Re: CXF+ACEGI + Anybody out there?

2007-10-22 Thread mattmadhavan
Hello again, Sorry to re-visit this thread again, but I am still not clear if we reached any conclusion! Do we just use Acegi or use it with WSSJ? Can some one please post a complete example - With all the configurations etc? It will be awesome! Thanks Matt Juan José Vázquez Delgado wrote: >

Re: CXF+ACEGI + Anybody out there?

2007-09-21 Thread Juan José Vázquez Delgado
Hi all, I love CXF, but IMHO the ws-security module is not good enough solved. I suspect the responsible is wss4j wich is not too much powerful. I´m thinking in using the glassfish XWSS (https://xwss.dev.java.net/) in a similar way to Spring Web Services ( http://static.springframework.org/spring

Re: CXF+ACEGI + Anybody out there?

2007-09-21 Thread Eric Miles
We started some discussion the other day about CXF+Acegi out there the other day, but hadn't seen anything since. Any discussion after I sent the source code or my findings with integrating the two? On Tue, 2007-09-18 at 11:18 -0400, Eric Miles wrote: > Actually, here is the code. Attached is th

Re: CXF+ACEGI + Anybody out there?

2007-09-18 Thread Eric Miles
Actually, here is the code. Attached is the WSS4J callback class and the CXF interceptor that uses the Acegi authentication manager for authentication. Pretty simple and straight forward. If you look at the callback handler, you can see my comment regarding the WSS4J engine. I do have one conce

Re: CXF+ACEGI + Anybody out there?

2007-09-18 Thread Eric Miles
It was a bit of extra coding, as there is some dis join between what WS-Security wants to do and what Acegi wants to do (at least for UsernameToken authentication). We also have a business requirement due to some legacy data setup that proved to be problematic with WSS4J. WSS4J wants you to retur

Re: CXF+ACEGI + Anybody out there?

2007-09-18 Thread mattmadhavan
Eric, Do you mind posting a complete example. May be we can have a very constructive discussions based on that. Thanks Matt BigEHokie wrote: > > Dan, > > What sort of solution are you looking for? We are using an > Acegi/Spring/CXF implementation at our company where we are using > WS-Sec

Re: CXF+ACEGI + Anybody out there?

2007-09-18 Thread Dan Diephouse
I guess I'm interesting in seeing any code that could be shared between users come into CXF. Specifically, if I remember correctly from the solutions that I've seen, the WS-Security integration in particular takes an extra bit of coding. Would be very happy to include your contributions. Chee

Re: CXF+ACEGI + Anybody out there?

2007-09-17 Thread Eric Miles
Dan, What sort of solution are you looking for? We are using an Acegi/Spring/CXF implementation at our company where we are using WS-Security and Acegi for authentication and AOP/Acegi for authorization. We could be interested in contributing. Thanks, Eric On Tue, 2007-09-18 at 00:15 +0200, D

Re: CXF+ACEGI + Anybody out there?

2007-09-17 Thread Dan Diephouse
And I want somebody to contribute a cleaner solution :-D I know there is a lot of stuff we could do with Spring Security/Acegi that would be super cool. It'd be a real low barrier way to contribute some stuff if anyone is interested. Cheers, - Dan mattmadhavan wrote: Hi Ray, No I do not w

Re: CXF+ACEGI + Anybody out there?

2007-09-14 Thread Ray Krueger
Acegi can be used on the secure the application the server-side. WS-Security stuff can be used as well. Your client side application need only present the credentials to the server to say who it wants to log in as. That's not a an Acegi thing, it's really not even a java thing at that point. If y

Re: CXF+ACEGI + Anybody out there?

2007-09-14 Thread Glen Mazza
Am Freitag, den 14.09.2007, 08:16 -0700 schrieb Zarar Siddiqi: > UsernamePasswordAuthenticationToken token = new > UsernamePasswordAuthenticationToken( >user.getUsername(), user.getPassword(), user.getAuthorities()); > // Populate Acegi Security Context > SecurityContextHolder.getContext().setA

Re: CXF+ACEGI + Anybody out there?

2007-09-14 Thread mattmadhavan
Hi Ray, No I do not want the client side to tell the server! Thats my point. Some good blogs I have seen, do that! Where the client 'tells' which handler to use! I want a cleaner ACEGI+ XFIRE solution! Thanks Matt Ray Krueger wrote: > > You want the client to tell the server how to do securi

Re: CXF+ACEGI + Anybody out there?

2007-09-14 Thread Ray Krueger
You want the client to tell the server how to do security? That sounds crazy :) Your client side should either be doing http based security or ws-security. That doesn't have anything to do with Acegi at that point. On 9/14/07, Zarar Siddiqi <[EMAIL PROTECTED]> wrote: > > I'm trying to understand

Re: CXF+ACEGI + Anybody out there?

2007-09-14 Thread Zarar Siddiqi
I'm trying to understand what you're saying but am having difficulty. But here goes: > Can some one point me to some docs on the CXF and ACEGI integration > or CXF and security like authentication and authorization. I use Acegi for authorization purposes only. IMHO it doesn't really make sense

Re: CXF+ACEGI + Anybody out there?

2007-09-14 Thread mattmadhavan
Any Help will be appreciated! mattmadhavan wrote: > > Hello, > Can some one point me to some docs on the CXF and ACEGI integration or CXF > and security like authentication and authorization. Some sample app will > even be great. > > I found some blogs on the CXF+ACEGI, but it is Java centric