cxf-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Colm O hEigeartaigh <cohei...@apache.org>
Subject Re: CXF STS ActAs / Advice Subject Handling
Date Thu, 16 Feb 2017 16:56:47 GMT
Hi Stephen,

The STS does not currently handle "Advice" Elements by default. What
relationship is there in your use-case between "Advice" and "ActAs"?

Colm.

On Fri, Feb 10, 2017 at 1:23 PM, <Stephen.CTR.Chappell@faa.gov> wrote:

> Hi -
>
> When I send an RST to my STS (CXF 2.7.14) to get a holder-of-key token
> with Advice, it looks like the token I get back has a Subject that matches
> the X509 cert in the Advice rather than its own cert. It looks like it's
> supposed to be this way based on what I see in DefaultSubjectProvider, is
> that correct? Is that spelled out in ws-trust or one of the saml specs
> somewhere? It makes sense to me that it should work that way, but I'm
> getting some questions about it and would like be able to point to
> something that says why it is that way.
>
> Thanx,
>
> Stephen W. Chappell
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message