Re: Unexpected EOF in prolog - CXF -https

2014-06-23 Thread Faz
Aki, When I say apache/tomcat, I mean its webserver and appserver respectively. SO to be more clear, its from F5 > APACHE WEB SERVER >TOMCAT APP SERVER. I believe i will have to check the F5, cos when I use the apache or tomcat URL, I never get the error (May be its cos it not secure - not via htt

Re: Unexpected EOF in prolog - CXF -https

2014-06-23 Thread Faz
Aki, When you say server, which one do you mean the F5, Apache or Tomcat? From what I know, there is no explicit auto-redirection set for this.. Do you suspect anything here? Thanks -- View this message in context: http://cxf.547215.n5.nabble.com/Unexpected-EOF-in-prolog-CXF-https-tp5745450p5

Re: Unexpected EOF in prolog - CXF -https

2014-06-23 Thread Faz
Thanks for the response, Aki! Indeed , the xx.com is a contrived URL. I am able to retrieve the correct wsdl resource when I try to hit the f5 url. I dont encounter this 302 error always, its once in a whil I get stumbled on this issue. My setup is something like, F5(Domain URL) > Apache > Tomcat

Unexpected EOF in prolog - CXF -https

2014-06-22 Thread Faz
Hi All,I recently stumbled upon this issue, which I dont seem to understand why its happenning.I have a cxf SOAP web-services running on a Tomcat server, everything works fine when I try to access the webservices via a stand-alone program either using the tomcat /apache url via http. But when I try

Re: Message Object in UsernameTokenValidator

2014-01-11 Thread Faz
Thanks Dan, but in the SAAJInInterceptor the SOAPMessage object seems to render a null value to me. SoapMessage soapMessage2 = message.getContent(SoapMessage.class); soapMessage2 is null in the interceptor which is hooked during the pre-protocol phase. -- View this message in context: http://

RE: Message Object in UsernameTokenValidator

2014-01-10 Thread Faz
Yep , I have already tried to work with the XMLStreamReader and INputStream classes but unable to get any data from that. Tried using the IOutils for Inputstream object but for no avail! :( -- View this message in context: http://cxf.547215.n5.nabble.com/Message-Object-in-UsernameTokenValidato

RE: Message Object in UsernameTokenValidator

2014-01-10 Thread Faz
Andrei, I tried that, even that seems to be null at this juncture :( Bascially am extending org.apache.ws.security.validate.UsernameTokenValidator and under the verifyPlainPassword() am trying to get the message object and the content formats looks like as below, Unable to get anything from the

RE: Message Object in UsernameTokenValidator

2014-01-10 Thread Faz
Thanks Andrei, let me check that! I get the username and password with any issue. but i need one more additional paramter that I set in the request object which I need to verify against the database to check if the user has access to the db. -- View this message in context: http://cxf.547215.n

Message Object in UsernameTokenValidator

2014-01-09 Thread Faz
Hi, I'm trying to procure the incoming message object inside the verifyPlaintextPassword method, but unfortunately am not able to get that. By incoming message I mean the service parameters that is set i the web services wsdl file. Have tried the following but nothing seems to work, th

Re: Issue with TransportBinding (httpstoken)

2013-12-09 Thread Faz
Thanks Jason, this looks apt as my https is striped in the LB layer and all forwarded requests will be http. Could you please let me know what you mean by "*Ideally only assign it as interceptor on the http:// jaxws endpoints*" -- View this message in context: http://cxf.547215.n5.nabble.com/

Re: Issue with TransportBinding (httpstoken)

2013-12-09 Thread Faz
Pls, any help on this? -- View this message in context: http://cxf.547215.n5.nabble.com/Issue-with-TransportBinding-httpstoken-tp5737466p5737541.html Sent from the cxf-user mailing list archive at Nabble.com.

Re: Issue with TransportBinding (httpstoken)

2013-12-07 Thread Faz
Any idea on this please? -- View this message in context: http://cxf.547215.n5.nabble.com/Issue-with-TransportBinding-httpstoken-tp5737466p5737506.html Sent from the cxf-user mailing list archive at Nabble.com.

Issue with TransportBinding (httpstoken)

2013-12-06 Thread Faz
All,Am having a configuraton like below,User requests a service via domain-url i.e, https://services.com/services/port?wsdl, this is forwarded to the Load balancer which is then moved to Apache and tomcat.Am using ws-policy where in am incorporating both Transportbinding and usernametoken policies.

Re: Load-balancing +SSL WSDL

2013-12-05 Thread Faz
Thanks Once again!! Got you now. I will have LB address mentioned in the WSDL file. That said, if the LB address is soemthing like, *https://myservice.com/services/test* Then the soap:address will be, and my cxf-servlet.xml will be as follows, and the client will access the wsdl as below,

Re: Load-balancing +SSL WSDL

2013-12-04 Thread Faz
Hello Dan, Any idea on the above? Need to know what exactly to be configured in the above config/wsdl files. And when you said *The client just sees the “published” url *, what did you mean by that.. Like, how exactly does the client sees the URL. Thanks!! -- View this message in context: ht

Re: Load-balancing +SSL WSDL

2013-12-03 Thread Faz
Thanks very much, didn't find such info anywhere else but from you... Please let me know if my understanding is right, I have the initial url /published url as https://mytest.services.com/services/XXX. Now in the endpoint I will have the publishedEndpointUrl pointed to the initial URL as above. T

Re: Load-balancing +SSL WSDL

2013-12-03 Thread Faz
Thanks a lot for getting onto this Dan, This options looks fine,though I have a question. If we have this set to the published wsdl , will the load-balancing work as normal. For instance, will it work fine with the below criteria? If the WS is deployed to 2 different tomcat/weblogic servers whic

Load-balancing +SSL WSDL

2013-12-03 Thread Faz
Hi All, I know that this is not the open forum to ask generic questions pertaining web services as such. But I definitely know someone should have already encountered such an issue and would be able to help me out here.. SO HERE IT IS, My requirement is something to have WS deployed to an environ

Re: PolicyVerificationOutInterceptor - Help

2013-12-02 Thread Faz
Thanks Colm.. Its just a log not an exception.. Since we are on jdk1.5, I will have to stick to CXF2.6.9 but like u mentiuoned I will ignore this error for TransportToken. Any idea on the addressing assertion log below, DEBUG org.apache.cxf.ws.policy.PolicyVerificationOutInterceptor - An exceptio

Re: PolicyVerificationOutInterceptor - Help

2013-12-02 Thread Faz
I tried to code a custom interceptor and was able to get the AssertionInfoMap values as below, If we take a look at this, the TransportToken is set to false , is there anything that we can do on this? Thnaks DEBUG PolicyInterceptor - AIM --value-.[[{http://docs.oasis-open.org/ws-sx/ws-securitypol

PolicyVerificationOutInterceptor - Help

2013-12-02 Thread Faz
Hi All, I encountered an issue today with my outbound server messages, well rather than issue I see it being logged in to my loggers.I get the error message stating that the policy alternative cannot be satisfied. GOOGLED thru for a while and couldn't get any specific results that satisfies my issu

RE: SecurityContext AND Principal Object

2013-11-10 Thread Faz
Thnx Andrei, I would like to know how else can we get the principal object from the httpdestination code. Like Colm mentioned,I would like to know about the transport code if client authentication is used? -- View this message in context: http://cxf.547215.n5.nabble.com/SecurityContext-AND-Pri

Re: SecurityContext AND Principal Object

2013-11-08 Thread Faz
Thanks for the response Colm. Bit confused with the 1 piece of response, could you please shed some light on '*SecurityContext Object created in AbstractHTTPDestination. *' ? So is there any useful info that I can extract out of above object??? If so how can be access them? I was successful in re

SecurityContext AND Principal Object

2013-11-07 Thread Faz
Hi All, Have a few queries pertaining SecurityContext. --When I include the ws-security policy in the WSDL file, then I get WSS4JINinterceptors when I do a get on the Message Object. -- When I dont have the ws-security in wsdl, then i have AbstractHTTPDestination when i do a get on the Message Ob

Re: HandleFault in CXF

2013-11-05 Thread Faz
Any help on this please? -- View this message in context: http://cxf.547215.n5.nabble.com/HandleFault-in-CXF-Interceptors-tried-possible-options-tp5735813p5735945.html Sent from the cxf-user mailing list archive at Nabble.com.

Re: Handling fault in interceptor...

2013-11-04 Thread Faz
Hi , Could you please suggest on this? Thnx, -- View this message in context: http://cxf.547215.n5.nabble.com/Handling-fault-in-interceptor-tp4469616p5735920.html Sent from the cxf-user mailing list archive at Nabble.com.

Re: Handling fault in interceptor...

2013-11-03 Thread Faz
Thanks for the response. I'm actually trying to achieve soemthing that I have mentioned in http://cxf.547215.n5.nabble.com/HandleFault-in-CXF-Interceptors-tried-possible-options-td5735813.html I managed to write the SoapMessage to the XMLwriter class , but for some resaons I'm not able to pass or

Re: Handling fault in interceptor...

2013-11-03 Thread Faz
Hi Dan, Sergey, I know its a very old thread, but need some help on this. I have registered the out interceptor and am able to get the fault object in the *handleFault* method, but i'm unable to send this to the outbound handle. The message is suppressed in the handleFult metod wherein it just lo

Re: HandleFault in CXF

2013-11-02 Thread Faz
I managed to write the xml content to the writer class with the below code, but am unable to pass this message to the client. I mean even after writing the message to the xmlwriter class and content being written fine to the console log, its not been sent to the client. i.e, I dont see the outbound

HandleFault in CXF

2013-10-31 Thread Faz
Hi ALL, I'm using CXf's fault out interceptor to intercept the exception from the web services method. That works fine within the handleMessage method.. Now I have two queries, 1. How do I had extra information to the Fault object apart from setting the faultcode.? 2. Say if there is any error in

WSDL first (contract first) with LIST + wsdl2java CXF

2013-09-30 Thread Faz
Hi All,I would like to create a wsdl file that will incorporate the hashmap and list of hashmap as xsd types , which i would convert to java types using wsdl2java utility of CXF.Now all i need to know if this set-up is possible and that CXF wsdl2java has capability to convert such a complextype int

Re: Getting Java user-defined object in C using CXF

2013-09-21 Thread Faz
Thanks you Benson, does gsoap has security specifications? I mean, we have CXF service with security settings which authenticates the Client. so does gsoap has that capability in store? -- View this message in context: http://cxf.547215.n5.nabble.com/Getting-Java-user-defined-object-in-C-using

Re: Timeout and CXF

2013-09-21 Thread Faz
Thanks Jason for the nice response. Have one more query, well like you said the cxf jaxws server produces a standard soap web service that we can use any standards compliant soap web services framework for client. But, i have implemented WS-securitry policy along with CXF service that expects usern

Re: WS-Security : UsernameToken(Password Digest) + Sign/Encrypt Messages

2013-09-21 Thread Faz
Thanks Colm, Just a quick query, Is it good to expose the WSDL along with policy? I have an WSDL created which explicitly says what all WS-Security policies and specifications I have used , having that said is it a threat(security-wise) to expose them to the consumer? If it is a threat, what would

Re: Getting Java user-defined object in C using CXF

2013-09-21 Thread Faz
Thanks Tim. Actually we need to use SOAP webservices which I believe doesn't support JSON and hence we will have to get on with the XML data. CXF experts, please shed some light on this if my above question be addressed using CXF using C program. -- View this message in context: http://cxf.547

Re: Getting Java user-defined object in C using CXF

2013-09-20 Thread Faz
Any idea on this please? -- View this message in context: http://cxf.547215.n5.nabble.com/Getting-Java-user-defined-object-in-C-using-CXF-tp5734281p5734310.html Sent from the cxf-user mailing list archive at Nabble.com.

Re: Timeout and CXF

2013-09-20 Thread Faz
Okie, to be more precise.. Actually we will have multiple clients accessing our WS created via CXF. By multiple clients, it can be clients written in diff. programming languages i.e C, .Net, Java etc. So from Java prespective am pretty much fine with this setup. All I need to know is, can this cxf

Re: Timeout and CXF

2013-09-20 Thread Faz
By C, I mean the client being written in C program. Just to rephrase, can the http-conduit setting be done using the C program , as this is what will consume my Java service?Hope its clear now, please let me know if u need further info! -- View this message in context: http://cxf.547215.n5.nabb

WS-Security : UsernameToken(Password Digest) + Sign/Encrypt Messages

2013-09-20 Thread Faz
Hi All,I was successful in setting up the WS-security with SSL, along with UsernameToken(PasswordDigest) with the below code snippet.All this works good, Now i would like to know few here...1. What in CXF should be done, if I change the *RequireClientCertificate *to true in *HttpsToken* ?2. I need

Re: Timeout and CXF

2013-09-20 Thread Faz
Thanks Aki, I will give it a try.Meanwhile, I'm planning to have a C client for the Java service, would the http-conduit config in xml be the same for that as well or do we need to do anything specific. Please suggest! -- View this message in context: http://cxf.547215.n5.nabble.com/Timeout-and

Timeout and CXF

2013-09-19 Thread Faz
Hi All,I have the below piece of code which I was trying,Basically, am just trying to hold the current thread for about 100 secs (cos in real time, my query will take nearly a minute to execute and return the value). So just to replicate this, when i tried the above, WS is throwing exception saying

Getting Java user-defined object in C using CXF

2013-09-19 Thread Faz
Hi all,Just had a question raised in my mind today.Say if I have a java complex object (User Bean) that I need to be used by the service consumer that is developed via C. Is this possible using CXF being used in both client(C) and service(Java)?*User Bean*Is this the best option or should we build

Re: UserNameToken is Null

2013-09-18 Thread Faz
Thanks Coheigea, I should have made myself clear before.Well, here is what am trying to do, AM trying to get the principal object which in this case gives me the WSUsernameTokenPrincipal which is all good, but then I need to get the usernametoken as mentioned below just to have the validation chec

Re: X.509 certificate + CXF

2013-09-18 Thread Faz
Unfortunately no, there should only be one endpoint. -- View this message in context: http://cxf.547215.n5.nabble.com/X-509-certificate-CXF-tp5734159p5734201.html Sent from the cxf-user mailing list archive at Nabble.com.

UserNameToken is Null

2013-09-18 Thread Faz
Hi , i'm trying to access the usernametoken from the message object, but for some reasons am getting it as null. Here's the code & log that I have, *Code Snippet* *Log* -- View this message in context: http://cxf.547215.n5.nabble.com/UserNameToken-is-Null-tp5734200.html Sent from the cxf-us

Re: SOAP Webservices Authorization with Java using Apache CXF

2013-09-17 Thread Faz
Sergey, I had a look at the SimpleAuthorizingInterceptor I couldn't find any method name getRequiredRoles(), did u mean getRoles()?Moreover, for the SecureAnnotationsInterceptor the SecureService is passed as the imple.class , what would be the relevant case in mine. And also, in the above case and

X.509 certificate + CXF

2013-09-17 Thread Faz
I have different clients accessing the same service provider. I have a requirement where in only a few methods will be exposed for a specific client.I'm planning to go ahead with X.509 certificates for WS-Security authentication.Having that said, i would need different set of client certificates an

Re: SOAP Webservices Authorization with Java using Apache CXF

2013-09-17 Thread Faz
Thanks Again, Sergey. I will get it a try. BTW, by manual u mean that we can't have it via configuration file. isn't it? Thanks.! -- View this message in context: http://cxf.547215.n5.nabble.com/SOAP-Webservices-Authorization-with-Java-using-Apache-CXF-tp5734142p5734158.html Sent from the cxf

Re: SOAP Webservices Authorization with Java using Apache CXF

2013-09-17 Thread Faz
Thanks for the reply, Sergey. I see the above piece in the config file, I believe the key here (add,divideNumbers) refers to the methods in the WS-impl class. If that's the case, I would need this to be populated from the database along with the roles since there are multiple methods in the imp

SOAP Webservices Authorization with Java using Apache CXF

2013-09-17 Thread Faz
I would like to have a webservice designed using Apache CXF incorporating the authorization (method-level) with Java (along with database). Say for instance, an implemnation class A has two methods getData and addData. I would like to allow one set of role to access getData and other to access the