Hi all,
I'm working for an academic group developing systems for various scientific data-sharing networks related to malaria, and we've been using eXist for persistence via the Atom protocol. Up till now we've been developing user interfaces using GWT, but I'm seriously evaluating Orbeon as XForms is a much better fit with our Atom-based services (it took me half a day to knock up a simple blog client in xforms whereas doing the same with GWT previously took me a couple of weeks :). The rub is that we need to use eXist 1.4, and Orbeon currently embeds 1.2.6, so I had a go at patching eXist 1.4 for Orbeon as per the steps at [1]. I've written up some notes on what I did, along with links to what I created, at the following link: http://code.google.com/p/atombeat/wiki/OrbeonForms I've done some light testing (poking through the various xforms demos) and it seems to work, but I'd *really* appreciate any other eyes on this, as I'm not at all familiar with orbeon. Thanks a lot, Alistair [1] http://wiki.orbeon.com/forms/doc/contributor-guide/third-party-java-libraries#TOC-eXist -- Alistair Miles Centre for Genomics and Global Health <http://cggh.org> The Wellcome Trust Centre for Human Genetics Roosevelt Drive Oxford OX3 7BN United Kingdom Web: http://purl.org/net/aliman Email: [hidden email] Tel: +44 (0)1865 287669 -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
-- -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Hi Hank,
On Wed, Mar 31, 2010 at 9:46 PM, Louis Ratzesberger <[hidden email]> wrote: > > Hi Alistair, > > Did you attempt to run eXist in a separate deployment? No, I didn't try that, although I had seen the suggestion in a separate thread [1]. I would have gone that route, but we need to integrate with an SSO system and authentication is easier to handle if both the web services (i.e., eXist via Atom) and the applications are in the same webapp - the xforms submissions should be able to just forward the jsessionid cookie from the browser (although I haven't actually got that working yet ... crosses fingers and prays :). Btw, if anyone has any tips or experience with doing authentication across a webapp that talks to a web service, I'd love to get in touch - we're using spring security and CAS [2] for SSO authn across a CMS (drupal) and a couple of java webapps. > It sounds like, since you have things working with 1.4, there are no > incompatibilites. > I haven't found any incompatibilities yet, but I haven't tested thoroughly, will let you know if anything crops up. The only thing I do see is the following message re parsers transformers and resolvers, which I believe is coming from exist, but it doesn't seem to stop anything working, so I'm ignoring (at my peril?) for the moment... 2010-04-01 10:56:31,285 WARN XmlLibraryChecker - Looking for a valid Parser... Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 Warning: Failed find a valid Parser! Please add an appropriate Parser to the class-path, e.g. in the 'endorsed' folder of the servlet container or in the 'endorsed' folder of the JRE. Looking for a valid Parser... Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 Warning: Failed find a valid Parser! Please add an appropriate Parser to the class-path, e.g. in the 'endorsed' folder of the servlet container or in the 'endorsed' folder of the JRE. 2010-04-01 10:56:31,316 WARN XmlLibraryChecker - Looking for a valid Transformer... Checking for Saxon, found version 8.8 needed version 8.9.0 Checking for Xalan, not found! Warning: Failed find a valid Transformer! Please add an appropriate Transformer to the class-path, e.g. in the 'endorsed' folder of the servlet container or in the 'endorsed' folder of the JRE. Looking for a valid Transformer... Checking for Saxon, found version 8.8 needed version 8.9.0 Checking for Xalan, not found! Warning: Failed find a valid Transformer! Please add an appropriate Transformer to the class-path, e.g. in the 'endorsed' folder of the servlet container or in the 'endorsed' folder of the JRE. 2010-04-01 10:56:31,316 INFO XmlLibraryChecker - Looking for a valid Resolver... Checking for Resolver, found version XmlResolver 1.2 OK! 2010-04-01 10:56:31,317 INFO XmlLibraryChecker - Using parser org.orbeon.oxf.xml.xerces.XercesSAXParser 2010-04-01 10:56:31,322 INFO XmlLibraryChecker - Using transformer com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl Using parser org.orbeon.oxf.xml.xerces.XercesSAXParser Using transformer com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl Cheers, Alistair [1] http://n4.nabble.com/eXist-DB-Size-Issue-td42409.html [2] http://www.jasig.org/cas > > I am considering doing this. Have not tested it yet, but it > seems that you only need to adjust a few configuration > elements in properties-form-runner.xml etc. > > <property as="xs:anyURI" name="oxf.fr.persistence.service.exist.uri" > value="/exist/rest/db"/> > > And there are others...that you would change, e.g., > value="http;//localhost/exist/rest/db" > if your eXist was deployed in the directory "exist" . Note that if you > didn't specify a > protocol, the default filter will prepend whatever Orbeon is deployed into. > > It sounds like, since you have things working with 1.4, there are no > incompatibilites. > > Thanks, > Hank > > Quoting Alistair Miles <[hidden email]>: > >> Hi all, >> >> I'm working for an academic group developing systems for various >> scientific data-sharing networks related to malaria, and we've been >> using eXist for persistence via the Atom protocol. Up till now we've >> been developing user interfaces using GWT, but I'm seriously >> evaluating Orbeon as XForms is a much better fit with our Atom-based >> services (it took me half a day to knock up a simple blog client in >> xforms whereas doing the same with GWT previously took me a couple of >> weeks :). >> >> The rub is that we need to use eXist 1.4, and Orbeon currently embeds >> 1.2.6, so I had a go at patching eXist 1.4 for Orbeon as per the steps >> at [1]. I've written up some notes on what I did, along with links to >> what I created, at the following link: >> >> http://code.google.com/p/atombeat/wiki/OrbeonForms >> >> I've done some light testing (poking through the various xforms demos) >> and it seems to work, but I'd *really* appreciate any other eyes on >> this, as I'm not at all familiar with orbeon. >> >> Thanks a lot, >> >> Alistair >> >> [1] >> >> http://wiki.orbeon.com/forms/doc/contributor-guide/third-party-java-libraries#TOC-eXist >> >> -- >> Alistair Miles >> Centre for Genomics and Global Health <http://cggh.org> >> The Wellcome Trust Centre for Human Genetics >> Roosevelt Drive >> Oxford >> OX3 7BN >> United Kingdom >> Web: http://purl.org/net/aliman >> Email: [hidden email] >> Tel: +44 (0)1865 287669 >> > > > > -- > Hank Ratzesberger > [hidden email] > > -- > You receive this message as a subscriber of the [hidden email] mailing > list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Quoting Alistair Miles <[hidden email]>:
-- -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Administrator
|
In reply to this post by Alistair Miles-2
Alistair,
Regarding authentication with eXist, a popular strategy is to: * Use just one login when your web accesses eXist (or even to allow eXist to be accessed without a login). * Block accesses to eXist from any machine other than localhost. Benefits of this approach are simplicity and increases security in the sense that you only let users access the database through your application, instead of allowing direct access. Alex On Thu, Apr 1, 2010 at 3:06 AM, Alistair Miles <[hidden email]> wrote: > Hi Hank, > > On Wed, Mar 31, 2010 at 9:46 PM, Louis Ratzesberger > <[hidden email]> wrote: >> >> Hi Alistair, >> >> Did you attempt to run eXist in a separate deployment? > > No, I didn't try that, although I had seen the suggestion in a > separate thread [1]. > > I would have gone that route, but we need to integrate with an SSO > system and authentication is easier to handle if both the web services > (i.e., eXist via Atom) and the applications are in the same webapp - > the xforms submissions should be able to just forward the jsessionid > cookie from the browser (although I haven't actually got that working > yet ... crosses fingers and prays :). > > Btw, if anyone has any tips or experience with doing authentication > across a webapp that talks to a web service, I'd love to get in touch > - we're using spring security and CAS [2] for SSO authn across a CMS > (drupal) and a couple of java webapps. > >> It sounds like, since you have things working with 1.4, there are no >> incompatibilites. >> > > I haven't found any incompatibilities yet, but I haven't tested > thoroughly, will let you know if anything crops up. > > The only thing I do see is the following message re parsers > transformers and resolvers, which I believe is coming from exist, but > it doesn't seem to stop anything working, so I'm ignoring (at my > peril?) for the moment... > > 2010-04-01 10:56:31,285 WARN XmlLibraryChecker - Looking for a valid Parser... > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 > Warning: Failed find a valid Parser! > > Please add an appropriate Parser to the class-path, e.g. in the > 'endorsed' folder of the servlet container or in the 'endorsed' folder > of the JRE. > > Looking for a valid Parser... > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 > Warning: Failed find a valid Parser! > > Please add an appropriate Parser to the class-path, e.g. in the > 'endorsed' folder of the servlet container or in the 'endorsed' folder > of the JRE. > > 2010-04-01 10:56:31,316 WARN XmlLibraryChecker - Looking for a valid > Transformer... > Checking for Saxon, found version 8.8 needed version 8.9.0 > Checking for Xalan, not found! > Warning: Failed find a valid Transformer! > > Please add an appropriate Transformer to the class-path, e.g. in the > 'endorsed' folder of the servlet container or in the 'endorsed' folder > of the JRE. > > Looking for a valid Transformer... > Checking for Saxon, found version 8.8 needed version 8.9.0 > Checking for Xalan, not found! > Warning: Failed find a valid Transformer! > > Please add an appropriate Transformer to the class-path, e.g. in the > 'endorsed' folder of the servlet container or in the 'endorsed' folder > of the JRE. > > 2010-04-01 10:56:31,316 INFO XmlLibraryChecker - Looking for a valid > Resolver... > Checking for Resolver, found version XmlResolver 1.2 > OK! > > 2010-04-01 10:56:31,317 INFO XmlLibraryChecker - Using parser > org.orbeon.oxf.xml.xerces.XercesSAXParser > 2010-04-01 10:56:31,322 INFO XmlLibraryChecker - Using transformer > com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl > Using parser org.orbeon.oxf.xml.xerces.XercesSAXParser > Using transformer com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl > > Cheers, > > Alistair > > [1] http://n4.nabble.com/eXist-DB-Size-Issue-td42409.html > [2] http://www.jasig.org/cas > >> >> I am considering doing this. Have not tested it yet, but it >> seems that you only need to adjust a few configuration >> elements in properties-form-runner.xml etc. >> >> <property as="xs:anyURI" name="oxf.fr.persistence.service.exist.uri" >> value="/exist/rest/db"/> >> >> And there are others...that you would change, e.g., >> value="http;//localhost/exist/rest/db" >> if your eXist was deployed in the directory "exist" . Note that if you >> didn't specify a >> protocol, the default filter will prepend whatever Orbeon is deployed into. >> >> It sounds like, since you have things working with 1.4, there are no >> incompatibilites. >> >> Thanks, >> Hank >> >> Quoting Alistair Miles <[hidden email]>: >> >>> Hi all, >>> >>> I'm working for an academic group developing systems for various >>> scientific data-sharing networks related to malaria, and we've been >>> using eXist for persistence via the Atom protocol. Up till now we've >>> been developing user interfaces using GWT, but I'm seriously >>> evaluating Orbeon as XForms is a much better fit with our Atom-based >>> services (it took me half a day to knock up a simple blog client in >>> xforms whereas doing the same with GWT previously took me a couple of >>> weeks :). >>> >>> The rub is that we need to use eXist 1.4, and Orbeon currently embeds >>> 1.2.6, so I had a go at patching eXist 1.4 for Orbeon as per the steps >>> at [1]. I've written up some notes on what I did, along with links to >>> what I created, at the following link: >>> >>> http://code.google.com/p/atombeat/wiki/OrbeonForms >>> >>> I've done some light testing (poking through the various xforms demos) >>> and it seems to work, but I'd *really* appreciate any other eyes on >>> this, as I'm not at all familiar with orbeon. >>> >>> Thanks a lot, >>> >>> Alistair >>> >>> [1] >>> >>> http://wiki.orbeon.com/forms/doc/contributor-guide/third-party-java-libraries#TOC-eXist >>> >>> -- >>> Alistair Miles >>> Centre for Genomics and Global Health <http://cggh.org> >>> The Wellcome Trust Centre for Human Genetics >>> Roosevelt Drive >>> Oxford >>> OX3 7BN >>> United Kingdom >>> Web: http://purl.org/net/aliman >>> Email: [hidden email] >>> Tel: +44 (0)1865 287669 >>> >> >> >> >> -- >> Hank Ratzesberger >> [hidden email] >> >> -- >> You receive this message as a subscriber of the [hidden email] mailing >> list. >> To unsubscribe: mailto:[hidden email] >> For general help: mailto:[hidden email]?subject=help >> OW2 mailing lists service home page: http://www.ow2.org/wws >> >> > > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
In reply to this post by Louis Ratzesberger
Hi Hank, thanks for the confirmation.
Cheers, Alistair On Thu, Apr 01, 2010 at 08:25:58AM -0700, Louis Ratzesberger wrote: > Quoting Alistair Miles <[hidden email]>: > > > The only thing I do see is the following message re parsers > > transformers and resolvers, which I believe is coming from exist, but > > it doesn't seem to stop anything working, so I'm ignoring (at my > > peril?) for the moment... > > > > 2010-04-01 10:56:31,285 WARN XmlLibraryChecker - Looking for a > > valid Parser... > > Checking for Xerces, found version Xerces-J 2.9.0 needed version > > Xerces-J 2.9.1 > > Warning: Failed find a valid Parser! > > This is a benign warning. Sorry, I can't recall the exact context, > but by the time the Orbeon servlet is deployed a parser is > available. > > All the best, > Hank > > > > -- > Hank Ratzesberger > [hidden email] > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws -- Alistair Miles Centre for Genomics and Global Health <http://cggh.org> The Wellcome Trust Centre for Human Genetics Roosevelt Drive Oxford OX3 7BN United Kingdom Web: http://purl.org/net/aliman Email: [hidden email] Tel: +44 (0)1865 287669 -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
In reply to this post by Alessandro Vernet
Hi Alex, thanks for this suggestion. Unfortunately not an option as we
are hoping to offer an Atom-based web service interface (implemented with eXist and XQuery) in addition to developing our own front-end (using Orbeon Xforms). So we'd like to find a reasonable way of implementing authn/authz for our web service interface, that plays well with a range of clients (including those that are running on another server). FWIW, I'm currently trying to wrap my head around CAS' proxying capabilities, but as yet have no idea how easy it will be to implement for our setup. Cheers, Alistair On Sun, Apr 04, 2010 at 03:35:39PM -0700, Alessandro Vernet wrote: > Alistair, > > Regarding authentication with eXist, a popular strategy is to: > > * Use just one login when your web accesses eXist (or even to allow > eXist to be accessed without a login). > * Block accesses to eXist from any machine other than localhost. > > Benefits of this approach are simplicity and increases security in the > sense that you only let users access the database through your > application, instead of allowing direct access. > > Alex > > On Thu, Apr 1, 2010 at 3:06 AM, Alistair Miles <[hidden email]> wrote: > > Hi Hank, > > > > On Wed, Mar 31, 2010 at 9:46 PM, Louis Ratzesberger > > <[hidden email]> wrote: > >> > >> Hi Alistair, > >> > >> Did you attempt to run eXist in a separate deployment? > > > > No, I didn't try that, although I had seen the suggestion in a > > separate thread [1]. > > > > I would have gone that route, but we need to integrate with an SSO > > system and authentication is easier to handle if both the web services > > (i.e., eXist via Atom) and the applications are in the same webapp - > > the xforms submissions should be able to just forward the jsessionid > > cookie from the browser (although I haven't actually got that working > > yet ... crosses fingers and prays :). > > > > Btw, if anyone has any tips or experience with doing authentication > > across a webapp that talks to a web service, I'd love to get in touch > > - we're using spring security and CAS [2] for SSO authn across a CMS > > (drupal) and a couple of java webapps. > > > >> It sounds like, since you have things working with 1.4, there are no > >> incompatibilites. > >> > > > > I haven't found any incompatibilities yet, but I haven't tested > > thoroughly, will let you know if anything crops up. > > > > The only thing I do see is the following message re parsers > > transformers and resolvers, which I believe is coming from exist, but > > it doesn't seem to stop anything working, so I'm ignoring (at my > > peril?) for the moment... > > > > 2010-04-01 10:56:31,285 WARN XmlLibraryChecker - Looking for a valid Parser... > > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 > > Warning: Failed find a valid Parser! > > > > Please add an appropriate Parser to the class-path, e.g. in the > > 'endorsed' folder of the servlet container or in the 'endorsed' folder > > of the JRE. > > > > Looking for a valid Parser... > > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 > > Warning: Failed find a valid Parser! > > > > Please add an appropriate Parser to the class-path, e.g. in the > > 'endorsed' folder of the servlet container or in the 'endorsed' folder > > of the JRE. > > > > 2010-04-01 10:56:31,316 WARN XmlLibraryChecker - Looking for a valid > > Transformer... > > Checking for Saxon, found version 8.8 needed version 8.9.0 > > Checking for Xalan, not found! > > Warning: Failed find a valid Transformer! > > > > Please add an appropriate Transformer to the class-path, e.g. in the > > 'endorsed' folder of the servlet container or in the 'endorsed' folder > > of the JRE. > > > > Looking for a valid Transformer... > > Checking for Saxon, found version 8.8 needed version 8.9.0 > > Checking for Xalan, not found! > > Warning: Failed find a valid Transformer! > > > > Please add an appropriate Transformer to the class-path, e.g. in the > > 'endorsed' folder of the servlet container or in the 'endorsed' folder > > of the JRE. > > > > 2010-04-01 10:56:31,316 INFO XmlLibraryChecker - Looking for a valid > > Resolver... > > Checking for Resolver, found version XmlResolver 1.2 > > OK! > > > > 2010-04-01 10:56:31,317 INFO XmlLibraryChecker - Using parser > > org.orbeon.oxf.xml.xerces.XercesSAXParser > > 2010-04-01 10:56:31,322 INFO XmlLibraryChecker - Using transformer > > com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl > > Using parser org.orbeon.oxf.xml.xerces.XercesSAXParser > > Using transformer com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl > > > > Cheers, > > > > Alistair > > > > [1] http://n4.nabble.com/eXist-DB-Size-Issue-td42409.html > > [2] http://www.jasig.org/cas > > > >> > >> I am considering doing this. Have not tested it yet, but it > >> seems that you only need to adjust a few configuration > >> elements in properties-form-runner.xml etc. > >> > >> <property as="xs:anyURI" name="oxf.fr.persistence.service.exist.uri" > >> value="/exist/rest/db"/> > >> > >> And there are others...that you would change, e.g., > >> value="http;//localhost/exist/rest/db" > >> if your eXist was deployed in the directory "exist" . Note that if you > >> didn't specify a > >> protocol, the default filter will prepend whatever Orbeon is deployed into. > >> > >> It sounds like, since you have things working with 1.4, there are no > >> incompatibilites. > >> > >> Thanks, > >> Hank > >> > >> Quoting Alistair Miles <[hidden email]>: > >> > >>> Hi all, > >>> > >>> I'm working for an academic group developing systems for various > >>> scientific data-sharing networks related to malaria, and we've been > >>> using eXist for persistence via the Atom protocol. Up till now we've > >>> been developing user interfaces using GWT, but I'm seriously > >>> evaluating Orbeon as XForms is a much better fit with our Atom-based > >>> services (it took me half a day to knock up a simple blog client in > >>> xforms whereas doing the same with GWT previously took me a couple of > >>> weeks :). > >>> > >>> The rub is that we need to use eXist 1.4, and Orbeon currently embeds > >>> 1.2.6, so I had a go at patching eXist 1.4 for Orbeon as per the steps > >>> at [1]. I've written up some notes on what I did, along with links to > >>> what I created, at the following link: > >>> > >>> http://code.google.com/p/atombeat/wiki/OrbeonForms > >>> > >>> I've done some light testing (poking through the various xforms demos) > >>> and it seems to work, but I'd *really* appreciate any other eyes on > >>> this, as I'm not at all familiar with orbeon. > >>> > >>> Thanks a lot, > >>> > >>> Alistair > >>> > >>> [1] > >>> > >>> http://wiki.orbeon.com/forms/doc/contributor-guide/third-party-java-libraries#TOC-eXist > >>> > >>> -- > >>> Alistair Miles > >>> Centre for Genomics and Global Health <http://cggh.org> > >>> The Wellcome Trust Centre for Human Genetics > >>> Roosevelt Drive > >>> Oxford > >>> OX3 7BN > >>> United Kingdom > >>> Web: http://purl.org/net/aliman > >>> Email: [hidden email] > >>> Tel: +44 (0)1865 287669 > >>> > >> > >> > >> > >> -- > >> Hank Ratzesberger > >> [hidden email] > >> > >> -- > >> You receive this message as a subscriber of the [hidden email] mailing > >> list. > >> To unsubscribe: mailto:[hidden email] > >> For general help: mailto:[hidden email]?subject=help > >> OW2 mailing lists service home page: http://www.ow2.org/wws > >> > >> > > > > > > -- > > You receive this message as a subscriber of the [hidden email] mailing list. > > To unsubscribe: mailto:[hidden email] > > For general help: mailto:[hidden email]?subject=help > > OW2 mailing lists service home page: http://www.ow2.org/wws > > > > > > > > -- > Orbeon Forms - Web forms, open-source, for the Enterprise - > http://www.orbeon.com/ > My Twitter: http://twitter.com/avernet > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws -- Alistair Miles Centre for Genomics and Global Health <http://cggh.org> The Wellcome Trust Centre for Human Genetics Roosevelt Drive Oxford OX3 7BN United Kingdom Web: http://purl.org/net/aliman Email: [hidden email] Tel: +44 (0)1865 287669 -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
On Tue, 2010-04-06 at 13:32 +0100, Alistair Miles wrote:
> Hi Alex, thanks for this suggestion. Unfortunately not an option as we > are hoping to offer an Atom-based web service interface (implemented > with eXist and XQuery) in addition to developing our own front-end > (using Orbeon Xforms). So we'd like to find a reasonable way of > implementing authn/authz for our web service interface, that plays > well with a range of clients (including those that are running on > another server). FWIW, I'm currently trying to wrap my head around > CAS' proxying capabilities, but as yet have no idea how easy it will > be to implement for our setup. We did get proxy tickets to work with Spring Security, although it was a bit brittle and a lot of headaches. See this JIRA ticket for some help: https://jira.springsource.org/browse/SEC-965 Also, depending on which version of CAS you are using, proxying might be off by default, and it takes some configuration to get it actually working. I'm sorry I can't be more help on the details, but we got it working a while back and don't currently use CAS for anything, so I'm pretty rusty on the details. Nathan Summers -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Administrator
|
In reply to this post by Alistair Miles-2
Alistair,
I see. Orbeon Forms can forward headers (e.g. JSESSIONID) but in addition to that you would need setup some type of single sign-on across web apps in Tomcat, so if a user is authenticated in Orbeon Forms, it is recognized as the same user in eXist. Alex On Tue, Apr 6, 2010 at 5:32 AM, Alistair Miles <[hidden email]> wrote: > Hi Alex, thanks for this suggestion. Unfortunately not an option as we > are hoping to offer an Atom-based web service interface (implemented > with eXist and XQuery) in addition to developing our own front-end > (using Orbeon Xforms). So we'd like to find a reasonable way of > implementing authn/authz for our web service interface, that plays > well with a range of clients (including those that are running on > another server). FWIW, I'm currently trying to wrap my head around > CAS' proxying capabilities, but as yet have no idea how easy it will > be to implement for our setup. > > Cheers, > > Alistair > > On Sun, Apr 04, 2010 at 03:35:39PM -0700, Alessandro Vernet wrote: >> Alistair, >> >> Regarding authentication with eXist, a popular strategy is to: >> >> * Use just one login when your web accesses eXist (or even to allow >> eXist to be accessed without a login). >> * Block accesses to eXist from any machine other than localhost. >> >> Benefits of this approach are simplicity and increases security in the >> sense that you only let users access the database through your >> application, instead of allowing direct access. >> >> Alex >> >> On Thu, Apr 1, 2010 at 3:06 AM, Alistair Miles <[hidden email]> wrote: >> > Hi Hank, >> > >> > On Wed, Mar 31, 2010 at 9:46 PM, Louis Ratzesberger >> > <[hidden email]> wrote: >> >> >> >> Hi Alistair, >> >> >> >> Did you attempt to run eXist in a separate deployment? >> > >> > No, I didn't try that, although I had seen the suggestion in a >> > separate thread [1]. >> > >> > I would have gone that route, but we need to integrate with an SSO >> > system and authentication is easier to handle if both the web services >> > (i.e., eXist via Atom) and the applications are in the same webapp - >> > the xforms submissions should be able to just forward the jsessionid >> > cookie from the browser (although I haven't actually got that working >> > yet ... crosses fingers and prays :). >> > >> > Btw, if anyone has any tips or experience with doing authentication >> > across a webapp that talks to a web service, I'd love to get in touch >> > - we're using spring security and CAS [2] for SSO authn across a CMS >> > (drupal) and a couple of java webapps. >> > >> >> It sounds like, since you have things working with 1.4, there are no >> >> incompatibilites. >> >> >> > >> > I haven't found any incompatibilities yet, but I haven't tested >> > thoroughly, will let you know if anything crops up. >> > >> > The only thing I do see is the following message re parsers >> > transformers and resolvers, which I believe is coming from exist, but >> > it doesn't seem to stop anything working, so I'm ignoring (at my >> > peril?) for the moment... >> > >> > 2010-04-01 10:56:31,285 WARN XmlLibraryChecker - Looking for a valid Parser... >> > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 >> > Warning: Failed find a valid Parser! >> > >> > Please add an appropriate Parser to the class-path, e.g. in the >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder >> > of the JRE. >> > >> > Looking for a valid Parser... >> > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 >> > Warning: Failed find a valid Parser! >> > >> > Please add an appropriate Parser to the class-path, e.g. in the >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder >> > of the JRE. >> > >> > 2010-04-01 10:56:31,316 WARN XmlLibraryChecker - Looking for a valid >> > Transformer... >> > Checking for Saxon, found version 8.8 needed version 8.9.0 >> > Checking for Xalan, not found! >> > Warning: Failed find a valid Transformer! >> > >> > Please add an appropriate Transformer to the class-path, e.g. in the >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder >> > of the JRE. >> > >> > Looking for a valid Transformer... >> > Checking for Saxon, found version 8.8 needed version 8.9.0 >> > Checking for Xalan, not found! >> > Warning: Failed find a valid Transformer! >> > >> > Please add an appropriate Transformer to the class-path, e.g. in the >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder >> > of the JRE. >> > >> > 2010-04-01 10:56:31,316 INFO XmlLibraryChecker - Looking for a valid >> > Resolver... >> > Checking for Resolver, found version XmlResolver 1.2 >> > OK! >> > >> > 2010-04-01 10:56:31,317 INFO XmlLibraryChecker - Using parser >> > org.orbeon.oxf.xml.xerces.XercesSAXParser >> > 2010-04-01 10:56:31,322 INFO XmlLibraryChecker - Using transformer >> > com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl >> > Using parser org.orbeon.oxf.xml.xerces.XercesSAXParser >> > Using transformer com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl >> > >> > Cheers, >> > >> > Alistair >> > >> > [1] http://n4.nabble.com/eXist-DB-Size-Issue-td42409.html >> > [2] http://www.jasig.org/cas >> > >> >> >> >> I am considering doing this. Have not tested it yet, but it >> >> seems that you only need to adjust a few configuration >> >> elements in properties-form-runner.xml etc. >> >> >> >> <property as="xs:anyURI" name="oxf.fr.persistence.service.exist.uri" >> >> value="/exist/rest/db"/> >> >> >> >> And there are others...that you would change, e.g., >> >> value="http;//localhost/exist/rest/db" >> >> if your eXist was deployed in the directory "exist" . Note that if you >> >> didn't specify a >> >> protocol, the default filter will prepend whatever Orbeon is deployed into. >> >> >> >> It sounds like, since you have things working with 1.4, there are no >> >> incompatibilites. >> >> >> >> Thanks, >> >> Hank >> >> >> >> Quoting Alistair Miles <[hidden email]>: >> >> >> >>> Hi all, >> >>> >> >>> I'm working for an academic group developing systems for various >> >>> scientific data-sharing networks related to malaria, and we've been >> >>> using eXist for persistence via the Atom protocol. Up till now we've >> >>> been developing user interfaces using GWT, but I'm seriously >> >>> evaluating Orbeon as XForms is a much better fit with our Atom-based >> >>> services (it took me half a day to knock up a simple blog client in >> >>> xforms whereas doing the same with GWT previously took me a couple of >> >>> weeks :). >> >>> >> >>> The rub is that we need to use eXist 1.4, and Orbeon currently embeds >> >>> 1.2.6, so I had a go at patching eXist 1.4 for Orbeon as per the steps >> >>> at [1]. I've written up some notes on what I did, along with links to >> >>> what I created, at the following link: >> >>> >> >>> http://code.google.com/p/atombeat/wiki/OrbeonForms >> >>> >> >>> I've done some light testing (poking through the various xforms demos) >> >>> and it seems to work, but I'd *really* appreciate any other eyes on >> >>> this, as I'm not at all familiar with orbeon. >> >>> >> >>> Thanks a lot, >> >>> >> >>> Alistair >> >>> >> >>> [1] >> >>> >> >>> http://wiki.orbeon.com/forms/doc/contributor-guide/third-party-java-libraries#TOC-eXist >> >>> >> >>> -- >> >>> Alistair Miles >> >>> Centre for Genomics and Global Health <http://cggh.org> >> >>> The Wellcome Trust Centre for Human Genetics >> >>> Roosevelt Drive >> >>> Oxford >> >>> OX3 7BN >> >>> United Kingdom >> >>> Web: http://purl.org/net/aliman >> >>> Email: [hidden email] >> >>> Tel: +44 (0)1865 287669 >> >>> >> >> >> >> >> >> >> >> -- >> >> Hank Ratzesberger >> >> [hidden email] >> >> >> >> -- >> >> You receive this message as a subscriber of the [hidden email] mailing >> >> list. >> >> To unsubscribe: mailto:[hidden email] >> >> For general help: mailto:[hidden email]?subject=help >> >> OW2 mailing lists service home page: http://www.ow2.org/wws >> >> >> >> >> > >> > >> > -- >> > You receive this message as a subscriber of the [hidden email] mailing list. >> > To unsubscribe: mailto:[hidden email] >> > For general help: mailto:[hidden email]?subject=help >> > OW2 mailing lists service home page: http://www.ow2.org/wws >> > >> > >> >> >> >> -- >> Orbeon Forms - Web forms, open-source, for the Enterprise - >> http://www.orbeon.com/ >> My Twitter: http://twitter.com/avernet > >> >> -- >> You receive this message as a subscriber of the [hidden email] mailing list. >> To unsubscribe: mailto:[hidden email] >> For general help: mailto:[hidden email]?subject=help >> OW2 mailing lists service home page: http://www.ow2.org/wws > > > -- > Alistair Miles > Centre for Genomics and Global Health <http://cggh.org> > The Wellcome Trust Centre for Human Genetics > Roosevelt Drive > Oxford > OX3 7BN > United Kingdom > Web: http://purl.org/net/aliman > Email: [hidden email] > Tel: +44 (0)1865 287669 > > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
In reply to this post by Nathan Summers
Hi Nathan,
Thanks a lot for this. Out of interest, did you trade CAS in for something else? Apologies, I realise discussion of SSO might be a bit off-topic for ops-users, but I'm very interested to know what others deploying orbeon in an SSO environment are doing. Thanks, Alistair On Tue, Apr 06, 2010 at 11:09:17AM -0400, Nathan Summers wrote: > On Tue, 2010-04-06 at 13:32 +0100, Alistair Miles wrote: > > Hi Alex, thanks for this suggestion. Unfortunately not an option as we > > are hoping to offer an Atom-based web service interface (implemented > > with eXist and XQuery) in addition to developing our own front-end > > (using Orbeon Xforms). So we'd like to find a reasonable way of > > implementing authn/authz for our web service interface, that plays > > well with a range of clients (including those that are running on > > another server). FWIW, I'm currently trying to wrap my head around > > CAS' proxying capabilities, but as yet have no idea how easy it will > > be to implement for our setup. > > We did get proxy tickets to work with Spring Security, although it was a > bit brittle and a lot of headaches. See this JIRA ticket for some help: > https://jira.springsource.org/browse/SEC-965 > > Also, depending on which version of CAS you are using, proxying might be > off by default, and it takes some configuration to get it actually > working. I'm sorry I can't be more help on the details, but we got it > working a while back and don't currently use CAS for anything, so I'm > pretty rusty on the details. > > Nathan Summers > > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws -- Alistair Miles Centre for Genomics and Global Health <http://cggh.org> The Wellcome Trust Centre for Human Genetics Roosevelt Drive Oxford OX3 7BN United Kingdom Web: http://purl.org/net/aliman Email: [hidden email] Tel: +44 (0)1865 287669 -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
In reply to this post by Alessandro Vernet
Hi Alex
On Tue, Apr 06, 2010 at 11:59:50AM -0700, Alessandro Vernet wrote: > Alistair, > > I see. Orbeon Forms can forward headers (e.g. JSESSIONID) but in > addition to that you would need setup some type of single sign-on > across web apps in Tomcat, so if a user is authenticated in Orbeon > Forms, it is recognized as the same user in eXist. Thanks for this. FWIW I have orbeon forwarding Cookie headers including the JSESSIONID, so authentication is working fine in my app. Cheers, Alistair > > Alex > > On Tue, Apr 6, 2010 at 5:32 AM, Alistair Miles <[hidden email]> wrote: > > Hi Alex, thanks for this suggestion. Unfortunately not an option as we > > are hoping to offer an Atom-based web service interface (implemented > > with eXist and XQuery) in addition to developing our own front-end > > (using Orbeon Xforms). So we'd like to find a reasonable way of > > implementing authn/authz for our web service interface, that plays > > well with a range of clients (including those that are running on > > another server). FWIW, I'm currently trying to wrap my head around > > CAS' proxying capabilities, but as yet have no idea how easy it will > > be to implement for our setup. > > > > Cheers, > > > > Alistair > > > > On Sun, Apr 04, 2010 at 03:35:39PM -0700, Alessandro Vernet wrote: > >> Alistair, > >> > >> Regarding authentication with eXist, a popular strategy is to: > >> > >> * Use just one login when your web accesses eXist (or even to allow > >> eXist to be accessed without a login). > >> * Block accesses to eXist from any machine other than localhost. > >> > >> Benefits of this approach are simplicity and increases security in the > >> sense that you only let users access the database through your > >> application, instead of allowing direct access. > >> > >> Alex > >> > >> On Thu, Apr 1, 2010 at 3:06 AM, Alistair Miles <[hidden email]> wrote: > >> > Hi Hank, > >> > > >> > On Wed, Mar 31, 2010 at 9:46 PM, Louis Ratzesberger > >> > <[hidden email]> wrote: > >> >> > >> >> Hi Alistair, > >> >> > >> >> Did you attempt to run eXist in a separate deployment? > >> > > >> > No, I didn't try that, although I had seen the suggestion in a > >> > separate thread [1]. > >> > > >> > I would have gone that route, but we need to integrate with an SSO > >> > system and authentication is easier to handle if both the web services > >> > (i.e., eXist via Atom) and the applications are in the same webapp - > >> > the xforms submissions should be able to just forward the jsessionid > >> > cookie from the browser (although I haven't actually got that working > >> > yet ... crosses fingers and prays :). > >> > > >> > Btw, if anyone has any tips or experience with doing authentication > >> > across a webapp that talks to a web service, I'd love to get in touch > >> > - we're using spring security and CAS [2] for SSO authn across a CMS > >> > (drupal) and a couple of java webapps. > >> > > >> >> It sounds like, since you have things working with 1.4, there are no > >> >> incompatibilites. > >> >> > >> > > >> > I haven't found any incompatibilities yet, but I haven't tested > >> > thoroughly, will let you know if anything crops up. > >> > > >> > The only thing I do see is the following message re parsers > >> > transformers and resolvers, which I believe is coming from exist, but > >> > it doesn't seem to stop anything working, so I'm ignoring (at my > >> > peril?) for the moment... > >> > > >> > 2010-04-01 10:56:31,285 WARN XmlLibraryChecker - Looking for a valid Parser... > >> > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 > >> > Warning: Failed find a valid Parser! > >> > > >> > Please add an appropriate Parser to the class-path, e.g. in the > >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder > >> > of the JRE. > >> > > >> > Looking for a valid Parser... > >> > Checking for Xerces, found version Xerces-J 2.9.0 needed version Xerces-J 2.9.1 > >> > Warning: Failed find a valid Parser! > >> > > >> > Please add an appropriate Parser to the class-path, e.g. in the > >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder > >> > of the JRE. > >> > > >> > 2010-04-01 10:56:31,316 WARN XmlLibraryChecker - Looking for a valid > >> > Transformer... > >> > Checking for Saxon, found version 8.8 needed version 8.9.0 > >> > Checking for Xalan, not found! > >> > Warning: Failed find a valid Transformer! > >> > > >> > Please add an appropriate Transformer to the class-path, e.g. in the > >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder > >> > of the JRE. > >> > > >> > Looking for a valid Transformer... > >> > Checking for Saxon, found version 8.8 needed version 8.9.0 > >> > Checking for Xalan, not found! > >> > Warning: Failed find a valid Transformer! > >> > > >> > Please add an appropriate Transformer to the class-path, e.g. in the > >> > 'endorsed' folder of the servlet container or in the 'endorsed' folder > >> > of the JRE. > >> > > >> > 2010-04-01 10:56:31,316 INFO XmlLibraryChecker - Looking for a valid > >> > Resolver... > >> > Checking for Resolver, found version XmlResolver 1.2 > >> > OK! > >> > > >> > 2010-04-01 10:56:31,317 INFO XmlLibraryChecker - Using parser > >> > org.orbeon.oxf.xml.xerces.XercesSAXParser > >> > 2010-04-01 10:56:31,322 INFO XmlLibraryChecker - Using transformer > >> > com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl > >> > Using parser org.orbeon.oxf.xml.xerces.XercesSAXParser > >> > Using transformer com.sun.org.apache.xalan.internal.xsltc.trax.TransformerImpl > >> > > >> > Cheers, > >> > > >> > Alistair > >> > > >> > [1] http://n4.nabble.com/eXist-DB-Size-Issue-td42409.html > >> > [2] http://www.jasig.org/cas > >> > > >> >> > >> >> I am considering doing this. Have not tested it yet, but it > >> >> seems that you only need to adjust a few configuration > >> >> elements in properties-form-runner.xml etc. > >> >> > >> >> <property as="xs:anyURI" name="oxf.fr.persistence.service.exist.uri" > >> >> value="/exist/rest/db"/> > >> >> > >> >> And there are others...that you would change, e.g., > >> >> value="http;//localhost/exist/rest/db" > >> >> if your eXist was deployed in the directory "exist" . Note that if you > >> >> didn't specify a > >> >> protocol, the default filter will prepend whatever Orbeon is deployed into. > >> >> > >> >> It sounds like, since you have things working with 1.4, there are no > >> >> incompatibilites. > >> >> > >> >> Thanks, > >> >> Hank > >> >> > >> >> Quoting Alistair Miles <[hidden email]>: > >> >> > >> >>> Hi all, > >> >>> > >> >>> I'm working for an academic group developing systems for various > >> >>> scientific data-sharing networks related to malaria, and we've been > >> >>> using eXist for persistence via the Atom protocol. Up till now we've > >> >>> been developing user interfaces using GWT, but I'm seriously > >> >>> evaluating Orbeon as XForms is a much better fit with our Atom-based > >> >>> services (it took me half a day to knock up a simple blog client in > >> >>> xforms whereas doing the same with GWT previously took me a couple of > >> >>> weeks :). > >> >>> > >> >>> The rub is that we need to use eXist 1.4, and Orbeon currently embeds > >> >>> 1.2.6, so I had a go at patching eXist 1.4 for Orbeon as per the steps > >> >>> at [1]. I've written up some notes on what I did, along with links to > >> >>> what I created, at the following link: > >> >>> > >> >>> http://code.google.com/p/atombeat/wiki/OrbeonForms > >> >>> > >> >>> I've done some light testing (poking through the various xforms demos) > >> >>> and it seems to work, but I'd *really* appreciate any other eyes on > >> >>> this, as I'm not at all familiar with orbeon. > >> >>> > >> >>> Thanks a lot, > >> >>> > >> >>> Alistair > >> >>> > >> >>> [1] > >> >>> > >> >>> http://wiki.orbeon.com/forms/doc/contributor-guide/third-party-java-libraries#TOC-eXist > >> >>> > >> >>> -- > >> >>> Alistair Miles > >> >>> Centre for Genomics and Global Health <http://cggh.org> > >> >>> The Wellcome Trust Centre for Human Genetics > >> >>> Roosevelt Drive > >> >>> Oxford > >> >>> OX3 7BN > >> >>> United Kingdom > >> >>> Web: http://purl.org/net/aliman > >> >>> Email: [hidden email] > >> >>> Tel: +44 (0)1865 287669 > >> >>> > >> >> > >> >> > >> >> > >> >> -- > >> >> Hank Ratzesberger > >> >> [hidden email] > >> >> > >> >> -- > >> >> You receive this message as a subscriber of the [hidden email] mailing > >> >> list. > >> >> To unsubscribe: mailto:[hidden email] > >> >> For general help: mailto:[hidden email]?subject=help > >> >> OW2 mailing lists service home page: http://www.ow2.org/wws > >> >> > >> >> > >> > > >> > > >> > -- > >> > You receive this message as a subscriber of the [hidden email] mailing list. > >> > To unsubscribe: mailto:[hidden email] > >> > For general help: mailto:[hidden email]?subject=help > >> > OW2 mailing lists service home page: http://www.ow2.org/wws > >> > > >> > > >> > >> > >> > >> -- > >> Orbeon Forms - Web forms, open-source, for the Enterprise - > >> http://www.orbeon.com/ > >> My Twitter: http://twitter.com/avernet > > > >> > >> -- > >> You receive this message as a subscriber of the [hidden email] mailing list. > >> To unsubscribe: mailto:[hidden email] > >> For general help: mailto:[hidden email]?subject=help > >> OW2 mailing lists service home page: http://www.ow2.org/wws > > > > > > -- > > Alistair Miles > > Centre for Genomics and Global Health <http://cggh.org> > > The Wellcome Trust Centre for Human Genetics > > Roosevelt Drive > > Oxford > > OX3 7BN > > United Kingdom > > Web: http://purl.org/net/aliman > > Email: [hidden email] > > Tel: +44 (0)1865 287669 > > > > > > -- > > You receive this message as a subscriber of the [hidden email] mailing list. > > To unsubscribe: mailto:[hidden email] > > For general help: mailto:[hidden email]?subject=help > > OW2 mailing lists service home page: http://www.ow2.org/wws > > > > > > > > -- > Orbeon Forms - Web forms, open-source, for the Enterprise - > http://www.orbeon.com/ > My Twitter: http://twitter.com/avernet > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws -- Alistair Miles Centre for Genomics and Global Health <http://cggh.org> The Wellcome Trust Centre for Human Genetics Roosevelt Drive Oxford OX3 7BN United Kingdom Web: http://purl.org/net/aliman Email: [hidden email] Tel: +44 (0)1865 287669 -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
In reply to this post by Alistair Miles-2
On Thu, 2010-04-08 at 11:34 +0100, Alistair Miles wrote:
> Hi Nathan, > > Thanks a lot for this. Out of interest, did you trade CAS in for > something else? No, our business strategy changed and we no longer needed/desired SSO across applications. CAS is a bit of a pain, but there doesn't seem to be anything better out there, really. Nathan -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Free forum by Nabble | Edit this page |