Re: Configure DoSFilter in CXF Jetty Transport

2014-10-09 Thread Jason Pell
Hi, I added a sample of adding a servlet handler to jetty to my github project: https://github.com/pellcorp/cxf/blob/master/JavaFirst/src/main/resources/META-INF/applicationContext.xml Look for Check out the filters, servlets, filter mappings, servlet mappings. Not sure if this is the best w

Re: Removal of CXF interceptor

2014-10-09 Thread Daniel Kulp
On Oct 9, 2014, at 10:02 AM, Sergey Beryozkin wrote: > Hi > On 09/10/14 13:47, Anders Clausen wrote: >> Thanks for your quick answer Sergey, I've just got one follow up question. >> Instead of of doing this in java is it something that could be configured >> in XML where I exclude the MustUnders

RE: Weird AssertionWrapper.signAssertion() problem

2014-10-09 Thread Stephen.CTR.Chappell
Well, what I got back from the OpenSAML list is not helpful. This is what they had to say: "it looks questionable to me that you're dropping the DOM at the end, because I don't recall the Java code ever having full round trip fidelity when the DOM isn't cached, particularly when signatures are

Re: Missing namespace prefix

2014-10-09 Thread Nick Stuart
Ok, found the root of the problem, still don't know how to properly 'fix' it though. The generated code for the package-info.java for the request that doesn't work has: @javax.xml.bind.annotation.XmlSchema(namespace = "http://admin.sample.com/";) The one that works has: @javax.xml.bind.annotatio

Missing namespace prefix

2014-10-09 Thread Nick Stuart
Hi all, we have had some recurring issues sending messages through the CXF client and being unable to unmarshal them correctly on the backend. Quick environment setup: Camel 2.13.1 exposes CXF Endpoints (2.7.11) on Glassfish 4.1 (and 4.0) running on either jdk 7 or 8. The client sending the reque

Re: EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Sergey Beryozkin
Hi Andriy On 09/10/14 15:25, Andrei Shakirin wrote: Hi Sergei, I am curious how Jersey and Resteasy fulfil this requirement. Are they rely on some container specific code for EJB integration? I'd say so, they will likely have the container specific bootstrapping mechanism in place. May be Bill

Re: EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Sergey Beryozkin
Hi Andriy On 09/10/14 15:25, Andrei Shakirin wrote: Hi Sergei, I am curious how Jersey and Resteasy fulfil this requirement. Are they rely on some container specific code for EJB integration? I'd say so, they will likely have the container specific bootstrapping mechanism in place. May be Bill

RE: Point CXF to Websphere truststore for certs?

2014-10-09 Thread Andrei Shakirin
Hi, How the Websphere truststore on PROD environment looks like? Are the certificates stored in JKS file? If you have to use other API to access Websphere truststore, likely you need to implement own Crypto provider (like merlin) and register it using SecurityConstants.SIGNATURE_CRYPTO property

RE: EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Andrei Shakirin
Hi Sergei, I am curious how Jersey and Resteasy fulfil this requirement. Are they rely on some container specific code for EJB integration? Regards, Andrei. > -Original Message- > From: Sergey Beryozkin [mailto:sberyoz...@gmail.com] > Sent: Donnerstag, 9. Oktober 2014 15:20 > To: users@c

Re: Removal of CXF interceptor

2014-10-09 Thread Sergey Beryozkin
Hi On 09/10/14 13:47, Anders Clausen wrote: Thanks for your quick answer Sergey, I've just got one follow up question. Instead of of doing this in java is it something that could be configured in XML where I exclude the MustUnderstandInterceptor? AFAIK it is not possible. I guess a 'must underst

Re: FEDIZ with external authentication

2014-10-09 Thread Rajeev Parekh
Thanks a lot Oli. Is there a reference implementation that I could start working with. Thanks Rajeev Parekh Indigo Consulting www.indigoconsulting.com 847.275.4432 (m) 847.304.7800 (w) At the intersection of consumer, mobile and social identities On 10/9/2014 1:01 AM, Oliver Wulff wrote: Hi t

Re: EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Sergey Beryozkin
Hi Andy On 09/10/14 13:55, Andy Gumbrecht wrote: I don't want to hijack the thread, but feel like I need to mention Apache TomEE. no problems at all, welcome :-) The 1.7.x version has this set-up out of the box, and provides a lightweight app-server that includes OpenEJB (EJB 3.1) and CXF (2.6

Re: EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Andy Gumbrecht
I don't want to hijack the thread, but feel like I need to mention Apache TomEE. The 1.7.x version has this set-up out of the box, and provides a lightweight app-server that includes OpenEJB (EJB 3.1) and CXF (2.6.14) The trunk version (2.0.0-SNAPSHOT) has been upgraded to use CXF 3.x May sa

Re: Removal of CXF interceptor

2014-10-09 Thread Anders Clausen
Thanks for your quick answer Sergey, I've just got one follow up question. Instead of of doing this in java is it something that could be configured in XML where I exclude the MustUnderstandInterceptor? On 8 October 2014 14:40, Sergey Beryozkin wrote: > Hi > > On 08/10/14 11:38, Anders Clausen w

RE: Weird AssertionWrapper.signAssertion() problem

2014-10-09 Thread Stephen.CTR.Chappell
Yeah, I was afraid of something like that. It's caused a few problems here and there elsewhere in my code as well. Back to the drawing board, I suppose... Stephen W. Chappell -Original Message- From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Thursday, October 09, 2014 5:07

Re: EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Andrey Redko
Hi, Following Sergey's e-mail, it is true, CXF does not have support for EJB resource classes yet. The work has been done to support CDI 1.1. That's being said, if the EJB container integrates with CDI container (it should), the CXF can be used and is going to work as expected. Thanks. Best Re

Re: EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Sergey Beryozkin
Hi On 09/10/14 10:06, Bin Zhu wrote: Hi, Does current CXF support EJB based JAX-RS 2.0 application? If yes, is there requirement for EJB container? any additional configuration needed for application server? Thanks. Spec for EJB support: In a product that supports EJBs, an implementation MUST

Re: Oauth2 & BookStore

2014-10-09 Thread Sergey Beryozkin
Hi On 09/10/14 08:31, cmoulliard wrote: Hi, The project cxf under systests/rs-security proposes some Oauth2 integration tests but also a stand alone Java Main class that we could use to run an OAuth Autorization Server (I think so) with the class org.apache.cxf.systest.jaxrs.security.oauth2.Book

Re: FEDIZ with external authentication

2014-10-09 Thread Sergey Beryozkin
Hi Oli Does this interface support one extra redirection ? See step 3 in the sequence below...The interface implementation in this case would need to tell IDP that it needs to redirect the user further and then IDP would need to provide that extra redirect response back to the interface imple

Re: Configuring cxf bus for jax-ws endpoint

2014-10-09 Thread kupkaj
Additional information: I'm using cxf framework version 2.7.10. This error pops up in localhost.log file after I navigate to address for displaying list of available web services (but it gets written in both cases - with or without cxf bus configuration applied): SEVERE: Servlet.service() for servl

Configuring cxf bus for jax-ws endpoint

2014-10-09 Thread kupkaj
Hi, I have a problem with bus configuration for my webservice endpoint. Imagine simple service with one method (oneway). I'm trying to configure for this service to use cxf-logging and cxf-reliableMessaging features. This is content of working cxf-servlet configuration file: http://www.springfra

Re: Weird AssertionWrapper.signAssertion() problem

2014-10-09 Thread Colm O hEigeartaigh
Hi Stephen, This change breaks some of the SAML tests in WSS4J, so I can't apply it. Colm. On Wed, Oct 8, 2014 at 2:21 PM, wrote: > Colm - > > It looks like I have a solution for this. I had extracted some code to > post to the OpenSAML list, and posted the problem over there. While waiting >

EJB integration for JAX-RS2.0 in CXF

2014-10-09 Thread Bin Zhu
Hi, Does current CXF support EJB based JAX-RS 2.0 application? If yes, is there requirement for EJB container? any additional configuration needed for application server? Thanks. Spec for EJB support: In a product that supports EJBs, an implementation MUST support the use of stateless and single

Re: Configure DoSFilter in CXF Jetty Transport

2014-10-09 Thread Jason Pell
You can configure jetty handlers directly. I have even configured some spring security jee filters this way. If I have a chance I will hunt up an example and post it On 03/10/2014 2:26 AM, "sandarenu" wrote: > Hi all, > > I've a REST server developed using CXF and it uses Jetty Transport. I've >

Oauth2 & BookStore

2014-10-09 Thread cmoulliard
Hi, The project cxf under systests/rs-security proposes some Oauth2 integration tests but also a stand alone Java Main class that we could use to run an OAuth Autorization Server (I think so) with the class org.apache.cxf.systest.jaxrs.security.oauth2.BookServerOAuth2. Is there a class that we co