Comments on: Web Services Security with OpenSSO Security Token Service (STS) https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/ Some not-so random thoughts about this small IT World Mon, 25 Jan 2016 12:47:01 +0000 hourly 1 https://wordpress.org/?v=4.9.1 By: sst https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-534 Tue, 08 Mar 2011 06:09:05 +0000 https://www.stormacq.com/?p=385#comment-534 This is possible – I didnt check recently.
You should ask the question on OpenAM mailing list. fR people to answer very quickly most of the time
Good Luck !

]]> By: Glen https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-533 Tue, 08 Mar 2011 02:06:21 +0000 https://www.stormacq.com/?p=385#comment-533 You should download “WSS Agents” available at the bottom of this page http://www.forgerock.com/downloads.html

Thanks, but despite the “Agents” heading, that ZIP looks to be the *providers* (JSR-196 for Glassfish, not for Tomcat use.) openssowss*providers*.zip. Googling elsewhere, it apparently has been renamed by OpenAM to wssagents.zip, but even that’s unavailable now — it looks like I’ll have to manually build from (non-Mavenized, alas) source.

]]> By: sst https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-531 Tue, 22 Feb 2011 06:51:57 +0000 https://www.stormacq.com/?p=385#comment-531 You should download “WSS Agents” available at the bottom of this page http://www.forgerock.com/downloads.html

]]> By: Glen https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-530 Mon, 21 Feb 2011 23:45:05 +0000 https://www.stormacq.com/?p=385#comment-530 The first problem you listed was “As of today, there is no binary distribution [openssowssagents.jar] for the JAX WS Handlers and WSS Agents. The JAR file is only available from ForgeRock.”

But that FR download page doesn’t have openssowssagents.jar either. What instead should I be downloading from the ForgeRock page? (I know I’ll still be missing the two classes you listed in Problem #2 but want to make sure I have the rest of the library correct.) Thanks!

]]> By: Mike https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-495 Tue, 11 Jan 2011 21:44:32 +0000 https://www.stormacq.com/?p=385#comment-495 I finally got my openam stock quote up and running. I didn’t need to build openam though.

I just grabbed the openssowsprovider.zip file from:

http://download.java.net/general/opensso/stable/opensso-build6-update1/openssowssproviders.zip

and replaced the contents of the lib directory with the matching updated libraries from the
opensso.war that is included in the openam951 snapshot zip file.

]]> By: sst https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-490 Sun, 09 Jan 2011 09:41:45 +0000 https://www.stormacq.com/?p=385#comment-490 Mike,

That’s the point of my blog post. The JAX WS agent is not provided as a binary nor from Oracle, nor from ForgeRock. Should you have a valid support contract with any of these two companies, I strongly suggest you to open a support call and ask for it. (BTW – I am interested by Oracle’s response…)

Worst case, you can either build OpenAM from ForgeRock’s source tree or develop your own JAX WS agent, as this is extremely simple (you can inspire yourself from ForgeRock’s source code) – probably less than 50 lines of code.

]]> By: Mike https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-488 Sat, 08 Jan 2011 00:17:58 +0000 https://www.stormacq.com/?p=385#comment-488 Looks like openam951 has all the same agents as displayed in the tutorial. Hopefully your comment only meant that if you didn’t have openssowsagents.jar that you need to build.

]]> By: Mike https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-486 Wed, 05 Jan 2011 06:12:19 +0000 https://www.stormacq.com/?p=385#comment-486 Assuming you get oracle open sso sts setup in glassfish can you then use approach 3 against this sts?

The oracle open sso sts seems to be quite different from all the tutorial information that is out there. For instance the only agent available is the web service provider where as the tutorial you reference shows a screenshot of web service client, sts client, etc in this image:

http://developers.sun.com/identity/reference/techart/wss_opensso/images/Picture1.png

Or can I somehow put the openssowssagents.jar into my sts?

Thank you!

]]> By: sst https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-484 Tue, 04 Jan 2011 19:28:12 +0000 https://www.stormacq.com/?p=385#comment-484 Correct. Recent builds of OpenSSO are provided by http://www.ForgeRock.com

]]> By: Mike https://www.stormacq.com/web-services-security-with-opensso-security-token-service-sts/comment-page-1/#comment-483 Tue, 04 Jan 2011 19:07:58 +0000 https://www.stormacq.com/?p=385#comment-483 The only opensso download I was able to find is the oracle opensso sts.

http://download.oracle.com/otn/nt/middleware/11g/oracle_openssosts_11gr1.zip

All the links to opensso 8 seemed to require a support contract from oracle.

]]>