[Issue 935] New - WS-Policy should not be mandated for any generic web service

[mrudul_uchil]

https://wsit.dev.java.net/issues/show_bug.cgi?id=935
                 Issue #|935
                 Summary|WS-Policy should not be mandated for any generic web s
                        |ervice
               Component|wsit
                 Version|current
                Platform|All
              OS/Version|All
                     URL|
                  Status|NEW
       Status whiteboard|
                Keywords|
              Resolution|
              Issue type|DEFECT
                Priority|P2
            Subcomponent|security
             Assigned to|kumarjayanti
             Reported by|mrudul_uchil






------- Additional comments from mrudul_uchil@... Wed Jun 18 17:11:17 +0000 2008 -------
We should not need WS-Policy for any generic web service that we want to secure
using unified JSR 196 modules.

Following code in ServerAuthConfig makes every web service to define WS-Policy,
without this code MEX communication breaks.

        PolicyMap  pMap = (PolicyMap)map.get("POLICY");
        if (pMap == null || pMap.isEmpty()) {
            return null;
        }

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...

[kumarjayanti-2]

https://wsit.dev.java.net/issues/show_bug.cgi?id=935



User kumarjayanti changed the following:

                What    |Old value                 |New value
================================================================================
                  Status|NEW                       |STARTED
--------------------------------------------------------------------------------




------- Additional comments from kumarjayanti@... Thu Jun 26 10:06:37 +0000 2008 -------
It appears FAM needs a way to work around Mex calls which fail because of their
ServerAuthConfig being enabled for Mex calls. Or they may need a way to detect a
mex call and avoid using the AuthConfig in that case.


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...

[jdg6688]

https://wsit.dev.java.net/issues/show_bug.cgi?id=935



User jdg6688 changed the following:

                What    |Old value                 |New value
================================================================================
             Assigned to|kumarjayanti              |jdg6688
--------------------------------------------------------------------------------
                  Status|STARTED                   |NEW
--------------------------------------------------------------------------------




------- Additional comments from jdg6688@... Thu Jun 26 15:11:07 +0000 2008 -------
reasign

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...

[ritzmann]

https://wsit.dev.java.net/issues/show_bug.cgi?id=935



User ritzmann changed the following:

                What    |Old value                 |New value
================================================================================
             Assigned to|jdg6688                   |ritzmann
--------------------------------------------------------------------------------
              Issue type|DEFECT                    |FEATURE
--------------------------------------------------------------------------------
                Priority|P2                        |P3
--------------------------------------------------------------------------------
              QA contact|sreejithak                |daveronge
--------------------------------------------------------------------------------
            Subcomponent|security                  |policy
--------------------------------------------------------------------------------
        Target milestone|not determined            |1.4
--------------------------------------------------------------------------------




------- Additional comments from ritzmann@... Thu Jul  3 15:23:29 +0000 2008 -------
I believe we worked around the MEX related problems?

I am changing this issue into a feature request. JCAPS asked for similar
functionality in the past. We are looking into whether we can suppress policy
output on request for Metro 2.0.

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...

[ritzmann]

https://wsit.dev.java.net/issues/show_bug.cgi?id=935



User ritzmann changed the following:

                What    |Old value                 |New value
================================================================================
             Assigned to|ritzmann                  |ashutoshshahi
--------------------------------------------------------------------------------
              QA contact|daveronge                 |sreejithak
--------------------------------------------------------------------------------
            Subcomponent|policy                    |security
--------------------------------------------------------------------------------




------- Additional comments from ritzmann@... Thu Jul  3 15:35:48 +0000 2008 -------
Seems like I misunderstood this issue somewhat. FAM wants to protect aspects of
the web service even if there is no policy given for it. JCAPS wants to have a
configurable option to prevent that policies show up in WSDL in case some old
tools can't cope with the policy elements.

I am assigning this issue to Kumar so that he can track the FAM issue. The
JCAPS feature request is tracked separately.

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...

[ritzmann]

https://wsit.dev.java.net/issues/show_bug.cgi?id=935



User ritzmann changed the following:

                What    |Old value                 |New value
================================================================================
                      CC|''                        |'jdg6688'
--------------------------------------------------------------------------------
             Assigned to|ashutoshshahi             |kumarjayanti
--------------------------------------------------------------------------------




------- Additional comments from ritzmann@... Thu Jul  3 15:37:15 +0000 2008 -------
Actually assigning it to Kumar...

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...

[mrudul_uchil]

https://wsit.dev.java.net/issues/show_bug.cgi?id=935






------- Additional comments from mrudul_uchil@... Tue Jul  8 18:59:58 +0000 2008 -------
FAM will move ahead with following workaround for bypassing MEX calls from
security validation at server end.

        WSEndpoint endPoint = (WSEndpoint)map.get("ENDPOINT");
        WSDLPort port = endPoint.getPort();
        QName serviceName = endPoint.getServiceName();
        QName portName = endPoint.getPortName();
       
        if ((port == null) &&
            (serviceName == null || serviceName.toString().length() == 0) &&
            (portName == null || portName.toString().length() == 0)) {
            return null;
        }



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...