rampart

How do I deserialize a SAML assertion in Rampart/C (Axis2/C)?

I have SAML 1.1 and SAML 1.0 responses in utf-8 char * buffers, and I would like to transform them into Rampart/C saml_response_t * objects. My question is this: What is the correct method for creating a saml_response_t from a string? Ideally I'd like a code sample in C that does this and then disposes of the various parser tools in t...

Developing a secure WS client for consuming a Axis2 Web Service with Rampart WS Security module?

I have a Axis2 web service secured using Rampart. I do want to develop secure clients for it, preferably JAX-WS based. I tried a lot of tutorials but they are so closed tied with each other, like including Axis2 libraries in the client side. The client should be fairly independent of the WS service framework, as the service can be consum...

Does Apache Rampart work with maven?

In the project I'm working we are using maven to manage dependencies. However we are having problems with the apache rampart which is a security module to Axis2. We have tried to use the following dependencies tags: <dependency> <groupId>org.apache.rampart</groupId> <artifactId>rampart</artifactId> <version>1.3</version> <type>...

How to load repository path and axis2.xml using ConfigurationContext in web application?

When I use absolute path (example below) in web application for the repository location and axis2.xml, it works fine but if I change it to relative path it does not. Example: ConfigurationContext ctx = ConfigurationContextFactory.createConfigurationContextFromFileSystem("C:/myproject/repository" , "C:/myproject/conf/axis2.xml" ); How c...

Rampart STS Client and UsernameToken

I have a rampart STS Client whose policy looks like this <sp:SignedSupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"&gt; <wsp:Policy> <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"/&gt; </sp:UsernameToken> </wsp:Polic...

Buliding a WAR that uses Axis2 + Rampart for Tomcat

I'm trying to build an axis-based web service with rampart for security, and I've been hoping to deploy a single war to tomcat, rather than installing axis and deploying within axis. (I'm not fixed on that though... this is all very new territory for me, so I could use any feedback that you might have.) I'm running into a few problems:...

Axis2 / Rampart: How to make sure that a 401 is send on failed authentication

I have a web service using Axis2 (1.4.1) with Rampart for the security. When authentication fails, Axis2 will throw an exception internally and respond with http status 200. Is there a way to configure Axis2 or Rampart to responds properly with a 401 (Unauthorized)? Maybe somebody can give a hint what/where to look for? I looked throu...

WCF, Rampart, ADFS2 and SAML Interop issue

Hi, I'm working on establishing interoperability between .NET WCF 3.5 and Axis2/Rampart using ADFS2 as the STS and using SAML authentication. Initially I used Axis 1.4.1/Rampart 1.4 but in an attempt to rule out issues relating to WS-* standards compatbility have also created a duplicate environment running Axis 1.5.1/Rampart 1.5. Both...

Calling .NET Web Service (WSF, WS-Security) from Java - NullPointerException

I am attempting to create a Java client to call a .NET web service. I was provided a WSDL (which contains the security policy information) and used the Axis2 wsdl2java utility to generate the client stub. Here is the code I use to initialize the stub: ConfigurationContext ctx = ConfigurationContextFactory.createConfigurationContextFro...

Axis2/rampart cryptography problem with signaturePropFile

I have problem with WebService client that has to use WS-Security. My client is written with axis2. It works when I do not enable cryptography (of course with my server emulator). I enabled cryptography by adding to axis.xml: <!--Signature and Encryption : Using the request's certificate--> <module ref="rampart" /> <parameter name="Out...

Axis2 problem: WSHandler: Check Signature confirmation: stored SV vector not empty

I have problem with querying webservice which uses WS-Security. I use code creadted by axis2 with rampard module which implements WS-Security. I think I make good query and I got response, but that response have something my client do not understand. Exception look like: INFO [main] (?:?) - Verification successful for URI "#element-113...

Cannot engage module rampart, not sending security details

Hi all, I'm using eclipse with WTP plugin for creating a client to call secure web service. I have used web service client wizard to generate the client and now I want to configure apache rampart in the eclipse project to call the service protected with username token the error is "can not engage module rampart". -------- update ----...