Hi Oli.
The workaround works very well. I now can sign in to SharePoint!!!
I have filed the JIRA issue https://issues.apache.org/jira/browse/FEDIZ-70.
Thank you for your help!
Stepan.

> -----Original Message-----
> From: Oliver Wulff [mailto:[email protected]]
> Sent: Thursday, February 06, 2014 4:48 PM
> To: [email protected]
> Subject: RE: Claims authentication to SharePoint 2010 via Apache CXF Fediz IDP
> 
> 
> Hi there
> 
> The org.apache.cxf.fediz.service.idp.beans.STSClientAction which is configured
> in idp-servlet.xml doesn't provide you the attribute to set this.
> Can you log a JIRA for this issue please?
> 
> As a workaround, you can patch the STSClientAction here:
>         IdpSTSClient sts = new IdpSTSClient(cxfBus);
> 
> sts.setAddressingNamespace(HTTP_WWW_W3_ORG_2005_08_ADDRESSING);
>         sts.setWspNamespace("http://schemas.xmlsoap.org/ws/2004/09/policy";);
> 
> As you might aware of I've started enhancing the IDP to provide REST 
> interfaces
> and using JPA to make the SP configuration persistent and indepedent of spring
> configurations [1]. I'll add the attributes for policy namespace and probably 
> you
> also need the old ws-addressing namespace to the Application resource (Service
> Provider or Relying Party).
> 
> Let me know whether this workaround works for you.
> 
> Thanks
> Oli
> 
> 
> 
> [1] http://owulff.blogspot.ch/2014/01/features-coming-in-fediz-12-rest.html
> 
> ________________________________________
> From: Hrbacek, Stepan [[email protected]]
> Sent: 06 February 2014 16:17
> To: [email protected]
> Subject: RE: Claims authentication to SharePoint 2010 via Apache CXF Fediz IDP
> 
> It seems that SharePoint 2010 does not support Web Services Policy 1.5
> (http://www.w3.org/ns/ws-policy).
> Is it please possible to configure Fediz IDP/STS to use Web Services Policy 
> 1.2
> (http://schemas.xmlsoap.org/ws/2004/09/policy)?
> 
> > Now the communication goes all the way to SharePoint and this returns
> > HTTP
> > 500 error (Runtime Error). I the SharePoint logs I can see following
> > application error, but I don't know if it is blocking or not...
> > 02/06/2014 11:18:00.40        w3wp.exe (0x1268)                             
> >   0x0BD4
> >       SharePoint Foundation           General                         8nca
> >       Verbose         Application error when access /_trust/, Error=ID3007:
> > The element 'AppliesTo' with namespace 'http://www.w3.org/ns/ws-policy' is
> > unrecognized.   at
> > Microsoft.IdentityModel.Protocols.WSTrust.WSTrustSerializationHelper.R
> > eadRS TRXml(XmlReader reader, RequestSecurityTokenResponse rstr,
> > WSTrustSerializationContext context, WSTrustConstantsAdapter
> > trustConstants) at
> > Microsoft.IdentityModel.Protocols.WSTrust.WSTrustSerializationHelper.C
> > reateR esponse(XmlReader reader, WSTrustSerializationContext context,
> > WSTrustResponseSerializer responseSerializer, WSTrustConstantsAdapter
> > trustConstants)     at
> >
> Microsoft.IdentityModel.Protocols.WSTrust.WSTrust13ResponseSerializer.Read
> > Xml(XmlReader reader, WSTrustSerializationContext context)     at
> > Microsoft.IdentityModel.Protocols.WSFederation.WSFederationSer...
> >       94b07bcc-8709-4449-8c8f-c4e175e2949b

Reply via email to