users@glassfish.java.net

Re: Securing EJB WebService: where to start?

From: Shing Wai Chan <Shing-Wai.Chan_at_Sun.COM>
Date: Mon, 26 Mar 2007 12:20:49 -0800

Ryan de Laplante wrote:
> Is this independent of Access Manager? I noticed:
>
> <message-security-binding auth-layer="SOAP"
> provider-id="XWS_ServerProvider">
This provider is from GlassFish, not Access Manager.
>
> And in my netbeans generated sun-ejb-jar.xml, I see:
>
> <message-security-binding auth-layer="SOAP"
> provider-id="AMServerProvider-SAML-HolderOfKey"> '
This one is from AccessManager, which use Liberty.

So, depending on your requirement, you have desired which one to use.
>
>
> Thanks,
> Ryan
>
>
> glassfish_at_javadesktop.org wrote:
>> If you don't need Liberty, then GlassFish Message Level security is
>> good enough. Besides the doc mentioned in reply, one can some more
>> info in
>>
> http://blogs.sun.com/swchan/entry/troubleshooting_jaxws_message_level_security
>
>> [Message sent by forum member 'swchan2' (swchan2)]
>>
>> http://forums.java.net/jive/thread.jspa?messageID=209886
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net For
>> additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>