cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (Commented) (JIRA)" <>
Subject [jira] [Commented] (CXF-3635) WS-Trust SPNego (WCF message level spnego)
Date Tue, 20 Dec 2011 17:46:31 GMT


Colm O hEigeartaigh commented on CXF-3635:

Hi Tom,

I have finally gotten around to reviewing this patch and have committed a fairly extensively
modified version of it to trunk (it's a bit more robust and shares some code with the SecureConversation
code, which does something very similar):

I have also added support for the STS side of the SPNEGO exchange (solely for testing purposes),
and added some system tests based around it. The System tests are here:

The client configuration is here:

The server configuration is here:

and the WSDL is here:

The tests are @Ignored as they rely on a KDC. I have not tested this with WCF, only CXF, and
so it would be great if you could modify the system test to use your test credentials and
let me know if it works or not.


> WS-Trust SPNego (WCF message level spnego)
> ------------------------------------------
>                 Key: CXF-3635
>                 URL:
>             Project: CXF
>          Issue Type: New Feature
>          Components: WS-* Components
>    Affects Versions: 2.3.5
>            Reporter: Tom Schneider
>            Assignee: Colm O hEigeartaigh
>         Attachments:
> We have spent time implementing SPNego over WS-Trust support for CXF and wish to submit
it for possible inclusion in CXF itself.  (Or at least as an example for others to follow)
 This was implemented so we could use the webservice of MS CRM 2011 when configured for 'on-premise'
security, although I think WCF 4.0 uses this type of security by default if you explicitly
change it.  So I'm sure this functionality would be useful to others.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:!default.jspa
For more information on JIRA, see:


View raw message