glassfishrobot
commented
17 years ago Reported by tamiro@java.net
Closed glassfishrobot closed 16 years ago
glassfishrobot
commented
17 years ago Reported by tamiro@java.net
glassfishrobot
commented
17 years ago tamiro@java.net said: Created an attachment (id=347) STS project
glassfishrobot
commented
17 years ago tamiro@java.net said: Created an attachment (id=348) calculator project with STS enabled
glassfishrobot
commented
17 years ago tamiro@java.net said: Created an attachment (id=349) client project for STS secured service
glassfishrobot
commented
17 years ago venu@java.net said: This is a duplicate of issue 502.Can you please verify.
glassfishrobot
commented
17 years ago tamiro@java.net said: Created an attachment (id=351) server log showing policy could not be obtained errror
glassfishrobot
commented
17 years ago tamiro@java.net said: After watching Manveen Kaur's screen cast,
http://javaweb.sfbay.sun.com/~mk125090/screencast/trust-final.html
I think the STS example in Chapter 6 of the tutorial may be missing some important pieces. It doesn't mention the "local" STS at all. In the steps, for configuring the Service STS, the tutorial doesn't say to configure the Issuer Address and Issuer Metadata address as the screencast does. Also, the screen cast uses Mutual Certificates mechanism with the client, whereas the tutorial uses Username Authentication.
Shouldn't the screencast and the STS Issued Token example in the tutorial be equivalent?
Is this a doc bug?
glassfishrobot
commented
17 years ago shyam_rao@java.net said: Tom, use GF b41a beta2 to run this sample. I tried a servlet sample for which i filed an issue# 512, is passing.
glassfishrobot
commented
17 years ago tamiro@java.net said: With Shyam's help, I finally got this example to work. It requires you to 1. Use GF beta2 41a 2. Make sure the key size specified for the STS and the Calculator Service match
Somehow I got into a situation where the STS was set for 128bit and the Calculator was using 256bit.
It is possible that the default NB tooling applies for an STS created via the wizzard differs from the default for a web service added to a web app. I'll have to investigate.
To make sure our users are successfull with the STS Issue Token example, the doc should reiterate at the beginning of the example: Some of the algorithm suite settings require that Unlimited StrengthEncryption be configured in the Java Runtime Environment (JRE), particularly the algorithm suites that use 256 bit encryption. Instructions for downloading and configuring unlimited strength encryption can be found at the following URLS: http://java.sun.com/products/jce/javase.html http://java.sun.com/javase/downloads/index_jdk5.jsp#docs
The doc should also tell the user to make sure the key size matches for the STS server and the Calculator service, by going to the Configure button for the security mechanism on the Edit Web Service Attributes UI and checking the options.
glassfishrobot
commented
17 years ago venu@java.net said: This is a duplicate of #502. Debbie says she has fixed the docs issue too. I am marking this bug as fixed. Please verify.
glassfishrobot
commented
17 years ago tamiro@java.net said: The doc at http://swpubs.sfbay/writing/wsit/drafts/M4/ doesn't have the fix yet. So I'm reopening.
glassfishrobot
commented
17 years ago tamiro@java.net said: Debbie fixed doc by adding step to select 128 bit size key for both STS and Calc service.
glassfishrobot
commented
17 years ago tamiro@java.net said: Verified.
glassfishrobot
commented
17 years ago kumarjayanti@java.net said: Fixed in WSIT 1.0
glassfishrobot
commented
17 years ago File: CaculatorApplication.zip Attached By: tamiro@java.net
glassfishrobot
commented
17 years ago File: CalculatorServletClient.zip Attached By: tamiro@java.net
glassfishrobot
commented
17 years ago File: MySTSProject.zip Attached By: tamiro@java.net
glassfishrobot
commented
17 years ago File: server.log Attached By: tamiro@java.net
glassfishrobot
commented
17 years ago Was assigned to venu@java.net
glassfishrobot
commented
7 years ago This issue was imported from java.net JIRA WSIT-514
glassfishrobot
commented
16 years ago Marked as fixed on Tuesday, July 22nd 2008, 10:37:23 am
The STS issued token example in Chapter 6 of the WSIT tutorial does not work. The client fails with
Container-auth: wss: Error securing request javax.xml.ws.soap.SOAPFaultException: java.lang.UnsupportedOperationException
I followed the procedure in http://swpubs.sfbay/writing/wsit/drafts/M4/SecurityProfiles14.html#wp142952
Configuration:
GF server logs shows
--[HTTP request]--|#]
[#|2007-04-06T14:56:37.421-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| Host: localhost:8080|#]
[#|2007-04-06T14:56:37.421-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| Content-length: 517|#]
[#|2007-04-06T14:56:37.421-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| Content-type: text/xml; charset="utf-8"|#]
[#|2007-04-06T14:56:37.421-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| Accept: text/html, image/gif, image/jpeg, *; q=.2, /**; q=.2|#]
[#|2007-04-06T14:56:37.437-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| Connection: keep-alive|#]
[#|2007-04-06T14:56:37.437-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| Soapaction: http://schemas.xmlsoap.org/ws/2004/09/transfer/Get|#]
[#|2007-04-06T14:56:37.437-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| User-agent: Java/1.5.0_11|#]
[#|2007-04-06T14:56:37.437-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| <soap-env:Envelope xmlns:soap-env='http://schemas.xmlsoap.org/soap/envelope/' xmlns:wsa='http://www.w3.org/2005/08/addressing'>http://schemas.xmlsoap.org/ws/2004/09/transfer/Get</wsa:Action>http://localhost:8080/MySTSProject/SecurityTokenService</wsa:To>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address></wsa:ReplyTo>uuid:778b135f-3fdf-44b2-b53e-ebaab7441e40</wsa:MessageID></soap-env:Header>
[#|2007-04-06T14:56:37.437-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;|--------------------|#]
[#|2007-04-06T14:56:37.468-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| --[HTTP response 200]--|#]
[#|2007-04-06T14:56:37.468-0400|INFO|sun-appserver9.1|javax.enterprise.system.stream.out|_ThreadID=18;_ThreadName=httpSSLWorkerThread-8080-1;| <?xml version="1.0" ?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:mex="http://schemas.xmlsoap.org/ws/2004/09/mex"><To
xmlns="http://www.w3.org/2005/08/addressing">[http://www.w3.org/2005/08/addressing/anonymous](http://www.w3.org/2005/08/addressing/anonymous)<Action
xmlns="http://www.w3.org/2005/08/addressing">[http://schemas.xmlsoap.org/ws/2004/09/transfer/GetResponse](http://schemas.xmlsoap.org/ws/2004/09/transfer/GetResponse)<MessageID
xmlns="http://www.w3.org/2005/08/addressing">uuid:6e9ab731-62f1-4a73-a81b-d5d927a91abc</soapenv:Header><mex:MetadataSection
Dialect="http://schemas.xmlsoap.org/wsdl/"
Identifier="http://tempuri.org/"><wsdl:definitions
xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:wsap10="http://www.w3.org/2006/05/addressing/wsdl"
xmlns:i0="http://xmlsoap.org/DAB" xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:tns="http://tempuri.org/"
xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex"
xmlns:q1="http://schemas.message.com/Message"
xmlns:q2="http://schemas.message.com/Message"
xmlns:jaxws="http://java.sun.com/xml/ns/jaxws"
xmlns:wsa10="http://www.w3.org/2005/08/addressing"
xmlns="http://schemas.xmlsoap.org/wsdl/"
xmlns:sc="http://schemas.sun.com/2006/03/wss/server"
xmlns:wspp="http://java.sun.com/xml/ns/wsit/policy" name="SecurityTokenService"
targetNamespace="http://tempuri.org/">