Jenkins build is still unstable: Axis2-trunk-java-1.6 #1485

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

Jenkins build is still unstable: Axis2-trunk-java-1.6 » Apache Axis2 - JAXWS #1485

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

Jenkins build became unstable: Axis2-trunk-java-1.6 » Apache Axis2 - JAXWS Integration Tests #1485

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.or

RE: Rampart STS Username service not returning password in callback *Update to change algo to SHA*

2013-01-15 Thread Martin Gainty
Update: Apparently the chinese have broken MD5 with collision attacks ...perhaps we should consider implementing SHA-1 algorithmhttp://en.wikipedia.org/wiki/MD5#Simple_Implementation From: mgai...@hotmail.com To: java-dev@axis.apache.org Subject: RE: Rampart STS Username service not returning

RE: Rampart STS Username service not returning password in callback

2013-01-15 Thread Martin Gainty
Martin, I looked in the code and it stated that the callback must provide the password. MG>yep..the next snippet of code that I sent you ..the next line is setPassword(password) This is not good for a service that does not store the password but only a password digest (for security reasons).

Jenkins build is still unstable: Axis2 #2155

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

Jenkins build became unstable: Axis2 » Apache Axis2 - JAXWS Integration Tests #2155

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

Jenkins build is still unstable: Axis2 » Apache Axis2 - JAXWS #2155

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

RE: Rampart STS Username service not returning password in callback

2013-01-15 Thread Brian Reinhold
Martin, I looked in the code and it stated that the callback must provide the password. This is not good for a service that does not store the password but only a password digest (for security reasons). That means the service does not know the user’s password and a hacker cannot obtain it by ha

RE: Rampart STS Username service not returning password in callback

2013-01-15 Thread Martin Gainty
Hi Brian assuming rampart implements this configuration: http://schemas.xmlsoap.org/soap/envelope/";> http://www.w3.org/2005/08/addressing";> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"; soapenv:mustUnderstand="1"> http://docs.oasis-

RE: Rampart STS Username service not returning password in callback

2013-01-15 Thread Brian Reinhold
PART A: Has anyone else had this problem? I have a simple STS Username token request for a SAML token where the username token is as follows: myName http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token -profile-1.0#PasswordText">myPassword On the receive sid

Rampart STS Username service not returning password in callback

2013-01-15 Thread Brian Reinhold
Has anyone else had this problem? I have a simple STS Username token request for a SAML token where the username token is as follows: myName http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token -profile-1.0#PasswordText">myPassword On the receive side there i

[jira] [Commented] (AXIS2-5444) FileNotFound exception deploying to specific context on Tomcat 7

2013-01-15 Thread Kishanthan Thangarajah (JIRA)
[ https://issues.apache.org/jira/browse/AXIS2-5444?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13554152#comment-13554152 ] Kishanthan Thangarajah commented on AXIS2-5444: --- This issue is not there in

[jira] [Commented] (AXIS2-4091) WSDL11ToAxisServiceBuilder + HTTP Binding: Unused/Useless global element declations are appended into WSDL's XSD documents

2013-01-15 Thread Antonio Andrade (JIRA)
[ https://issues.apache.org/jira/browse/AXIS2-4091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13554017#comment-13554017 ] Antonio Andrade commented on AXIS2-4091: When do you think this patch be reviewed

Jenkins build is still unstable: Axis2-trunk-java-1.6 #1484

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

Jenkins build is still unstable: Axis2-trunk-java-1.6 » Apache Axis2 - JAXWS #1484

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

Jenkins build is still unstable: Axis2 #2154

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

Jenkins build is still unstable: Axis2 » Apache Axis2 - JAXWS #2154

2013-01-15 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org

[jira] [Commented] (AXIS2-5342) Generated code for xsd:totalDigits cause errors

2013-01-15 Thread Pramod CA (JIRA)
[ https://issues.apache.org/jira/browse/AXIS2-5342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13553610#comment-13553610 ] Pramod CA commented on AXIS2-5342: -- We are using wsdl and xsds from a 3rd party which has