Re: Securing SOAP Messages with Rampart

2010-11-02 Thread Dennis Sosnoski
Hi Chris, You can learn about how this all works in my developerWorks articles covering Axis2 WS-Security usage: http://www.ibm.com/developerworks/java/library/j-jws4/index.html http://www.ibm.com/developerworks/java/library/j-jws5/index.html http://www.ibm.com/developerworks/java/library/j-jws6/

Re: axis2 1.5.2 - rampart 1.5

2010-11-02 Thread Dennis Sosnoski
When I try this combination I get server errors: INFO: Deploying web application archive axis2.war [INFO] Clustering has been disabled [INFO] Deploying module: soapmonitor-1.5.2 - file:/home/dennis/tools/apache-tomcat-6.0.20/webapps/axis2/WEB-INF/modules/soapmonitor-1.5.2.mar [INFO] Deploying modu

Axis2 code gen with WS-Policy 1.5?

2010-11-02 Thread Dennis Sosnoski
Is anyone using WS-Policy 1.5 (the official W3C release, http://www.w3.org/ns/ws-policy namespace) with Axis2 code generation? It looks like the policy is silently ignored, so the client gets generated with no policy attached and there's no security at runtime. - Dennis -- Dennis M. Sosnoski J

Re: axis2 1.5.2 - rampart 1.5

2010-11-02 Thread Andreas Veithen
Dennis, Can you check that you have WEB-INF/lib/mex-1.5.2-impl.jar and that this JAR contains MexException? Andreas On Tue, Nov 2, 2010 at 08:54, Dennis Sosnoski wrote: > When I try this combination I get server errors: > > INFO: Deploying web application archive axis2.war > [INFO] Clustering h

Re: axis2 1.5.2 - rampart 1.5

2010-11-02 Thread Dennis Sosnoski
No, don't have that. Since that jar doesn't appear to be present in either the Axis2 1.5.2 or Rampart 1.5 distribution, I'm not sure where I would have gotten it. Was it supposed to be included in the Axis2 distribution? - Dennis On 11/02/2010 09:35 PM, Andreas Veithen wrote: > Dennis, > > Can

Re: axis2 1.5.2 - rampart 1.5

2010-11-02 Thread Prabath Siriwardana
This is a known issue in Axis2 WAR I guess.. You can find the jar from axis2 zip distribution. Thanks & regards, -Prabath On Tue, Nov 2, 2010 at 2:50 PM, Dennis Sosnoski wrote: > No, don't have that. Since that jar doesn't appear to be present in > either the Axis2 1.5.2 or Rampart 1.5 distribut

Re: axis2 1.5.2 - rampart 1.5

2010-11-02 Thread Andreas Veithen
I downloaded the official 1.5.2 WAR distribution (axis2-1.5.2-war.zip) and the WAR does contain this JAR. However, I know that in 1.5.1 there were issues with this JAR. IIRC, it was not a real Maven artifact but built using the antrun plugin and then included in the WAR using a relative path to the

Re: axis2 1.5.2 - rampart 1.5

2010-11-02 Thread Dennis Sosnoski
I downloaded the official 1.5.2 bin.zip from http://ws.apache.org/axis2/download/1_5_2/download.cgi and generated the war from that using Ant, after installing Rampart (the standard way to get a server installation including Rampart, as far as I know). I've just checked again, and the download zip

Re: Axis2 code gen with WS-Policy 1.5?

2010-11-02 Thread Sanka Samaranayake
Can you post the WSDL that you use to generate code ? Sanka On Tue, Nov 2, 2010 at 8:57 AM, Dennis Sosnoski wrote: > Is anyone using WS-Policy 1.5 (the official W3C release, > http://www.w3.org/ns/ws-policy namespace) with Axis2 code generation? It > looks like the policy is silently ignored, s

Re: axis2 1.5.2 - rampart 1.5

2010-11-02 Thread Andreas Veithen
Yes, it is indeed only included in the WAR distribution, but not in the standard binary distribution. Will be fixed for 1.5.3. I opened a JIRA report to track this issue: AXIS2-4870. Andreas On Tue, Nov 2, 2010 at 12:17, Dennis Sosnoski wrote: > I downloaded the official 1.5.2 bin.zip from > htt

Advanced training content at WS02 for Axis2

2010-11-02 Thread Prateek Asthana
Hi, I have found the training material at http://wso2.org/training useful. I see the beginner and Intermediate section and there are references to Advanced section too. Can you please let me know where to find the Advanced material? Thanks, Prateek

Re: Advanced training content at WS02 for Axis2

2010-11-02 Thread Samisa Abeysinghe
On Tue, Nov 2, 2010 at 5:19 PM, Prateek Asthana wrote: > Hi, > I have found the training material at http://wso2.org/training useful. > I see the beginner and Intermediate section and there are references > to Advanced section too. Can you please let me know where to find the > Advanced material?

Re: Axis2 code gen with WS-Policy 1.5?

2010-11-02 Thread Dennis Sosnoski
I've attached one. If you generate from this as supplied (using the submission namespace) the client stub attaches the appropriate policy to the messages: (__operation).getMessage(org.apache.axis2.wsdl.WSDLConstants.MESSAGE_LABEL_OUT_VALUE).getPolicySubject().attachPolicy(getPolicy("http:/

Re: question on consuming service with lopsided security

2010-11-02 Thread Dennis Sosnoski
Hi Thomas, I haven't had any luck with one-way security policies using Axis2, though I didn't try this particular combination. You might find my latest Java Web Services article on devWorks of interest: http://www.ibm.com/developerworks/java/library/j-jws18/index.html This one covers WS-Policy in

Re: question on consuming service with lopsided security

2010-11-02 Thread Samisa Abeysinghe
On Wed, Nov 3, 2010 at 5:24 AM, Dennis Sosnoski wrote: > Hi Thomas, > > I haven't had any luck with one-way security policies using Axis2, > though I didn't try this particular combination. You might find my > latest Java Web Services article on devWorks of interest: > http://www.ibm.com/develope

Re: question on consuming service with lopsided security

2010-11-02 Thread Dennis Sosnoski
If the consensus of the Axis2 developers is to avoid any discussion of other alternatives on these lists I'll certainly respect that. But unless there is a policy to that effect I'll continue to mention other open source alternatives to people if it looks like Axis2 won't fulfill their requirements

Re: question on consuming service with lopsided security

2010-11-02 Thread Samisa Abeysinghe
I am more interested in fixing gaps in Axis2. I have no issues in learning the weaknesses, but I would rather fix them, rather than encouraging users to use others. On Wed, Nov 3, 2010 at 8:43 AM, Dennis Sosnoski wrote: > If the consensus of the Axis2 developers is to avoid any discussion of >

Re: question on consuming service with lopsided security

2010-11-02 Thread Dennis Sosnoski
Well, I've been pretty open about reporting the Axis2 weaknesses I've found. This latest one discussed in the article seems to be a code generation issue, and may be the same as https://issues.apache.org/jira/browse/AXIS2-4065 (which has been open for more than two years, apparently without any fol