Mailing-List: contact dev-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Received-SPF: pass (nike.apache.org: domain of freeman.fang@gmail.com
 designates 209.85.161.178 as permitted sender)
Cc: Daniel Kulp <dkulp@apache.org>
Message-Id: <A45B5A78-C14B-4B7B-B9F6-9C35D6549BC7@gmail.com>
From: Freeman Fang <freeman.fang@gmail.com>
To: dev@cxf.apache.org
In-Reply-To: <2728165.BlrDmMHQNm@dilbert.dankulp.com>
Content-Type: multipart/alternative; boundary=Apple-Mail-2-674801413
Mime-Version: 1.0 (Apple Message framework v936)
Subject: Re: [DISCUSS] how to handle ws_security/interopfest example
Date: Fri, 16 Sep 2011 09:35:33 +0800
References: <EAF28C6C-AABE-4C2C-82A0-D22AA5773F72@gmail.com>
 <2728165.BlrDmMHQNm@dilbert.dankulp.com>

--Apple-Mail-2-674801413
Content-Type: text/plain;
	charset=UTF-8;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: quoted-printable


On 2011-9-16, at =E4=B8=8A=E5=8D=8812:56, Daniel Kulp wrote:

>
> Colm and I were discussing this a bit yesterday as well.  I'm not =20
> really sure
> what to do.  :-(
>
> One thought I had was that if we could somehow get the wsdl's (any Mac
> TimeMachine users that may have them from a previous build or =20
> something?) I
> could throw them up on my personal server for now.   Reconfigure the =20=

> examples
> to then just use the local server.   That would work for WS-Sec, and =20=

> WS-SC
> tests, but not the Trust due to the need for the MS STS.   With Colm's
> proposal this morning, we could have an STS as well.
Thanks Dan for this kind suggestion.
But put the wsdl in a personal server still make cxf example rely on =20
some outside servers, though I believe your server must be more stable =20=

than the MS one :-), I prefer that cxf examples can run standalone.
>
> That said, the above is a bit of work and I'm not sure how worth it =20=

> that would
> be at this point.  If we're going to to all that work, it's probably =20=

> just
> better to create a couple new "simpler" samples that show the =20
> various security
> options.  For example, if we pull in the STS, a good example that =20
> uses that to
> show using SAML to secure a service or similar might be a bit more =20
> useful than
> the interopfest things that just test a bunch of policies.
I like the idea that create a couple new "simpler" samples that show =20
the various security options, as cxf could have a better STS as well =20
soon.
How about we exclude ws_security/interopfest example from kit for now =20=

and we can add more useful security related examples later on.

Regards
Freeman
>
> Dan
>
>
> On Thursday, September 15, 2011 10:18:56 AM Freeman Fang wrote:
>> Hi Team,
>>
>> Due to the Microsoft WCF security related server down for quite a
>> while(probably over a year and I'm not sure if they can come back
>> again), so the ws_security/interopfest examples shipped with kit
>> doesn't work, I know that wssec10, wssec11, and wssc samples in
>> samples/ws_security/interopfest have local server, but those local
>> server also need download wsdl(I don't think we can ship those wsdls
>> for license reason) during runtime from Microsoft WCF server, so if
>> Microsoft WCF server is down, even local server doesn't work.
>>
>> Currently we have a NOTES like
>> IMPORTANT NOTE:  since these samples rely on the external services
>> that are provided
>> by Microsoft, they may or may not run or even build reliably if the
>> services are down
>> or have been changed.
>>
>> But if Microsoft WCF server never come back, it means those examples
>> will never work again,  so it's not a good experience for end user.
>> Should we contact Microsoft to ask the server back(:-))?   Should we
>> remove those examples? Or should we just leave it as is?
>>
>> Any feedback is appreciated.
>>
>> Best Regards
>> Freeman
>>
>> ---------------------------------------------
>> Freeman Fang
>>
>> FuseSource
>> Email:ffang@fusesource.com
>> Web: fusesource.com
>> Twitter: freemanfang
>> Blog: http://freemanfang.blogspot.com
> --=20
> Daniel Kulp
> dkulp@apache.org
> http://dankulp.com/blog
> Talend - http://www.talend.com

---------------------------------------------
Freeman Fang

FuseSource
Email:ffang@fusesource.com
Web: fusesource.com
Twitter: freemanfang
Blog: http://freemanfang.blogspot.com


--Apple-Mail-2-674801413--