-20 Thread Lars-Erik Helander
Hi Christian, thanks for sharing. I will report on how my work progresses. /Lars Skickat från min iPhone 21 feb 2013 kl. 01:13 skrev Christian Schneider ch...@die-schneider.net: I am currently trying to do a similar thing. I try to authenticate against a CXF Secure Token Service using a