Re: Signature only in policy for Username Token

2011-09-29 Thread Glen Mazza
, September 28, 2011 4:24 AM To: users@cxf.apache.org Subject: Re: Signature only in policy for Username Token You can set the following jax-ws property ws-security.username-token.always.encrypted to false. See the ALWAYS_ENCRYPT_UT variable here: http://svn.apache.org/viewvc/cxf/trunk/rt/ws

Re: Signature only in policy for Username Token

2011-09-28 Thread Colm O hEigeartaigh
You can set the following jax-ws property ws-security.username-token.always.encrypted to false. See the ALWAYS_ENCRYPT_UT variable here: http://svn.apache.org/viewvc/cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/SecurityConstants.java?view=markup Why would you want to send an

RE: Signature only in policy for Username Token

2011-09-28 Thread Penmatsa, Vinay
...@apache.org] Sent: Wednesday, September 28, 2011 4:24 AM To: users@cxf.apache.org Subject: Re: Signature only in policy for Username Token You can set the following jax-ws property ws-security.username-token.always.encrypted to false. See the ALWAYS_ENCRYPT_UT variable here: http://svn.apache.org

Re: Signature only in policy for Username Token

2011-09-28 Thread Daniel Kulp
-Original Message- From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Wednesday, September 28, 2011 4:24 AM To: users@cxf.apache.org Subject: Re: Signature only in policy for Username Token You can set the following jax-ws property ws-security.username-token.always.encrypted

Signature only in policy for Username Token

2011-09-27 Thread Penmatsa, Vinay
Hi, With the following policy definition, the header is sent encrypted. How can I get the client to only sign and not encrypt? -- wsp:Policy wsu:Id=UsernameToken xmlns:wsu=http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd;