Mailing-List: contact axis-dev-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: axis-dev@ws.apache.org
Received-SPF: pass (herse.apache.org: domain of ruchith.fernando@gmail.com
 designates 64.233.182.190 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=XnAJvfpX9SJkbcPJ7PcF/MZfakL+vLnmIGM8UyKNDP3ijdLQgU3YiOTwg0myAzKQXUNt1xEhruQaCrfIf8LGvVU8geuRZjSh3bwZz2cqav9NfVUuOwt7ljFQ70ca0rJulEFTJj/GGNOn3ab4b97Tt9UsJ6pH1/z5l3g3O+Dd2j4=
Message-ID: <559c463d0701072208o598b060ex91f0303d36e9cac0@mail.gmail.com>
Date: Mon, 8 Jan 2007 11:38:22 +0530
From: "Ruchith Fernando" <ruchith.fernando@gmail.com>
To: axis-dev@ws.apache.org
Subject: Re: [Rampart] Cumbersome library dependencies
In-Reply-To: <45A1C1C4.8020705@web.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <45A1C1C4.8020705@web.de>

Hi Thilo,

On 1/8/07, Thilo Frotscher <thilo.frotscher@web.de> wrote:
>
> Hi!
>
> If you want to make use of password callback classes, these always
> depend on org.apache.ws.security.WSPasswordCallback, because the
> Callback instances which are passed into the handle() method have
> to be cast. WSPasswordCallback is contained in WSS4J, which depends
> itself von XML Security.
>
> This means, that when you develop client applications, you have to
> have WSS4J and XML Security in your classpath. The same is true for
> the server side: you must copy both JAR files to axis2/WEB-INF/lib,
> otherwise your servlet container reports a ClassNotFoundException
> for WSPasswordCallback.
>
> What I don't understand about this is that the Rampart module actually
> contains these jars. Why do I have to add them a second time to my
> client project and/or Axis2 web application. Why can't Rampart use
> the JARs in its own module archive?

The issue here is that service tries to load the callback handler
class packaged with the service archive using the service classloader.
The callback handler uses the WSPasswordCallback class and this
requires the wss4j to be visible in the service classloader.

Since these jars are required to be in the main classpath anyway ...
how about leaving them out of the rampart mar file and then shipping
an ant script that will copy the required jars (we already have this
file in the rampart-1.1 distro).

Thanks,
Ruchith

>
> Am I missing something?
>
> Thanks,
> Thilo
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: axis-dev-help@ws.apache.org
>
>


-- 
www.ruchith.org
www.wso2.org

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org