[
https://issues.apache.org/jira/browse/CXF-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13173346#comment-13173346
]
Colm O hEigeartaigh commented on CXF-3635:
------------------------------------------
Hi Tom,
I have finally gotten around to reviewing this patch and have committed a
fairly extensively modified version of it to trunk (it's a bit more robust and
shares some code with the SecureConversation code, which does something very
similar):
http://svn.apache.org/viewvc?view=revision&revision=1221366
I have also added support for the STS side of the SPNEGO exchange (solely for
testing purposes), and added some system tests based around it. The System
tests are here:
http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/java/org/apache/cxf/systest/ws/spnego/SpnegoTokenTest.java?view=markup
The client configuration is here:
http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/resources/org/apache/cxf/systest/ws/spnego/client/client.xml?view=markup
The server configuration is here:
http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/resources/org/apache/cxf/systest/ws/spnego/server/server.xml?view=markup
and the WSDL is here:
http://svn.apache.org/viewvc/cxf/trunk/systests/ws-security/src/test/resources/org/apache/cxf/systest/ws/spnego/DoubleItSpnego.wsdl?view=markup
The tests are @Ignored as they rely on a KDC. I have not tested this with WCF,
only CXF, and so it would be great if you could modify the system test to use
your test credentials and let me know if it works or not.
Thanks,
Colm.
> WS-Trust SPNego (WCF message level spnego)
> ------------------------------------------
>
> Key: CXF-3635
> URL: https://issues.apache.org/jira/browse/CXF-3635
> Project: CXF
> Issue Type: New Feature
> Components: WS-* Components
> Affects Versions: 2.3.5
> Reporter: Tom Schneider
> Assignee: Colm O hEigeartaigh
> Attachments: cxf-wstrust-spnego.zip
>
>
> We have spent time implementing SPNego over WS-Trust support for CXF and wish
> to submit it for possible inclusion in CXF itself. (Or at least as an
> example for others to follow) This was implemented so we could use the
> webservice of MS CRM 2011 when configured for 'on-premise' security, although
> I think WCF 4.0 uses this type of security by default if you explicitly
> change it. So I'm sure this functionality would be useful to others.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
