diff --git a/src/docbkx/security.xml b/src/docbkx/security.xml index bcf22140..eec3166a 100644 --- a/src/docbkx/security.xml +++ b/src/docbkx/security.xml @@ -106,10 +106,10 @@ Additionally, the security interceptor requires one or moreCallbackHandlers to operate. These handlers are used to retrieve certificates, private keys, validate user credentials, - etc. Spring-WS offers handlers for most common security concerns, e.g. authenticating against a Acegi - authentication manager, signing outgoing messages based on a X509 certificate. The following sections will - indicate what callback handler to use for which security concern. You can set the callback handlers using - the + etc. Spring-WS offers handlers for most common security concerns, e.g. authenticating against a Spring + Security authentication manager, signing outgoing messages based on a X509 certificate. The following + sections will indicate what callback handler to use for which security concern. You can set the callback + handlers using the callbackHandler or callbackHandlers @@ -435,50 +435,34 @@
- AcegiPlainTextPasswordValidationCallbackHandler + SpringPlainTextPasswordValidationCallbackHandler - The - AcegiPlainTextPasswordValidationCallbackHandler - uses the excellent - - Acegi Security Framework - - to - authenticate users. It is beyond the scope of this document to describe Acegi, but suffice it to say - that Acegi is a full-fledged security framework. You can read more about Acegi in the - - Acegi reference - documentation - - - . + The SpringPlainTextPasswordValidationCallbackHandler uses + Spring Security + to authenticate users. It is beyond the scope of this document to describe Spring Security, + but suffice it to say that it is a full-fledged security framework. + You can read more about it in the + Spring Security reference documentation + . - The - AcegiPlainTextPasswordValidationCallbackHandler - requires an Acegi - AuthenticationManager - to operate. It uses this manager to authenticate against a - UsernamePasswordAuthenticationToken - that it creates. If authentication is - successful, the token is stored in the - SecurityContextHolder. You can set the - authentication manager using the - authenticationManager - property: + The SpringPlainTextPasswordValidationCallbackHandler requires + an AuthenticationManager to operate. It uses this manager to + authenticate against a UsernamePasswordAuthenticationToken + that it creates. If authentication is successful, the token is stored in the + SecurityContextHolder. You can set the authentication manager using the + authenticationManagerproperty: - + - + - + @@ -612,26 +596,21 @@
- AcegiDigestPasswordValidationCallbackHandler + SpringDigestPasswordValidationCallbackHandler - The - AcegiDigestPasswordValidationCallbackHandler - requires an Acegi - UserDetailService + The SpringDigestPasswordValidationCallbackHandler + requires an Spring Security UserDetailService to operate. It uses this service to retrieve the password - of the user specified in the token. The digest of the password contained in this details object is - then compared with the digest in the message. If they are equal, the user has successfully - authenticated, and a - UsernamePasswordAuthenticationToken - is stored in the - SecurityContextHolder. You can set the service using the + of the user specified in the token. The digest of the password contained in this details object + is then compared with the digest in the message. If they are equal, the user has successfully + authenticated, and a UsernamePasswordAuthenticationToken + is stored in the SecurityContextHolder. You can set the service using the userDetailsService. Additionally, you can set a - userCache - property, to cache loaded user details. + userCache property, to cache loaded user details. - + @@ -686,7 +665,7 @@ In Spring-WS terms, this means that the - AcegiCertificateValidationCallbackHandler + SpringCertificateValidationCallbackHandler or JaasCertificateValidationCallbackHandler should be preceded by @@ -701,7 +680,7 @@ - + @@ -768,36 +747,31 @@
- AcegiCertificateValidationCallbackHandler + SpringCertificateValidationCallbackHandler - The - AcegiCertificateValidationCallbackHandler - requires an Acegi - AuthenticationManager - to operate. It uses this manager to authenticate against a - X509AuthenticationToken - that it creates. The configured authentication - manager is expected to supply a provider which can handle this token (usually an instance of + The SpringCertificateValidationCallbackHandler + requires an Spring Security AuthenticationManager to operate. It uses + this manager to authenticate against a X509AuthenticationToken + that it creates. The configured authentication manager is expected to supply a provider which + can handle this token (usually an instance of X509AuthenticationProvider). If authentication is succesful, the token is - stored in the - SecurityContextHolder. You can set the authentication manager - using the - authenticationManager + stored in the SecurityContextHolder. You can set the authentication + manager using the authenticationManager property: - + + class="org.springframework.security.providers.ProviderManager"> - + - + @@ -811,14 +785,10 @@ In this case, we are using a custom user details service to obtain authentication details based on the certificate. Refer to the - - Acegi reference - documentation - + + Spring Security reference documentation - for more information about authentication against X509 - certificates. + for more information about authentication against X509 certificates.
@@ -1347,7 +1317,7 @@
Validating Username Token - Spring-WS provides a set of callback handlers to integrate with Acegi Security (and Spring Security). + Spring-WS provides a set of callback handlers to integrate with Spring Security. Additionally, a simple callback handler SimplePasswordValidationCallbackHandler is provided to configure users and passwords with an in-memory @@ -1379,31 +1349,26 @@ ]]>
- AcegiPlainTextPasswordValidationCallbackHandler + SpringPlainTextPasswordValidationCallbackHandler - The - AcegiPlainTextPasswordValidationCallbackHandler - requires an Acegi - AuthenticationManager - to operate. It uses this manager to - authenticate against a + The SpringPlainTextPasswordValidationCallbackHandler requires an Spring + Security AuthenticationManager to operate. It uses this manager + to authenticate against a UsernamePasswordAuthenticationToken - that it - creates. If authentication is successful, the token is stored in the + that it creates. If authentication is successful, the token is stored in the SecurityContextHolder. You can set the - authentication manager using the - authenticationManager + authentication manager using the authenticationManager property: - + - + - + @@ -1414,25 +1379,23 @@ ]]>
- AcegiDigestPasswordValidationCallbackHandler + SpringDigestPasswordValidationCallbackHandler - The - AcegiDigestPasswordValidationCallbackHandler - requires an Acegi + The SpringDigestPasswordValidationCallbackHandler + requires an Spring Security UserDetailService to operate. It uses this service to retrieve the password of the user specified in the token. The digest of the password contained in this details object is then compared with the digest in the message. If they are equal, the user has successfully authenticated, and a UsernamePasswordAuthenticationToken - is - stored in theSecurityContextHolder. You can set the service using the + is stored in theSecurityContextHolder. You can set the service using the userDetailsService. Additionally, you can set a userCache property, to cache loaded user details. - +