Mailing-List: contact dev-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
From: Daniel Kulp <dkulp@apache.org>
To: dev@cxf.apache.org
Cc: Freeman Fang <freeman.fang@gmail.com>
Subject: Re: [DISCUSS] how to handle ws_security/interopfest example
Date: Thu, 15 Sep 2011 12:56:19 -0400
Message-ID: <2728165.BlrDmMHQNm@dilbert.dankulp.com>
User-Agent: KMail/4.7.1 (Linux/3.0.1; KDE/4.7.1; x86_64; ; )
In-Reply-To: <EAF28C6C-AABE-4C2C-82A0-D22AA5773F72@gmail.com>
References: <EAF28C6C-AABE-4C2C-82A0-D22AA5773F72@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"


Colm and I were discussing this a bit yesterday as well.  I'm not really sure 
what to do.  :-(

One thought I had was that if we could somehow get the wsdl's (any Mac 
TimeMachine users that may have them from a previous build or something?) I 
could throw them up on my personal server for now.   Reconfigure the examples 
to then just use the local server.   That would work for WS-Sec, and WS-SC 
tests, but not the Trust due to the need for the MS STS.   With Colm's 
proposal this morning, we could have an STS as well.  

That said, the above is a bit of work and I'm not sure how worth it that would 
be at this point.  If we're going to to all that work, it's probably just 
better to create a couple new "simpler" samples that show the various security 
options.  For example, if we pull in the STS, a good example that uses that to 
show using SAML to secure a service or similar might be a bit more useful than 
the interopfest things that just test a bunch of policies.

Dan
 

On Thursday, September 15, 2011 10:18:56 AM Freeman Fang wrote:
> Hi Team,
> 
> Due to the Microsoft WCF security related server down for quite a
> while(probably over a year and I'm not sure if they can come back
> again), so the ws_security/interopfest examples shipped with kit
> doesn't work, I know that wssec10, wssec11, and wssc samples in
> samples/ws_security/interopfest have local server, but those local
> server also need download wsdl(I don't think we can ship those wsdls
> for license reason) during runtime from Microsoft WCF server, so if
> Microsoft WCF server is down, even local server doesn't work.
> 
> Currently we have a NOTES like
> IMPORTANT NOTE:  since these samples rely on the external services
> that are provided
> by Microsoft, they may or may not run or even build reliably if the
> services are down
> or have been changed.
> 
> But if Microsoft WCF server never come back, it means those examples
> will never work again,  so it's not a good experience for end user.
> Should we contact Microsoft to ask the server back(:-))?   Should we
> remove those examples? Or should we just leave it as is?
> 
> Any feedback is appreciated.
> 
> Best Regards
> Freeman
> 
> ---------------------------------------------
> Freeman Fang
> 
> FuseSource
> Email:ffang@fusesource.com
> Web: fusesource.com
> Twitter: freemanfang
> Blog: http://freemanfang.blogspot.com
-- 
Daniel Kulp
dkulp@apache.org
http://dankulp.com/blog
Talend - http://www.talend.com