Comments on: Open All The Way Up http://blog.superpat.com/2006/11/13/open-all-the-way-up/ Pat Patterson on Identity Management, Federation and Single Malt Scotch Wed, 08 Sep 2010 22:31:38 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Pat http://blog.superpat.com/2006/11/13/open-all-the-way-up/comment-page-1/#comment-278 Pat Thu, 16 Nov 2006 17:28:02 +0000 http://blog.superpat.com/2006/11/13/open-all-the-way-up/#comment-278 <p> Hi Michael, </p> <p> Well - there's a difference between what is 'supported' and what works, perhaps with a bit of tweaking. Traditionally, Access Manager has been supported on Sun's App Server and Web Server, plus IBM WebSphere and BEA WebLogic, since those have been the containers for which customers are demanding support. </p> <p> With OpenSSO, I'm not sure we've ever explicitly listed 'supported' containers. You can pretty much just drop the WAR file into anything - as <a href="http://blogs.sun.com/superpat/entry/opensso_on_tomcat_in_ubuntu" rel="nofollow">I've blogged before</a>, Tomcat is pretty widely used, despite it never having been a supported platform for Access Manager. </p> <p> Bottom line - give JBoss a try and see what happens. Let us know at <a href="mailto:users@opensso.dev.java.net" rel="nofollow">users@opensso.dev.java.net</a> whether it works or not. </p> <p> I'll respond by email for the DoD/CREATE stuff. Thanks for taking the time to comment. </p> Hi Michael,

Well – there’s a difference between what is ‘supported’ and what works, perhaps with a bit of tweaking. Traditionally, Access Manager has been supported on Sun’s App Server and Web Server, plus IBM WebSphere and BEA WebLogic, since those have been the containers for which customers are demanding support.

With OpenSSO, I’m not sure we’ve ever explicitly listed ‘supported’ containers. You can pretty much just drop the WAR file into anything – as I’ve blogged before, Tomcat is pretty widely used, despite it never having been a supported platform for Access Manager.

Bottom line – give JBoss a try and see what happens. Let us know at users@opensso.dev.java.net whether it works or not.

I’ll respond by email for the DoD/CREATE stuff. Thanks for taking the time to comment.

]]> By: Michael http://blog.superpat.com/2006/11/13/open-all-the-way-up/comment-page-1/#comment-277 Michael Thu, 16 Nov 2006 16:23:13 +0000 http://blog.superpat.com/2006/11/13/open-all-the-way-up/#comment-277 JBoss is not listed as a supported container... I suppose since Tomcat is a component there of there is no reason for it not two be supported, right? Familiar with DoD’s Service-Oriented Architecture (SOA) Foundation aka NCES, and the past Horizontal Fusion efforts? Would there possibly be any interest in your specific group inside of Sun entering into a Cooperative Research and Technology Enhancement (CREATE) agreement with Joint Forces Command centered around the OpenSSO efforts you describe in the development of SAML-based security for a multi-national SOA? I'm just a scummy DoD contractor. So, I can't speak for the government, but in investigating the landscape I had an expectation for what has come to pass -- the virtual open sourcing of Sun's entire stack was a logical line of progression. My thought was to propose a CREATE with specific enphasis on the further development of SAML-support in OpenSSO to the powers that be as a possible option as we have had talks with Sun in terms of SOA related CREATE related agreements in the most general of terms, just not in the specific areas as OpenSSO as I ws not fully involved at the time. Also, how well can one leverage Access Manager or the follow on OpenSSO from outside of NetBeans, say in Eclipse? Not to be insulting, but as a software engineer myself, I would prefer to allow our team the freedom to float between whatever tool suits their own personal needs. I take it NetBeans is just populating deployment descriptors and what not for the web service and client-- The reason for my comment elsewhere in your blog. Contact me at my provided email address.... JBoss is not listed as a supported container… I suppose since Tomcat is a component there of there is no reason for it not two be supported, right?
Familiar with DoD’s Service-Oriented Architecture (SOA) Foundation aka NCES, and the past Horizontal Fusion efforts?
Would there possibly be any interest in your specific group inside of Sun entering into a Cooperative Research and Technology Enhancement (CREATE) agreement with Joint Forces Command centered around the OpenSSO efforts you describe in the development of SAML-based security for a multi-national SOA? I’m just a scummy DoD contractor. So, I can’t speak for the government, but in investigating the landscape I had an expectation for what has come to pass — the virtual open sourcing of Sun’s entire stack was a logical line of progression. My thought was to propose a CREATE with specific enphasis on the further development of SAML-support in OpenSSO to the powers that be as a possible option as we have had talks with Sun in terms of SOA related CREATE related agreements in the most general of terms, just not in the specific areas as OpenSSO as I ws not fully involved at the time.
Also, how well can one leverage Access Manager or the follow on OpenSSO from outside of NetBeans, say in Eclipse? Not to be insulting, but as a software engineer myself, I would prefer to allow our team the freedom to float between whatever tool suits their own personal needs. I take it NetBeans is just populating deployment descriptors and what not for the web service and client– The reason for my comment elsewhere in your blog.
Contact me at my provided email address….

]]> By: Superpat http://blog.superpat.com/2006/11/13/open-all-the-way-up/comment-page-1/#comment-276 Superpat Wed, 15 Nov 2006 16:27:21 +0000 http://blog.superpat.com/2006/11/13/open-all-the-way-up/#comment-276 <p> Hi Michael, </p> <p> Correct. Yesterday <a href="http://blogs.sun.com/superpat/entry/announcing_open_federation" rel="nofollow">we announced Open Federation</a> - the long awaited open source federation layer for OpenSSO. Looking at <a href="https://opensso.dev.java.net/public/about/faqcenter/faqopenfederation.html#standards" rel="nofollow">Q2 of the FAQ</a>, it sounds like the functionality you are looking for is WS-I BSP. We'll be adding this in the next few months. It already exists in AM 7.1, so it's a straightforward task to port it across. </p> Hi Michael,

Correct. Yesterday we announced Open Federation – the long awaited open source federation layer for OpenSSO. Looking at Q2 of the FAQ, it sounds like the functionality you are looking for is WS-I BSP. We’ll be adding this in the next few months. It already exists in AM 7.1, so it’s a straightforward task to port it across.

]]> By: Michael http://blog.superpat.com/2006/11/13/open-all-the-way-up/comment-page-1/#comment-275 Michael Wed, 15 Nov 2006 15:35:56 +0000 http://blog.superpat.com/2006/11/13/open-all-the-way-up/#comment-275 Yes, cool. But my understanding is OpenSSO doesn't yet support SAML-based authentication between a web service client and a web service provider, but may by the end of the year. Is this correct? Yes, cool. But my understanding is OpenSSO doesn’t yet support SAML-based authentication between a web service client and a web service provider, but may by the end of the year. Is this correct?

]]>