I3:XR3-Siemens IdP-x-DigitalMe for Linux

From OSIS Open Source Identity Systems

Jump to: navigation, search

XR3-Siemens IdP-x-DigitalMe for Linux

   list help  copy  as XML  edit
Cross Solution Result   XR3-Siemens IdP-x-DigitalMe for Linux
Identifier   XR3
Date Tested   19 March 2008
Outcome (Must be one of:)
* Works
* Issues
* Failed
* N/A
* Not Tested   		N/A
Tested By   Duane Buss 14:22, 19 March 2008 (MST)
Solutions Involved   I3:Siemens IdP
  I3:DigitalMe for Linux
Other Solutions Involved   Bandit Python RP
Operating System   OpenSuse 10.2
Browser   Firefox 2.0.0.11
Notes   Message Binding is not supported

IdP returns invalid mex. -- appears to be fixed as of 19 March 2008 <mex:Metadata><mex:MetadataSection Dialect="http://schemas.xmlsoap.org/wsdl/"><wsdl:definitions xmlns:i0="http://xmlsoap.org/DAB" xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:tns="http://tempuri.org/" xmlns:wsa10="http://www.w3.org/2005/08/addressing" xmlns:wsap10="http://www.w3.org/2006/05/addressing/wsdl" xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex" xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="SecurityTokenService" targetNamespace="http://tempuri.org/"> 

   <wsp:Policy wsu:Id="ISecurityTokenService_policy">
       <wsp:ExactlyOne>
           <wsp:All>
               <sp:SymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <wsp:Policy>
                       <sp:ProtectionToken>
                           <wsp:Policy>
                               <sp:X509Token sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
                                   <wsp:Policy>
                                       <sp:RequireDerivedKeys/>
                                       <sp:RequireThumbprintReference/>
                                       <sp:WssX509V3Token10/>
                                   </wsp:Policy>
                               </sp:X509Token>
                           </wsp:Policy>
                       </sp:ProtectionToken>
                       <sp:AlgorithmSuite>
                           <wsp:Policy>
                               <sp:Basic128/>
                           </wsp:Policy>
                       </sp:AlgorithmSuite>
                       <sp:Layout>
                           <wsp:Policy>
                               <sp:Lax/>
                           </wsp:Policy>
                       </sp:Layout>
                       <sp:IncludeTimestamp/>
                       <sp:EncryptSignature/>
                       <sp:OnlySignEntireHeadersAndBody/>
                   </wsp:Policy>
               </sp:SymmetricBinding>
               
               <sp:SignedSupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <wsp:Policy>
                       <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
                           <wsp:Policy>
                               <sp:WssUsernameToken10/>
                           </wsp:Policy>
                       </sp:UsernameToken>
                   </wsp:Policy>
               </sp:SignedSupportingTokens>
               
               
               <sp:Wss11 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <wsp:Policy>
                       <sp:MustSupportRefKeyIdentifier/>
                       <sp:MustSupportRefIssuerSerial/>
                       <sp:MustSupportRefThumbprint/>
                       <sp:MustSupportRefEncryptedKey/>
                       
                   </wsp:Policy>
               </sp:Wss11>
               <sp:Trust10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <wsp:Policy>
                       <sp:MustSupportIssuedTokens/>
                       <sp:RequireClientEntropy/>
                       <sp:RequireServerEntropy/>
                   </wsp:Policy>
               </sp:Trust10>
               <sc:KeyStore xmlns:sc="http://schemas.sun.com/2006/03/wss/server" alias="key.acme" location="C:\Program Files\Siemens\DirX Access\Sample Scenario Tomcat\Acme-IdP-FEP\conf\acme.jks" storepass="dirxaccess" type="JKS"/>
               <sc:TrustStore xmlns:sc="http://schemas.sun.com/2006/03/wss/server" location="C:\Program Files\Siemens\DirX Access\Sample Scenario Tomcat\Acme-IdP-FEP\conf\acme.jks" storepass="dirxaccess"/>
               <sc:ValidatorConfiguration xmlns:sc="http://schemas.sun.com/2006/03/wss/server">
                   <sc:Validator classname="com.siemens.dxa.federation.cardspace.idp.DXAUsernamePasswordValidator" name="usernameValidator"/>
                   <sc:Validator classname="com.siemens.dxa.federation.cardspace.idp.DXACertificateValidator" name="certificateValidator"/>
               </sc:ValidatorConfiguration>
               <tc:STSConfiguration xmlns:tc="http://schemas.sun.com/ws/2006/05/trust/server">
                   <tc:Contract>com.siemens.dxa.federation.cardspace.idp.IssueSamlTokenContractImpl</tc:Contract>
                   <tc:ServiceProviders>
                       <tc:ServiceProvider endPoint="default"/>
                   </tc:ServiceProviders>
               </tc:STSConfiguration>
               <wsap10:UsingAddressing/>
               <sp:SignedSupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <wsp:Policy>
                       <sp:UsernameToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
                           <wsp:Policy>
                               <sp:WssUsernameToken10/>
                           </wsp:Policy>
                       </sp:UsernameToken>
                   </wsp:Policy>
               </sp:SignedSupportingTokens>
           </wsp:All>
       </wsp:ExactlyOne>
   </wsp:Policy>
   <wsp:Policy wsu:Id="ISecurityTokenService_IssueToken_Input_policy">
       <wsp:ExactlyOne>
           <wsp:All>
               <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <sp:Body/>
                   <sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
               </sp:SignedParts>
               <sp:EncryptedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <sp:Body/>
               </sp:EncryptedParts>
           </wsp:All>
       </wsp:ExactlyOne>
   </wsp:Policy>
   <wsp:Policy wsu:Id="ISecurityTokenService_IssueToken_Output_policy">
       <wsp:ExactlyOne>
           <wsp:All>
               <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <sp:Body/>
                   <sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
                   <sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
               </sp:SignedParts>
               <sp:EncryptedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
                   <sp:Body/>
               </sp:EncryptedParts>
           </wsp:All>
       </wsp:ExactlyOne>
   </wsp:Policy>
   <wsdl:types>
       <xsd:schema targetNamespace="http://tempuri.org/Imports">
           <xsd:import namespace="http://schemas.message.com/Message"/>
       </xsd:schema>
   </wsdl:types>
   <wsdl:message name="ISecurityTokenService_IssueToken_InputMessage">
       <wsdl:part xmlns:q1="http://schemas.message.com/Message" name="rstMessage" type="q1:MessageBody"/>
   </wsdl:message>
   <wsdl:message name="ISecurityTokenService_IssueToken_OutputMessage">
       <wsdl:part xmlns:q2="http://schemas.message.com/Message" name="IssueTokenResult" type="q2:MessageBody"/>
   </wsdl:message>
   <wsdl:portType name="ISecurityTokenService">
       <wsdl:operation name="IssueToken">
           <wsdl:input message="tns:ISecurityTokenService_IssueToken_InputMessage" wsap10:Action="http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue"/>
           <wsdl:output message="tns:ISecurityTokenService_IssueToken_OutputMessage" wsap10:Action="http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue"/>
       </wsdl:operation>
   </wsdl:portType>
   <wsdl:binding name="ISecurityTokenService_Binding" type="tns:ISecurityTokenService">
       <wsp:PolicyReference URI="#ISecurityTokenService_policy"/>
       <soap12:binding transport="http://schemas.xmlsoap.org/soap/http"/>
       <wsdl:operation name="IssueToken">
           <soap12:operation soapAction="http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue" style="document"/>
           <wsdl:input>
               <wsp:PolicyReference URI="#ISecurityTokenService_IssueToken_Input_policy"/>
               <soap12:body use="literal"/>
           </wsdl:input>
           <wsdl:output>
               <wsp:PolicyReference URI="#ISecurityTokenService_IssueToken_Output_policy"/>
               <soap12:body use="literal"/>
           </wsdl:output>
       </wsdl:operation>
   </wsdl:binding>
   <wsdl:service name="SecurityTokenService">
       <wsdl:port binding="tns:ISecurityTokenService_Binding" name="ISecurityTokenService_Port">
           <soap12:address location="https://my-server.acme.example:9443/dirxaccess-fep-wstrust-sts/sts"/>
           <wsa10:EndpointReference>
               <wsa10:Address>https://my-server.acme.example:9443/dirxaccess-fep-wstrust-sts/sts</wsa10:Address>
               <Identity xmlns="http://schemas.xmlsoap.org/ws/2006/02/addressingidentity">
                   <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
                       <X509Data>
                           <X509Certificate>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</X509Certificate>
                       </X509Data>
                   </KeyInfo>
               </Identity>
           </wsa10:EndpointReference>
       </wsdl:port>
   </wsdl:service>

</wsdl:definitions></mex:MetadataSection><mex:MetadataSection Dialect="http://www.w3.org/2001/XMLSchema"><xs:schema xmlns:tns="http://schemas.message.com/Message" xmlns:xs="http://www.w3.org/2001/XMLSchema" elementFormDefault="qualified" targetNamespace="http://schemas.message.com/Message"> 

   <xs:complexType name="MessageBody">
       <xs:sequence>
           <xs:any maxOccurs="unbounded" minOccurs="0" namespace="##any"/>
       </xs:sequence>
   </xs:complexType>

</xs:schema></mex:MetadataSection></mex:Metadata>

Click here for help populating this chart.

Back To


Retrieved from "http://osis.idcommons.net/wiki/I3:XR3-Siemens_IdP-x-DigitalMe_for_Linux"
Personal tools