Apache Sandesha2 & WS-RM 1.2

2013-05-07 Thread Anurag Panda
Hi, Does Apache Sandesha2 support WS-RM 1.2 (dated Feb. 2009)? If no, are there any plans to support it? Thanks and regards, Anurag, Advisory Software Engineer, B2B & Commerce, Industry Solutions, ISL, IBM, #4/1, 2nd floor, Tower D, IBC Knowledge Park, Bannerghatta road, Bangalore, India - 560

Re: the password callback class can't be found by tomcat when I upload my web service with rampart security

2013-05-07 Thread robert lazarski
On Mon, May 6, 2013 at 5:26 AM, Tania Marinova wrote: > Hello - I did what you said - I downloaded the axis2 service archiver plugin > for eclipse! xis > Then I give File - New -Other -> axis 2 wizards - >Axis2 - Service Archvier > ->Next > ( > 2..then it s's written - >"Insert the location for

org.apache.axis2.AxisFault: The security token could not be authenticated or authorized

2013-05-07 Thread Tania Marinova
try to add the rampart security to my made what I have made 1. I have stored in a database the hashed value of "bobPW" password and the salt In my PWCBHandler * I get the stored password and hash * I hash pwcb.getPassword() with the stord password * check if t

Re: org.apache.axis2.AxisFault: The security token could not be authenticated or authorized

2013-05-07 Thread robert lazarski
On Tue, May 7, 2013 at 8:36 AM, Tania Marinova wrote: > > try to add the rampart security to my made > what I have made > > I have stored in a database the hashed value of "bobPW" password and the > salt > > In my PWCBHandler > > I get the stored password and hash > I hash pwcb.getPassword() with

Re: how o use stored password in a database which rampart should verify

2013-05-07 Thread robert lazarski
On Mon, May 6, 2013 at 11:52 AM, Tania Marinova wrote: > > > Hello I 've made a an axis 2 web service which stores the user hashed > password in a database. > So it's obvious that I shold add some kind of security to my web service > so i use rampart! > > But it's written that in a real applicatio

Re: how o use stored password in a database which rampart should verify

2013-05-07 Thread robert lazarski
On Tue, May 7, 2013 at 3:39 PM, robert lazarski wrote: > On Mon, May 6, 2013 at 11:52 AM, Tania Marinova wrote: > To hash, store this 'digest' value in the DB in the password column as > its already encoded to Base64 - do not store the salt in the db: > I meant to say don't store the salt in a s

Re: org.apache.axis2.AxisFault: The security token could not be authenticated or authorized

2013-05-07 Thread Tania Marinova
  Hello, 44 first thank you for your answer ! And ithink I do what you're saying   I store the hashed password but also the salt in a separate column (because I should hash then the plain text password with the same same hash)   then I make a soap request  in which as you seeI give the plain text