Re: WS-security,SAML,XACML and co.

2003-11-20 Thread Rudi Verago \[vlain\]
I know it but it's over ssl and therefore i use tomcat. I try to made up two different authoritation method: one with jaas-tomcat real and one with ssl+axis basi auth. Thanks, Aloha -> Hi Rudi, -> -> What we have done is implement Axis/JAX-RPC client and server side -> handlers. The client side

Re: WS-security,SAML,XACML and co.

2003-11-20 Thread Aaron Hamid
Hi Rudi, What we have done is implement Axis/JAX-RPC client and server side handlers. The client side handler attaches a credential in the HTTP header ("Authorization" heaer), and the server side handler authenticates it, and makes the user id available in both the 1) MessageContext in Authe

Re: WS-security,SAML,XACML and co.

2003-11-20 Thread Davanum Srinivas
See http://sf.net/projects/wss4j/ for WS-Security Java Impl based on Axis, you will need to access the cvs directly. there are samples though. -- dims --- "Rudi Verago [vlain]" <[EMAIL PROTECTED]> wrote: > I need user/call authentication in a swing application. > Beginnig I want to use SAML and

WS-security,SAML,XACML and co.

2003-11-20 Thread Rudi Verago \[vlain\]
I need user/call authentication in a swing application. Beginnig I want to use SAML and SSO but opensaml implementation has no documentation and samples, then I try XACML but nothing; same thing for xml security at Apache: without sample it's hard. Axis auth methods aren't safe. Now I try to imple