WSS4j:Differents Security Configurations on Server for differents kind of requests

[at4david]

Hi, I need to achieve two security configurations on server side, and I tried
to do it with differents "actor" and differents "handler names" to achieve
that one client request with UsernameToken and another request with
Signature. How could I do that??

I need that the server can support differents security configurations to
differents client requests.


I show below my deployserver.wsdd and  my deployclient.wsdd 

I need to know how implementing differents security configurations to
differents kind of requests but there is something that I am doing bad.
 
deployserver.wsdd

<deployment xmlns="http://xml.apache.org/axis/wsdd/";
            xmlns:java="http://xml.apache.org/axis/wsdd/providers/java";>
 <service name="Calculadora" provider="java:RPC">
  <requestFlow>
   <handler name="RESTAP"
type="java:org.apache.ws.axis.security.WSDoAllReceiver">
    <parameter name="actor" value="clienteresta"/>
    <parameter name="passwordCallbackClass"  value="PWCallback"/>
    <parameter name="action" value="Signature" />
    <parameter name="signaturePropFile" value="crypto.properties" />
   </handler>
   <handler name="SUMAP"
type="java:org.apache.ws.axis.security.WSDoAllReceiver">
     <parameter name="actor" value="clientesuma"/>
     <parameter name="passwordCallbackClass" value="PWCallback"/>
     <parameter name="action" value="UsernameToken"/>       
   </handler>
    </requestFlow>
  <responseFlow>
      <handler name="RESTARRA"
type="java:org.apache.ws.axis.security.WSDoAllSender" >
        <parameter name="actor" value="clienteresta2"/>
        <parameter name="passwordCallbackClass"  value="PWCallback"/>
        <parameter name="action" value="Encrypt Signature"/>
        <parameter name="encryptionUser" value="useReqSigCert"/>
        <parameter name="user" value="calculadora" />   
        <parameter name="signaturePropFile" value="signature.properties" />
        <parameter name="encryptionPropFile" value="crypto.properties" />
        <parameter name="signatureKeyIdentifier" value="DirectReference" />
      </handler>
      <handler name="SUMAR"
type="java:org.apache.ws.axis.security.WSDoAllSender" >
        <parameter name="actor" value="clientesuma2"/>
        <parameter name="passwordCallbackClass"  value="PWCallback"/>
        <parameter name="action" value="UsernameToken"/>
        <parameter name="user" value="usercalculadora"/>              
        <parameter name="passwordType" value="PasswordDigest"/>
      </handler>        
   </responseFlow>      
  <parameter name="className" value="Calculator"/>
  <parameter name="allowedMethods" value="*"/>
 </service>
</deployment>

deployclient1.wsdd

<deployment xmlns="http://xml.apache.org/axis/wsdd/";
xmlns:java="http://xml.apache.org/axis/wsdd/providers/java";>
 <transport name="http"
pivot="java:org.apache.axis.transport.http.HTTPSender"/>
  <globalConfiguration >
    <requestFlow>
      <handler name="SUMAP"
type="java:org.apache.ws.axis.security.WSDoAllSender" >
        <parameter name="actor" value="clientesuma"/>
        <parameter name="user" value="david"/>
        <parameter name="passwordCallbackClass"  value="PWCallback"/>
        <parameter name="action" value="UsernameToken"/>
        <parameter name="passwordType" value="PasswordDigest"/>
      </handler>
    </requestFlow>
    <responseFlow>
       <handler name="SUMAR"
type="java:org.apache.ws.axis.security.WSDoAllReceiver">
       <parameter name="actor" value="clientesuma2"/>
        <parameter name="passwordCallbackClass"  value="PWCallback"/>
       <parameter name="action" value="UsernameToken"/>
       </handler>
    </responseFlow>
  </globalConfiguration >
</deployment>


Thank you
-- 
View this message in context: 
http://www.nabble.com/WSS4j%3ADifferents-Security-Configurations-on-Server-for-differents-kind-of-requests-tf4054492.html#a11516811
Sent from the WSS4J mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]