Laurence, I believe you start with taking a look at the Kerberos Token Profile at the OASIS WSS TC web site:
http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss There's lots of refactoring in the latest SVN, which makes it easy to plugin a new token profile. So please get the latest SVN code and start asking more questions :) thanks, dims On 11/10/05, Laurence Brockman <[EMAIL PROTECTED]> wrote: > > > > Hello, > > > > Sorry if this is a FAQ but I have been looking for answers to this high and > low and have not seen this on the list. > > > > We are going to try and use Kerberos to authenticate users on our SOAP > server. What we envision is having the client send down the SOAP request > with a service ticket from a KDC. The server (Axis using WSS4J on Tomcat) > would then authenticate this user against said KDC. After briefly looking at > the documentation within the WSS4J code I think what we would want to do is > extend the WSDoAllHandler class (From the > org.apache.axis.security.handler package). Is this the > right direction to be going in? Has anybody looked at this? I'm relatively > new to Axis/WSS4J and some guidance would be awesome! > > > > Thanks, > > Laurence > > > > Laurence Brockman > Server Specialist, Shaw Operations Centre > Shaw Communications Inc. > Phone : (403) 303-4805 > E-mail : [EMAIL PROTECTED] > > > > ACCOUNTABLE BALANCE CUSTOMER FOCUSED INTEGRITY LOYALTY > POSITIVE, CAN DO ATTITUDE TEAM PLAYER > > -- Davanum Srinivas : http://wso2.com/blogs/ --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]