Re: Validating SOAP message for WS-Security

2008-07-29 Thread Heshan Suriyaarachchi
Hi Dini,
   I am writing a handler[1] to do Basic Security Profile (BSP) 1.0
validation, as my GSoC project. With regard to your question, you can write
a handler[2] to do the validation. Then you can engage it as a module.

[1] - http://wiki.apache.org/general/HeshanSuriyaarachchi/GSoC2008/proposal
[2] - http://www.developer.com/java/web/article.php/3529321

On Tue, Jul 29, 2008 at 11:07 AM, Nandana Mihindukulasooriya 
[EMAIL PROTECTED] wrote:

 Hi Dini,
 There is a GSoC project [1] - coming which validates incoming messages
 according to  rules in BSP [2]  specification.  This is currently
 implemented as a Axis2 handler but I'm sure Heshan will be interested in
 porting it as a standalone tool too.

 thanks,
 nandana

 [1] -
 http://code.google.com/soc/2008/asf/appinfo.html?csaid=FF8E81CA884F19CA
 [2] - http://www.ws-i.org/Profiles/BasicSecurityProfile-1.0.html


 On Tue, Jul 29, 2008 at 3:01 AM, Dini Omar [EMAIL PROTECTED] wrote:

 Hi,

 Let say i have generated a SOAP message using WS-Seucirty. Is there a way
 or a tool that i can use to validate this soap message to check that it
 complys with all WS-Security or any other WS-* standard?

 Thanks





-- 
Regards,
Heshan Suriyaarachchi

http://heshans.blogspot.com/


Re: Newbie

2008-07-16 Thread Heshan Suriyaarachchi
Hi  Pierre,
   I do not understand what exactly that  you want to do, but you can do
a thing like this

String str2 =
deductvar11.8/var1var24.87594/var2/deduct;
StAXOMBuilder builder = new StAXOMBuilder(new
ByteArrayInputStream(str2.getBytes()));
OMElement om = builder.getDocumentElement();

Then you can do the AXIOM stuff that you want to do with the OMElement.
Following articles will help you to get an understanding on AXIOM.


[1] - http://www.ibm.com/developerworks/webservices/library/ws-java2/
[2] - http://ws.apache.org/axis2/1_0/OMTutorial.html
[3] - http://wso2.org/library/2512


On Mon, Jul 7, 2008 at 7:59 PM, pierre posset [EMAIL PROTECTED] wrote:

  Hello,

I need to translate this XML in a java classe:

 soap:Envelope
 soap:Header
 wsse:Security SOAP-ENV:mustUnderstand=1
   wsse:UsernameToken xsi:type=wsse:UsernameTokenType
 wsse:Usernameusername/wsse:Username
 wsse:Password
 Type=wsse:PasswordTextpassword/wsse:Password
   /wsse:UsernameToken
 /wsse:Security
 /soap:Header
 soap:Body
 CreateAdvertiser xmlns=http://server/service;
 xmlAdv
 NameAdvertiser Name/Name
 AddressAdvertiser Address/Address
 /xmlAdv
 /CreateAdvertiser
 /soap:Body
 /soap:Envelope

 and I don't find a document which explain me how to do.

 I have tried to use AXIOM but of course it doesn't work because I don't
 really know what I am doing.

 I really need help.

 Thank you very much.

 Best Regards.

 --
 Discutez gratuitement avec vos amis en vidéo ! Téléchargez Messenger,
 c'est gratuit ! http://www.windowslive.fr/majmessenger.asp




-- 
Regards,
Heshan Suriyaarachchi

http://heshans.blogspot.com/


Re: Newbie

2008-07-16 Thread Heshan Suriyaarachchi
Hi,
   You can do like below as well.

String filePath = my-xml-files/MyXMLFile.xml;
OMElement documentElement = new StAXOMBuilder(filePath).getDocumentElement();



On Wed, Jul 16, 2008 at 3:28 PM, Heshan Suriyaarachchi 
[EMAIL PROTECTED] wrote:

 Hi  Pierre,
I do not understand what exactly that  you want to do, but you can
 do a thing like this

 String str2 =
 deductvar11.8/var1var24.87594/var2/deduct;
 StAXOMBuilder builder = new StAXOMBuilder(new
 ByteArrayInputStream(str2.getBytes()));
 OMElement om = builder.getDocumentElement();

 Then you can do the AXIOM stuff that you want to do with the OMElement.
 Following articles will help you to get an understanding on AXIOM.


 [1] - http://www.ibm.com/developerworks/webservices/library/ws-java2/
 [2] - http://ws.apache.org/axis2/1_0/OMTutorial.html
 [3] - http://wso2.org/library/2512



 On Mon, Jul 7, 2008 at 7:59 PM, pierre posset [EMAIL PROTECTED]
 wrote:

  Hello,

I need to translate this XML in a java classe:

 soap:Envelope
 soap:Header
 wsse:Security SOAP-ENV:mustUnderstand=1
   wsse:UsernameToken xsi:type=wsse:UsernameTokenType
 wsse:Usernameusername/wsse:Username
 wsse:Password
 Type=wsse:PasswordTextpassword/wsse:Password
   /wsse:UsernameToken
 /wsse:Security
 /soap:Header
 soap:Body
 CreateAdvertiser xmlns=http://server/service;
 xmlAdv
 NameAdvertiser Name/Name
 AddressAdvertiser Address/Address
 /xmlAdv
 /CreateAdvertiser
 /soap:Body
 /soap:Envelope

 and I don't find a document which explain me how to do.

 I have tried to use AXIOM but of course it doesn't work because I don't
 really know what I am doing.

 I really need help.

 Thank you very much.

 Best Regards.

 --
 Discutez gratuitement avec vos amis en vidéo ! Téléchargez Messenger,
 c'est gratuit ! http://www.windowslive.fr/majmessenger.asp




 --
 Regards,
 Heshan Suriyaarachchi

 http://heshans.blogspot.com/




-- 
Regards,
Heshan Suriyaarachchi

http://heshans.blogspot.com/


Re: How to print axis2 request and response

2008-07-14 Thread Heshan Suriyaarachchi
 is the highest joy. - Dhammapada




 --
 Amila Suriarachchi,
 WSO2 Inc.

 

 No virus found in this incoming message.
 Checked by AVG. Version: 7.5.524 / Virus Database: 270.4.7/1543 - Release
 Date: 7/9/2008 6:32 PM




 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
Regards,
Heshan Suriyaarachchi

http://heshans.blogspot.com/


Auditing support for Apache Rampart

2008-03-18 Thread Heshan Suriyaarachchi
Hi

I am a 3rd year Computer Science undergraduate of University of Colombo
School of Computing (UCSC) . I am hoping to participate in this year's
Google Summer of Code. I went through the Apache Project Idea's List and
found this project interesting.

Apache Rampart is the security module of Axis2. It secures SOAP messages
according to specifications in the WS-Security stack. Rampart currently
doesn't store the auditing details about SOAP messages. As it is said
systematic audit record generation is considered a mission-critical function
in any software development environment.

Most COTS (Commercial Off The Shelf) Web servers include an audit or
security event logging service that provides the application with the
mechanism it needs to log security events to multiple logs. Configurable
property- driven parameters allow the administrator to modify the semantics
of the application's log data capture without needing to rewrite the
application code.

Currently there is no standards/specifications regarding this and it is an
implementation specific thing. So I would like to start an open discussion
on the main features and the additional features that should be implemented
under this project and I need Axis2/Rampart users to give feedback so I can
refine the requirements and features.

Thanx in advance
Heshan Suriyaarachchi