Hi Håkon,
Take a look at cxf-ws-security example shipped with FUSE ESB (which is
based on apache servicemix)
This example use ws-security of webservice and then delegate AA to JAAS
module inside servicemix, I think it may be helpful for you.
You can get FUSE ESB from [1]
[1]http://fusesource.com/
Regards
Freeman
Håkon Sagehaug wrote:
Hi
We're building up a little SOA infrastructure using servicemix and we've
come where we are considering security, when I say security it's about
authenticating and authorizing users in our system, and I wondered how and
if servicemix could make our job easier.
The first approach to security, I guess is by using ws-trust and having a
sts service and a trust relationship between the sts and other services, not
including the features of servicemix that much.
More involving servicemix is to maybe have a route that send the incomming
request to service A, first to a sts, and enhences the respose from the sts
with the request to service A and the ships it of to service A.
Is there a posibility of using JAAS module when dealing with web services in
servicemix
Or is there any other good tips hwo to solve this??
cheers, Håkon
