WS-Security Implementation in ColdFusionMX

[abmtry]

Hi,
How can I implement WS-Security in ColdFusionMX? Looking for some related code and/or article, which will help me to acheive this.

Can anybody help me out??

Thanks,

[Tom Jordahl]

We do use Apache Axis, which does have a plugin for WS-Security.

See [url]http://ws.apache.org/ws-fx/wss4j/[/url]

You can find the client deployment file, client-config.wsdd in the WEB-INF
directory.

The web service object returned from CreateObject() is the Axis "Stub"
object, so you can call _setProperty() on it.

I have never tried this. Send me mail and let me know how it goes!

--
Tom Jordahl
Macromedia Server Development

[Brian Hogue]

Tom -

What web server are you using?

-brian

"Tom Jordahl" <tomj@macromedia.com> wrote in message
news:d4r3q3$3sm$1@forums.macromedia.com...

>
> We do use Apache Axis, which does have a plugin for WS-Security.
>
> See [url]http://ws.apache.org/ws-fx/wss4j/[/url]
>
> You can find the client deployment file, client-config.wsdd in the WEB-INF
> directory.
>
> The web service object returned from CreateObject() is the Axis "Stub"
> object, so you can call _setProperty() on it.
>
> I have never tried this. Send me mail and let me know how it goes!
>
> --
> Tom Jordahl
> Macromedia Server Development
>
>

[Tom Jordahl]

> What web server are you using?

> -brian

Huh? The web server doesn't have anything to do with WS-Security.

--
Tom Jordahl
Macromedia Server Development

[Brian Hogue]

Does that mean the Apache Axis plugin for WS-Security works on IIS?

-brian

"Tom Jordahl" <tomj@macromedia.com> wrote in message
news:d4tk0c$mnc$1@forums.macromedia.com...

> > What web server are you using?
> > -brian

>
> Huh? The web server doesn't have anything to do with WS-Security.
>
> --
> Tom Jordahl
> Macromedia Server Development
>
>

[david_h]

No he's saying ColdFusion internally is running on a JAVA server, which in your case would have a IIS connector, the apache Axis project interacts with the Java server, most likely jrun in your case

[Brian Hogue]

David -

Thanks for the explanation. I bought CF. I understand that it uses JRun
behind the scenes. Your answer suggests that I need to explicitly buy JRun
(or some other Java server) to get WS-Security working. Is this correct?

I was hoping for something in CF (no additional cost) that made WS-Security
work.

-brian

"david_h" <webforumsuser@macromedia.com> wrote in message
news:d55vr5$pvr$1@forums.macromedia.com...

> No he's saying ColdFusion internally is running on a JAVA server, which in

your case would have a IIS connector, the apache Axis project interacts with
the Java server, most likely jrun in your case

[Tom Jordahl]

> I was hoping for something in CF (no additional cost) that made
WS-Security

> work.

Brian,

The WSS4J project is free (open source) and works with Apache Axis (what CF
uses internally).

So if you are savvy, you may be able to plug in the free WS-Security
framework in to the web service engine in CFMX. We have not done any
investigation or testing on this, so it may be hard-to-impossible to get
everything to play nice.

WS-Security support is under consideration for the next major revision of
CF.

--
Tom Jordahl
Macromedia Server Development

[Brian Hogue]

Tom -

Thanks for the reply. As you suspect, I probably can make it work ...
however, that assumes my company gives me that time ... which it probably
will not. IMO, it will be a great selling feature for CF to have WS-Security
built in ... another excellent reason for using CF ... just like the Report
Writer is a great addition ... gives the CF community an advantage over
other tools. Anyhting I can do to help WS-Security make it into the next
major version?

-brian

"Tom Jordahl" <tomj@macromedia.com> wrote in message
news:d6csct$p72$1@forums.macromedia.com...

> > I was hoping for something in CF (no additional cost) that made

> WS-Security

> > work.

>
> Brian,
>
> The WSS4J project is free (open source) and works with Apache Axis (what

CF

> uses internally).
>
> So if you are savvy, you may be able to plug in the free WS-Security
> framework in to the web service engine in CFMX. We have not done any
> investigation or testing on this, so it may be hard-to-impossible to get
> everything to play nice.
>
> WS-Security support is under consideration for the next major revision of
> CF.
>
> --
> Tom Jordahl
> Macromedia Server Development
>
>

[Tom Jordahl]

> Anything I can do to help WS-Security

> make it into the next major version?

We hear you. It is at the top of the list for major web service
enhancements.

--
Tom Jordahl
Macromedia Server Development