Solution: Divide the request flow into two sub flows. First flow applies UsernameToken and second flow applies Signature. So one can define different users for each operation.
On Wed, 2009-01-07 at 18:10 +0200, Gürkan Vural wrote: > Is it possible to have signature certificate alias different from > username token using WSS4J. > > We have a set of users in different companies. Each company has own > single certificate. This certificate resides in the keystore with a > constant alias. Each user has own username/password pair. > > I tried setting signatureUser property on the handler and also > org.apache.ws.security.crypto.merlin.keystore.alias property on merlin > property file but have no success. Any idea? > > -- > gurkan > > > ==========================================================- > Bu e-posta sadece yukarida isimleri belirtilen kisiler arasinda özel > haberlesme amacini tasimaktadir. Size yanlislikla ulasmissa lütfen gönderen > kisiyi bilgilendiriniz ve mesaji sisteminizden siliniz. Turkiye Cumhuriyet > Merkez Bankasi A.S. bu mesajin icerigi ile ilgili olarak hicbir hukuksal > sorumlulugu kabul etmez. > > This e-mail communication is intended for the private use of the people named > above. If you received this message in error, please immediately notify the > sender and delete it from your system. The Central Bank of The Republic of > Turkey does not accept legal responsibility for the contents of this message. > ==========================================================- Bu e-posta sadece yukarida isimleri belirtilen kisiler arasinda özel haberlesme amacini tasimaktadir. Size yanlislikla ulasmissa lütfen gönderen kisiyi bilgilendiriniz ve mesaji sisteminizden siliniz. Turkiye Cumhuriyet Merkez Bankasi A.S. bu mesajin icerigi ile ilgili olarak hicbir hukuksal sorumlulugu kabul etmez. This e-mail communication is intended for the private use of the people named above. If you received this message in error, please immediately notify the sender and delete it from your system. The Central Bank of The Republic of Turkey does not accept legal responsibility for the contents of this message. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
