Re: Authenticating users

2005-11-21 Thread Michael Rudolf
passwords should (almost) always be stored in a non-reversable hash (MD5, SHA-1, etc) - you'll certainly need to know the algorithm if you're going to duplicate the plain-text->hash-value to compare, but it sounds like you won't have the plaintext password (which is good from a security point of

Re: Authenticating users

2005-11-21 Thread Ron Reynolds
passwords should (almost) always be stored in a non-reversable hash (MD5, SHA-1, etc) - you'll certainly need to know the algorithm if you're going to duplicate the plain-text->hash-value to compare, but it sounds like you won't have the plaintext password (which is good from a security point of vi

Re: Authenticating users

2005-11-21 Thread Ron Reynolds
gt;>>>>>SOAPHeaderElement header = (SOAPHeaderElement)headers.get(0); >>>>>>>>>> >>>>>>>>>>you can then extract the actual username by walking the DOM tree to >>>>>>>>>>the node which contains the username >>>>>>>>>>MessageElement usernameTokenElement = >>>>>>>

Re: Authenticating users

2005-11-21 Thread Michael Rudolf
echanisms. then on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on that side. hth. ron. Hi, is there any tutorial or example for authenticating users of we services by username and

Re: Authenticating users

2005-11-21 Thread Michael Rudolf
can support them. they are part of the WS-Security standard if you want to stick with "endorsed" authentication mechanisms. then on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on that side. hth. ron.

Re: Authenticating users

2005-11-21 Thread Ron Reynolds
t;>>>>>>>code, does an LDAP lookup of the user to gather roles, and then >>>>>>>>creates an app-specific user object which it stores it as a properly >>>>>>>>in the MessageContext where anyone in the handling chain can then >

Re: Authenticating users

2005-11-21 Thread Michael Rudolf
UsernameTokens. they're pretty straight-forward as long as your client can support them. they are part of the WS-Security standard if you want to stick with "endorsed" authentication mechanisms. then on the server-side you'll typically need a JNDI interface to your LDAP serv

Re: Authenticating users

2005-11-21 Thread Ron Reynolds
the authentication is completely transparent to the >>>>>>>service itself. >>>>>>>Thanks. >>>>>>>Michael >>>>>>> >>>>>>> >>>>>>> >>>>>>> >&

Re: Authenticating users

2005-11-21 Thread Michael Rudolf
you want to stick with "endorsed" authentication mechanisms. then on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on that side. hth. ron. Hi, is there any tutorial or example for authenticatin

Re: Authenticating users

2005-11-21 Thread iksrazal
dates whatever it's configured > >>>>>to validate and then passes the request on to your handlers/service > >>>>>(or rejects the message if it does not validate properly). to add > >>>>>UsernameTokens to a request and process them on the s

Re: Authenticating users

2005-11-21 Thread Ron Reynolds
en passes the request on to your handlers/service >>>>>>(or rejects the message if it does not validate properly). to add >>>>>>UsernameTokens to a request and process them on the server requires >>>>>>a CallbackHandler on the client side which can

Re: Authenticating users

2005-11-21 Thread Michael Rudolf
on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on that side. hth. ron. Hi, is there any tutorial or example for authenticating users of we services by username and pass over HTTPS? Can anybody explain in more det

Re: Authenticating users

2005-11-21 Thread Ron Reynolds
the most part. it also inserts a few entries in the >>>> MessageContext so you can later determine what kind of authenication >>>> has been done. >>>> >>>> hth. >>>> ...ron. >>>> Michael Rudolf wrote: >>>> >>>&g

Re: Authenticating users

2005-11-21 Thread Michael Rudolf
straight-forward as long as your client can support them. they are part of the WS-Security standard if you want to stick with "endorsed" authentication mechanisms. then on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on tha

Re: Authenticating users

2005-11-20 Thread Ron Reynolds
t of the WS-Security standard if you want to stick with "endorsed" authentication mechanisms. then on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on that side. hth. ....ron. Hi, is there any tutorial or

Re: Authenticating users

2005-11-20 Thread Michael Rudolf
e user on that side. hth. ....ron. Hi, is there any tutorial or example for authenticating users of we services by username and pass over HTTPS? Can anybody explain in more detail how this works? Is there any alternative to it? I want to query axis web sercvices from a portal.

Re: Authenticating users

2005-11-19 Thread Ron Reynolds
o stick with "endorsed" authentication mechanisms. then on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on that side. hth. ....ron. Hi, is there any tutorial or example for authenticating users of we services by

Re: Authenticating users

2005-11-19 Thread Michael Rudolf
he WS-Security standard if you want to stick with "endorsed" authentication mechanisms. then on the server-side you'll typically need a JNDI interface to your LDAP server to authenticate the user on that side. hth. ron. Hi, is there any tutorial or example for authen

Re: Authenticating users

2005-11-18 Thread Ron Reynolds
a JNDI interface to your LDAP server to authenticate the user on that side. hth. ron. > Hi, > is there any tutorial or example for authenticating users of we services > by username and pass over HTTPS? Can anybody explain in more detail how > this works? Is there any al

Authenticating users

2005-11-18 Thread Michael Rudolf
Hi, is there any tutorial or example for authenticating users of we services by username and pass over HTTPS? Can anybody explain in more detail how this works? Is there any alternative to it? I want to query axis web sercvices from a portal. That uses LDAP for authetication. I would like to