axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nandana Mihindukulasooriya <>
Subject Re: Issues with Rampart
Date Thu, 03 Sep 2009 22:52:04 GMT
Hi Eran,
    Thanks for pointing out. I fixed the stuff mentioned in the mail. I will
go through the two web sites again to see whether I have missed anything.

On Thu, Sep 3, 2009 at 6:20 PM, Eran Chinthaka <>wrote:.

> 1. Almost all the links within Axis2 web site to rampart is dead. For
> example, I went to and
> clicked
> on distros and the mirrors pointed my that links don't have that distro.

Fixed now. Please point if there are any other places that should be fixed.
I will have a look too to see if there are any other dead links to Rampart

> 2. Went on to apache rampart web site and links to all the previous
> releases
> are not working. I think previous releases must have been archived and
> pointed to that instead of the mirrors. We had a policy only to mirror the
> latest releases and archive the others.

Yeah, we moved the previous distro to to archive and didn't update the links
to point to archive :( , Fixed now.

> 3. Axis2 1.5 distro doesn't come with the jars required to engage and run
> rampart. I know rampart was moved out from Axis2 project. BUT, there is no
> information on Rampart READMEs instructing to download the rampart release,
> copy the jars in the lib folder in to axis2 lib.

The simplet way to do this is to run the ant script in the binary
distribution under samples and it will copy the necessary libraries and
module files to the Axis2 distribution. Yeah, it seems it is not well
documented in the README file. So I added a new section [1], "Installation"
which explicitly says where the files should be copied. Please review and
modify/add if the wording should be changed to make it more precise.

> 4. If I only want to use rampart without rahas, it still requires me to add
> the trust jar because the TokenStore classes are in it. Is this a mistake
> or
> by design?

Yes, Rampart engine (rampart-core) , depends on both rampart-policy and
rampart-trust. Some of the functionalities required for Rampart Engine such
as token management is provided by rampart-trust. Rahas module is only
required for WS-SecureConversation and WS-Trust scenarios. So we need to
have the rampart-trust library even if we don't need to use Rahas.


[1] -

View raw message