Re: possible wss4j bug?

2014-11-04 Thread tobee
krb5 debug: Config name: C:\Windows\krb5.ini KdcAccessibility: reset KdcAccessibility: reset Acquire TGT from Cache KinitOptions cache name is C:\Users\my_user\krb5cc_my_user DEBUG CCacheInputStream client principal is my_user@somedomain DEBUG CCacheInputStream server principal is

Re: Apache CXF, Policies and Message Predicates

2014-11-04 Thread wuschl68
Hi Daniel, thanks very much for your answer. Sadly enough there is a initiative to standardize webservices for insurances in Germany, called 'BiPRO', that propagates the use of MessagePredicate policies for technical validation. So I guess there is no other easy solution than to parse that xpath

Re: possible wss4j bug?

2014-11-04 Thread tobee
i deleted keytab and cache and recreated them with ktab -a testuser pwd -k FILE:c:\kerberos\testuser.keytab Done! Service key for testuser is saved in c:\kerberos\testuser.keytab kinit -t c:\kerberos\testuser.keytab testuser pwd -c FILE:c:/kerberos/krb5cache will post new debug in a sec --

Re: possible wss4j bug?

2014-11-04 Thread tobee
Finally the issue is solved though second arose most likely my keytab/cache was broken Now the question is what is wrong with wsdl or do i have to tweak it or wcftestservice somehow in order to make it work? .net client works fine since we sorted out spn and service configuration INFO: Can not

Re: possible wss4j bug?

2014-11-04 Thread tobee
now i get ?xml version=1.0? Body Fault Code Values:Sender/Value Subcode Value xmlns:a=http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd;a:InvalidSecurity/Value /Subcode /Code Reason Text xml:lang=pl-PLAn error occurred

How do i use JAX-RS with WAB in OSGi karaf?

2014-11-04 Thread Srikanth Hugar
I have a existing multiple REST services with bundle using JAX-RS with different addresses. Hence it works fine because in JAX-RS address i specify the different addresses. But now i want to convert my bundles to WAB because i want to integrate with spring security and want to run with different

Re: possible wss4j bug?

2014-11-04 Thread Colm O hEigeartaigh
Your best bet is to enable debug logging on the service to find out where the error is being thrown. Colm. On Tue, Nov 4, 2014 at 9:12 AM, tobee lukasz.tob...@gmail.com wrote: now i get ?xml version=1.0? Body Fault Code Values:Sender/Value Subcode Value

Re: dispatch.getRequestContext() - change from 2.7.1 to 3.0.2

2014-11-04 Thread Colm O hEigeartaigh
Is the a security policy in the WSDL you are using? How are you configuring the STSClient? Colm. On Mon, Nov 3, 2014 at 5:18 PM, Malisetti, Ramanjaneyulu ramanjaneyulu.malise...@ca.com wrote: In my case, I see only [MAPCodec] engaged whereas in sample case there are 3 interceptors in

Re: How do i use JAX-RS with WAB in OSGi karaf?

2014-11-04 Thread Sergey Beryozkin
Hi On 04/11/14 09:50, Srikanth Hugar wrote: I have a existing multiple REST services with bundle using JAX-RS with different addresses. Hence it works fine because in JAX-RS address i specify the different addresses. But now i want to convert my bundles to WAB because i want to integrate with

Re: How do i use JAX-RS with WAB in OSGi karaf?

2014-11-04 Thread Srikanth Hugar
Lets say i have two REST Web Application Bundles. one with path /css/logger and another with path /css/dc When i want to convert as WAB, i may configure something like below: war1 Web-ContextPath/css/dc/Web-ContextPath war2 Web-ContextPath/css/logger/Web-ContextPath But my existing

Re: How do i use JAX-RS with WAB in OSGi karaf?

2014-11-04 Thread Sergey Beryozkin
Do you use web.xml at all ? Without it, multiple jaxrs:endpoint with the same address would be handled by a default CXF HTTP Transport which has a dedicated CXFServlet so indeed there will be a clash. With web.xml you can have each WAB allocating its own CXFServlet/Destinations. Is it

Re: CXF 2.7.12 protocol mismatch error in ported code

2014-11-04 Thread Colm O hEigeartaigh
What does your endpoint configuration look like? It is likely either using a different port to the jetty configuration, or else it is not referencing the jetty endpoint configuration via a depends-on=tls-settings, where tls-settings is the id of the httpj:engine-factory. Here is an example:

Re: How do i use JAX-RS with WAB in OSGi karaf?

2014-11-04 Thread Srikanth Hugar
Yes i use web.xml. And i am using spring DM. My current configurations are something like for multiple bundles: 1. web.xml web-app context-param param-namecontextClass/param-name param-valueorg.springframework.osgi.web.context.support.OsgiBundleXmlWebApplicationContext/param-value /context-param

Re: How do i use JAX-RS with WAB in OSGi karaf?

2014-11-04 Thread Sergey Beryozkin
I've no links to any specific docs. AFAIK each web.xml needs to have its own CXFServlet allocated and refer to specific Spring context files, with each of them having the endpoints with non-overlapping address, i.e, you can not have a single logger-rest-context.xml specify multiple endpoints

RE: dispatch.getRequestContext() - change from 2.7.1 to 3.0.2

2014-11-04 Thread Malisetti, Ramanjaneyulu
Security policy is in WSDL. While creating

RE: CXF 2.7.12 protocol mismatch error in ported code

2014-11-04 Thread Stephen.CTR.Chappell
Colm - Thanx, it looks like that was exactly the problem - my endpoint configuration did not have a depends-on entry. I had scoured the doc at http://cxf.apache.org/docs/jetty-configuration.html, but didn't see anything obvious, so I assumed I was missing something elsewhere. I'm glad this was

Re: AccessTokenService Client Secret Validation

2014-11-04 Thread Sergey Beryozkin
Hi I did some work around this issue, see http://git-wip-us.apache.org/repos/asf/cxf/commit/0987d405 Hopefully it would be easier to override the service; registering a ClientSecretVerifier instance with it is another option. I've tried to have the service keeping the control of the overall

Re: Mitigations for POODLE vulnerability

2014-11-04 Thread Colm O hEigeartaigh
Will it also be disabled by default in the CXF client at the next release? Yes. Colm. On Mon, Nov 3, 2014 at 4:52 PM, David Roytenberg (Consultant) david.roytenb...@optimalpayments.com wrote: Will it also be disabled by default in the CXF client at the next release? David -Original

java.security.cert.CertificateException: No subject alternative DNS name matching xxxxxxx.xxx.com found.

2014-11-04 Thread Cole Ferrier
Having a little bit of trouble with a a client web service due to a server now having a certificate where its name is only in Subject Alternate Names. At first we where getting an error that was out of CXF and it said to set disableCNCheck to true, however we don't want to disable alternate

JAX-RS Client to handle SAML (+OAuth2) in SSO

2014-11-04 Thread rareddy
Hi, I have a third party JAX-RS service that is secured through SAML, I am trying to access this service through my java application. I have access to currently logged-in user's Subject. I am kind drawing blank on how I need to proceed. Should I build a SAMLRequest envelope and send to the

cxf 3.0.1 don't let me configure local lookup of jms ConnectionFactory

2014-11-04 Thread atokle
I did earlier use cxf 2.4.3, and configured soap over jms using the JMSConfiguration style which is deprecated in cxf 3.0. Now I use the new SOAP / JMS spec compliant configuration - recommended style for CXF 3. I deploy my application on a weblogic server version 10.3.3.6, on a ExaLogic server.

Re: java.security.cert.CertificateException: No subject alternative DNS name matching xxxxxxx.xxx.com found.

2014-11-04 Thread Jose María Zaragoza
2014-11-04 16:56 GMT+01:00 Cole Ferrier c...@coleferrier.com: Having a little bit of trouble with a a client web service due to a server now having a certificate where its name is only in Subject Alternate Names. At first we where getting an error that was out of CXF and it said to set

Re: java.security.cert.CertificateException: No subject alternative DNS name matching xxxxxxx.xxx.com found.

2014-11-04 Thread Cole Ferrier
We have the correct certificate authorities registered in the java certificate store, so it should be able to validate the cert chain without a problem. There is a different error if that isn't correct. Or i'm not sure what your asking by And why ? where is the server certificate stored ? On

Re: java.security.cert.CertificateException: No subject alternative DNS name matching xxxxxxx.xxx.com found.

2014-11-04 Thread Jose María Zaragoza
2014-11-04 22:07 GMT+01:00 Cole Ferrier c...@coleferrier.com: We have the correct certificate authorities registered in the java certificate store, so it should be able to validate the cert chain without a problem. There is a different error if that isn't correct. Or i'm not sure what your

Re: cxf 3.0.1 don't let me configure local lookup of jms ConnectionFactory

2014-11-04 Thread Christian Schneider
You can use the ConnectionFactoryFeature to manually set a connection factory. You can find some examples here: http://cxf.apache.org/docs/soap-over-jms-10-support.html Using java code it should be easy to do the lookup and spring allows to lookup the connection factory from jndi too. For

Re: JAX-RS Client to handle SAML (+OAuth2) in SSO

2014-11-04 Thread Sergey Beryozkin
Hi On 04/11/14 18:09, rareddy wrote: Hi, I have a third party JAX-RS service that is secured through SAML, I am trying to access this service through my java application. I have access to currently logged-in user's Subject. I am kind drawing blank on how I need to proceed. Should I build a