cschneider wrote > Try something this: > feature:repo-add cxf 3.0.2 > feature:install cxf cxf-rt-security
That did install the cxf-rt-security feature, which was previously marked as not installed. However it didn't help. I tried all sorts of combinations in the Import package section, trying to explicitly include ws-policy support, but it didn't help either, eg: <Import-Package> javax.jws, javax.xml.bind.annotation, javax.wsdl, org.apache.cxf.ws.security.policy, org.apache.cxf.ws.security.policy.model, org.apache.cxf.ws.security.policy.builders, org.apache.cxf.ws.security.wss4j, org.springframework.beans.factory.config, javax.security.auth.callback, org.apache.cxf.interceptor.security, org.apache.cxf.transport.http, org.apache.cxf, org.apache.cxf.endpoint, org.apache.cxf.frontend, org.apache.cxf.interceptor, org.apache.cxf.jaxws, org.apache.cxf.phase, org.apache.cxf.ws.policy, * </Import-Package> I experimented more outside the OSGi container to reproduce the "Suboptimal policy" warnings, and I found that if I didn't have the "cxf-rt-frontend-jaxws" dependency (which brings in the ws-policy dependency I think) at runtime then I would get the same errors. I have a compile time dependency on "cxf-rt-ws-security", but not on "cxf-rt-frontend-jaxws". I haven't tried individually listing the dependencies of cxf-rt-frontend-jaxws, to figure out which individual jar is the missing link, but I'm hoping there is an easier way. Is there some OSGi magic sauce that says, I want all of CXF to initialise at runtime? What could cause the WS-Policy dependencies to not be found? To I need to initialise the CXF Bus in a particular way, specifying which extensions I want? -- View this message in context: http://cxf.547215.n5.nabble.com/Using-CXF-inside-Apache-Karaf-tp5751248p5751292.html Sent from the cxf-user mailing list archive at Nabble.com.