Skip to content

Commit 4aa22ae

Browse files
NicoPeters.NPNicoPeters.NP
NicoPeters.NP
authored and
NicoPeters.NP
committed
added Single Sign On via SAML support to trunk. Once activated in the backends web.xml, you can authenticate a user by sending a SAML token to /backend/poem/saml .
As a prerequisite, you have to copy the jars in the folder jce into the oryx server's jre folder. git-svn-id: http://oryx-editor.googlecode.com/svn/trunk@1699 d672c736-503d-0410-a38a-9366997c882b
1 parent 8fdbdae commit 4aa22ae

29 files changed

+538
-0
lines changed

‎jce/COPYRIGHT.html

+67
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,67 @@
1+
<html>
2+
<head><title>Properietary Rights Notice</title></head>
3+
<body bgcolor="white">
4+
5+
6+
English:
7+
<p>
8+
9+
Copyright © 2006 Sun Microsystems, Inc., 4150 Network Circle, Santa
10+
Clara, California 95054, U.S.A. All rights reserved.U.S.
11+
<br>
12+
SUN PROPRIETARY/CONFIDENTIAL.
13+
<p>
14+
15+
Government Rights - Commercial software. Government users are subject
16+
to the Sun Microsystems, Inc. standard license agreement and
17+
applicable provisions of the FAR and its supplements. Use is subject
18+
to license terms.
19+
<p>
20+
21+
This distribution may include materials developed by third
22+
parties.Sun, Sun Microsystems, the Sun logo, Java, Jini, Solaris, and
23+
Java SE are trademarks or registered trademarks of Sun Microsystems,
24+
Inc. in the U.S. and other countries. This product is covered and
25+
controlled by U.S. Export Control laws and may be subject to the
26+
export or import laws in other countries. Nuclear, missile, chemical
27+
biological weapons or nuclear maritime end uses or end users, whether
28+
direct or indirect, are strictly prohibited.
29+
<p>
30+
31+
Export or reexport to countries subject to U.S. embargo or to entities
32+
identified on U.S. export exclusion lists, including, but not limited
33+
to, the denied persons and specially designated nationals lists is
34+
strictly prohibited.
35+
36+
<hr>
37+
38+
French:
39+
<p>
40+
41+
Copyright © 2006 Sun Microsystems, Inc., 4150 Network Circle, Santa
42+
Clara, California 95054, Etats-Unis. Tous droits réservés.
43+
L'utilisation est soumise aux termes du contrat de licence.
44+
45+
<p>
46+
Cette distribution peut comprendre des composants développés par des
47+
tierces parties.Sun, Sun Microsystems, le logo Sun, Java, Jini,
48+
Solaris et Java SE sont des marques de fabrique ou des marques déposées
49+
de Sun Microsystems, Inc. aux Etats-Unis et dans d'autres pays.Ce
50+
produit est soumis à la législation américaine en matière de contrôle
51+
des exportations et peut être soumis à la règlementation en vigueur
52+
dans d'autres pays dans le domaine des exportations et
53+
importations. Les utilisations, ou utilisateurs finaux, pour des armes
54+
nucléaires,des missiles, des armes biologiques et chimiques ou du
55+
nucléaire maritime, directement ou indirectement, sont strictement
56+
interdites.
57+
<p>
58+
59+
Les exportations ou réexportations vers les pays sous embargo
60+
américain, ou vers des entités figurant sur les listes d'exclusion
61+
d'exportation américaines, y compris, mais de manière non exhaustive,
62+
la liste de personnes qui font objet d'un ordre de ne pas participer,
63+
d'une façon directe ou indirecte, aux exportations des produits ou des
64+
services qui sont régis par la législation américaine en matière de
65+
contrôle des exportations et la liste de ressortissants spécifiquement
66+
désignés, sont rigoureusement interdites.
67+

‎jce/README.txt

+239
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,239 @@
1+
ATTENTION! Installing this is only necessary, if you want to use
2+
single-sign-on via SAML in Oryx!!!
3+
4+
5+
6+
Unlimited Strength Java(TM) Cryptography Extension Policy Files
7+
for the Java(TM) Platform, Standard Edition Development Kit, v6
8+
9+
README
10+
11+
----------------------------------------------------------------------
12+
CONTENTS
13+
----------------------------------------------------------------------
14+
15+
o Introduction
16+
o Copyright
17+
o Understanding The Export/Import Issues
18+
o Where To Find Documentation
19+
o Installation
20+
o Questions, Support, Reporting Bugs, and Feedback
21+
22+
23+
----------------------------------------------------------------------
24+
Introduction
25+
----------------------------------------------------------------------
26+
27+
Thank you for downloading the Unlimited Strength Java(TM) Cryptography
28+
Extension (JCE) Policy Files for the Java(TM) Platform, Standard
29+
Edition Development Kit, v6.
30+
31+
Due to import control restrictions, the version of JCE policy files that
32+
are bundled in the JDK(TM) 6 environment allow "strong" but limited
33+
cryptography to be used. This download bundle (the one including this
34+
README file) provides "unlimited strength" policy files which contain
35+
no restrictions on cryptographic strengths.
36+
37+
Please note that this download file does NOT contain any encryption
38+
functionality since such functionality is supported in Sun's JDK 6.
39+
Thus, this installation applies only to Sun's JDK 6, and assumes
40+
that the JDK 6 is already installed.
41+
42+
43+
----------------------------------------------------------------------
44+
Copyright
45+
----------------------------------------------------------------------
46+
47+
The copyright notice governing this product's use can be found in
48+
COPYRIGHT.html. This file is normally found in the same directory
49+
as this README.txt file.
50+
51+
52+
----------------------------------------------------------------------
53+
Understanding The Export/Import Issues
54+
----------------------------------------------------------------------
55+
56+
JCE for JDK 6 has been through the U.S. export review process.
57+
The JCE framework, along with the SunJCE provider that comes
58+
standard with it, is exportable.
59+
60+
The JCE architecture allows flexible cryptographic strength
61+
to be configured via jurisdiction policy files. Due to the
62+
import restrictions of some countries, the jurisdiction policy
63+
files distributed with the JDK 6 software have built-in
64+
restrictions on available cryptographic strength. The jurisdiction
65+
policy files in this download bundle (the bundle including this
66+
README file) contain no restrictions on cryptographic strengths.
67+
This is appropriate for most countries. Framework vendors can
68+
create download bundles that include jurisdiction policy files
69+
that specify cryptographic restrictions appropriate for countries
70+
whose governments mandate restrictions. Users in those countries
71+
can download an appropriate bundle, and the JCE framework will
72+
enforce the specified restrictions.
73+
74+
You are advised to consult your export/import control counsel or
75+
attorney to determine the exact requirements.
76+
77+
78+
----------------------------------------------------------------------
79+
Where To Find Documentation
80+
----------------------------------------------------------------------
81+
82+
The following documents will be of interest to you:
83+
84+
o The Java(TM) Cryptography Architecture (JCA) Reference Guide at:
85+
86+
http://java.sun.com/javase/6/docs/technotes/guides/security/crypto/CryptoSpec.html
87+
88+
o The Java Security web site has more information about JCE,
89+
plus additional information about the Java Security Model.
90+
Please see:
91+
92+
http://java.sun.com/products/jce/
93+
http://java.sun.com/security/
94+
95+
96+
----------------------------------------------------------------------
97+
Installation
98+
----------------------------------------------------------------------
99+
100+
Notes:
101+
102+
o Unix (Solaris/Linux) and Win32 use different pathname separators, so
103+
please use the appropriate one ("\", "/") for your
104+
environment.
105+
106+
o <java-home> refers to the directory where the Java SE Runtime
107+
Environment (JRE) was installed. It is determined based on whether
108+
you are running JCE on a JRE with or without the JDK installed. The
109+
JDK contains the JRE, but at a different level in the file
110+
hierarchy. For example, if the JDK is installed in
111+
/home/user1/jdk1.6.0 on Unix or in C:\jdk1.6.0 on Win32, then
112+
<java-home> is
113+
114+
/home/user1/jdk1.6.0/jre [Unix]
115+
C:\jdk1.6.0\jre [Win32]
116+
117+
If on the other hand the JRE is installed in /home/user1/jre1.6.0
118+
on Unix or in C:\jre1.6.0 on Win32, and the JDK is not
119+
installed, then <java-home> is
120+
121+
/home/user1/jre1.6.0 [Unix]
122+
C:\jre1.6.0 [Win32]
123+
124+
o On Win32, for each JDK installation, there may be an additional
125+
JRE installed under the "Program Files" directory. Please make
126+
sure that you install the unlimited strength policy JAR files
127+
for all JREs that you plan to use.
128+
129+
130+
Here are the installation instruction:
131+
132+
1) Download the unlimited strength JCE policy files.
133+
134+
2) Uncompress and extract the downloaded file.
135+
136+
This will create a subdirectory called jce.
137+
This directory contains the following files:
138+
139+
README.txt This file
140+
COPYRIGHT.html Copyright information
141+
local_policy.jar Unlimited strength local policy file
142+
US_export_policy.jar Unlimited strength US export policy file
143+
144+
3) Install the unlimited strength policy JAR files.
145+
146+
To utilize the encryption/decryption functionalities of
147+
the JCE framework without any limitation, first make a copy of
148+
the original JCE policy files (US_export_policy.jar and
149+
local_policy.jar in the standard place for JCE
150+
jurisdiction policy JAR files) in case you later decide
151+
to revert to these "strong" versions. Then replace the strong
152+
policy files with the unlimited strength versions extracted in the
153+
previous step.
154+
155+
The standard place for JCE jurisdiction policy JAR files is:
156+
157+
<java-home>/lib/security [Unix]
158+
<java-home>\lib\security [Win32]
159+
160+
161+
-----------------------------------------------------------------------
162+
Questions, Support, Reporting Bugs, and Feedback
163+
-----------------------------------------------------------------------
164+
165+
Questions
166+
---------
167+
168+
For miscellaneous questions about JCE usage and deployment, we
169+
encourage you to read:
170+
171+
o Information on the JCE web site
172+
173+
http://java.sun.com/products/jce
174+
175+
o The Java Security Q&A Archives
176+
177+
http://archives.java.sun.com/archives/java-security.html
178+
179+
o The Java Developer Connection(SM) forums. These discussion forums
180+
allow you to tap into the experience of other users, ask
181+
questions, or offer tips to others on a variety of Java-related
182+
topics including JCE. There is no fee to participate.
183+
184+
http://forum.java.sun.com/
185+
186+
187+
Support
188+
-------
189+
190+
For more extensive JCE questions or deployment issues, please contact
191+
our Technical Support staff at:
192+
193+
http://developers.sun.com/prodtech/support/
194+
195+
Please be aware that we may be barred from offering technical support
196+
specifically regarding encryption implementations of the JCE APIs to
197+
people outside the U.S. or Canada, according to U.S. regulations.
198+
199+
200+
Reporting Bugs
201+
--------------
202+
203+
To report bugs with sample code or request a feature, please see:
204+
205+
http://java.sun.com/cgi-bin/bugreport.cgi
206+
207+
Bug reports with test cases are highly appreciated!
208+
209+
210+
Feedback
211+
--------
212+
213+
Please e-mail general comments about JCE to:
214+
215+
[email protected]
216+
217+
The above mailing list is not a subscription list or a support
218+
mechanism. It is simply a one-way channel that you can use to
219+
send comments to the Java Standard Edition security team.
220+
Please include the keyword "JAVASEC" in the Subject of your
221+
email so it can be distinguished from spam.
222+
223+
Though we value your input, before sending your feedback please review
224+
our pages of Frequently Asked Questions, available from the JCE web
225+
site:
226+
227+
http://java.sun.com/products/jce
228+
229+
and search the Java Security Q&A Archives:
230+
231+
http://archives.java.sun.com/archives/java-security.html
232+
233+
Please note that due to the volume of messages we receive, we
234+
may not be able to respond to every individual message.
235+
236+
For other comments/suggestions concerning the web sites please
237+
use the feedback form at:
238+
239+
http://java.sun.com/feedback/index.html

‎jce/US_export_policy.jar

2.41 KB
Binary file not shown.

‎jce/local_policy.jar

2.42 KB
Binary file not shown.

‎poem-jvm/etc/web.xml

+35
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,41 @@
66

77
<display-name>PoEM</display-name>
88

9+
<!-- Filter for SAML Single-Sign On Support -->
10+
<!--<filter>
11+
<filter-name>
12+
JICFilter
13+
</filter-name>
14+
<filter-class>
15+
de.fraunhofer.fokus.jic.filter.JICFilter
16+
</filter-class>
17+
<init-param>
18+
<param-name>
19+
request_param_name
20+
</param-name>
21+
<param-value>
22+
xmltoken
23+
</param-value>
24+
</init-param>
25+
<init-param>
26+
<param-name>
27+
userid_request_attr
28+
</param-name>
29+
<param-value>
30+
userdata
31+
</param-value>
32+
</init-param>
33+
</filter>
34+
35+
<filter-mapping>
36+
<filter-name>
37+
JICFilter
38+
</filter-name>
39+
<url-pattern>
40+
/poem/saml
41+
</url-pattern>
42+
</filter-mapping>-->
43+
944
<servlet>
1045
<display-name>Oryx Dispatcher</display-name>
1146
<servlet-name>Dispatcher</servlet-name>

‎poem-jvm/lib/bcprov-ext-jdk15-1.40.jar

1.53 MB
Binary file not shown.

‎poem-jvm/lib/commons-codec-1.3.jar

45.6 KB
Binary file not shown.

‎poem-jvm/lib/commons-collections-3.1.jar

546 KB
Binary file not shown.

‎poem-jvm/lib/commons-httpclient-3.1.jar

298 KB
Binary file not shown.

‎poem-jvm/lib/commons-lang-2.1.jar

203 KB
Binary file not shown.

‎poem-jvm/lib/jargs-1.0.jar

11.1 KB
Binary file not shown.

‎poem-jvm/lib/jcl-over-slf4j-1.5.5.jar

16.4 KB
Binary file not shown.

‎poem-jvm/lib/jic-framework-2.0.0.jar

21.5 KB
Binary file not shown.

‎poem-jvm/lib/joda-time-1.5.2.jar

519 KB
Binary file not shown.

‎poem-jvm/lib/log4j-over-slf4j-1.5.5.jar

9.44 KB
Binary file not shown.

‎poem-jvm/lib/not-yet-commons-ssl-0.3.9.jar

254 KB
Binary file not shown.

‎poem-jvm/lib/opensaml-2.2.2.jar

1.19 MB
Binary file not shown.

‎poem-jvm/lib/openws-1.2.1.jar

115 KB
Binary file not shown.

‎poem-jvm/lib/resolver-2.9.1.jar

82.1 KB
Binary file not shown.

‎poem-jvm/lib/serializer-2.9.1.jar

272 KB
Binary file not shown.

‎poem-jvm/lib/slf4j-api-1.5.2.jar

17 KB
Binary file not shown.

‎poem-jvm/lib/slf4j-jdk14-1.5.2.jar

8.44 KB
Binary file not shown.

‎poem-jvm/lib/velocity-1.5.jar

383 KB
Binary file not shown.

‎poem-jvm/lib/xalan-2.7.1.jar

3.03 MB
Binary file not shown.

‎poem-jvm/lib/xercesImpl-2.9.1.jar

1.17 MB
Binary file not shown.

‎poem-jvm/lib/xml-apis-2.9.1.jar

190 KB
Binary file not shown.

‎poem-jvm/lib/xmlsec-1.4.2.jar

434 KB
Binary file not shown.

‎poem-jvm/lib/xmltooling-1.1.1.jar

549 KB
Binary file not shown.

0 commit comments

Comments
 (0)