diff --git a/src/docbkx/security.xml b/src/docbkx/security.xml
index bcf22140..eec3166a 100644
--- a/src/docbkx/security.xml
+++ b/src/docbkx/security.xml
@@ -106,10 +106,10 @@
Additionally, the security interceptor requires one or moreCallbackHandlers to
operate. These handlers are used to retrieve certificates, private keys, validate user credentials,
- etc. Spring-WS offers handlers for most common security concerns, e.g. authenticating against a Acegi
- authentication manager, signing outgoing messages based on a X509 certificate. The following sections will
- indicate what callback handler to use for which security concern. You can set the callback handlers using
- the
+ etc. Spring-WS offers handlers for most common security concerns, e.g. authenticating against a Spring
+ Security authentication manager, signing outgoing messages based on a X509 certificate. The following
+ sections will indicate what callback handler to use for which security concern. You can set the callback
+ handlers using the
callbackHandler
or
callbackHandlers
@@ -435,50 +435,34 @@
- AcegiPlainTextPasswordValidationCallbackHandler
+ SpringPlainTextPasswordValidationCallbackHandler
- The
- AcegiPlainTextPasswordValidationCallbackHandler
- uses the excellent
-
- Acegi Security Framework
-
- to
- authenticate users. It is beyond the scope of this document to describe Acegi, but suffice it to say
- that Acegi is a full-fledged security framework. You can read more about Acegi in the
-
- Acegi reference
- documentation
-
-
- .
+ The SpringPlainTextPasswordValidationCallbackHandler uses
+ Spring Security
+ to authenticate users. It is beyond the scope of this document to describe Spring Security,
+ but suffice it to say that it is a full-fledged security framework.
+ You can read more about it in the
+ Spring Security reference documentation
+ .
- The
- AcegiPlainTextPasswordValidationCallbackHandler
- requires an Acegi
- AuthenticationManager
- to operate. It uses this manager to authenticate against a
- UsernamePasswordAuthenticationToken
- that it creates. If authentication is
- successful, the token is stored in the
- SecurityContextHolder. You can set the
- authentication manager using the
- authenticationManager
- property:
+ The SpringPlainTextPasswordValidationCallbackHandler requires
+ an AuthenticationManager to operate. It uses this manager to
+ authenticate against a UsernamePasswordAuthenticationToken
+ that it creates. If authentication is successful, the token is stored in the
+ SecurityContextHolder. You can set the authentication manager using the
+ authenticationManagerproperty:
-
+
-
+
-
+
@@ -612,26 +596,21 @@
- AcegiDigestPasswordValidationCallbackHandler
+ SpringDigestPasswordValidationCallbackHandler
- The
- AcegiDigestPasswordValidationCallbackHandler
- requires an Acegi
- UserDetailService
+ The SpringDigestPasswordValidationCallbackHandler
+ requires an Spring Security UserDetailService
to operate. It uses this service to retrieve the password
- of the user specified in the token. The digest of the password contained in this details object is
- then compared with the digest in the message. If they are equal, the user has successfully
- authenticated, and a
- UsernamePasswordAuthenticationToken
- is stored in the
- SecurityContextHolder. You can set the service using the
+ of the user specified in the token. The digest of the password contained in this details object
+ is then compared with the digest in the message. If they are equal, the user has successfully
+ authenticated, and a UsernamePasswordAuthenticationToken
+ is stored in the SecurityContextHolder. You can set the service using the
userDetailsService. Additionally, you can set a
- userCache
- property, to cache loaded user details.
+ userCache property, to cache loaded user details.
-
+
@@ -686,7 +665,7 @@
In Spring-WS terms, this means that the
- AcegiCertificateValidationCallbackHandler
+ SpringCertificateValidationCallbackHandler
or
JaasCertificateValidationCallbackHandler
should be preceded by
@@ -701,7 +680,7 @@
-
+
@@ -768,36 +747,31 @@
- AcegiCertificateValidationCallbackHandler
+ SpringCertificateValidationCallbackHandler
- The
- AcegiCertificateValidationCallbackHandler
- requires an Acegi
- AuthenticationManager
- to operate. It uses this manager to authenticate against a
- X509AuthenticationToken
- that it creates. The configured authentication
- manager is expected to supply a provider which can handle this token (usually an instance of
+ The SpringCertificateValidationCallbackHandler
+ requires an Spring Security AuthenticationManager to operate. It uses
+ this manager to authenticate against a X509AuthenticationToken
+ that it creates. The configured authentication manager is expected to supply a provider which
+ can handle this token (usually an instance of
X509AuthenticationProvider). If authentication is succesful, the token is
- stored in the
- SecurityContextHolder. You can set the authentication manager
- using the
- authenticationManager
+ stored in the SecurityContextHolder. You can set the authentication
+ manager using the authenticationManager
property:
-
+
+ class="org.springframework.security.providers.ProviderManager">
-
+
-
+
@@ -811,14 +785,10 @@
In this case, we are using a custom user details service to obtain authentication details based on
the certificate. Refer to the
-
- Acegi reference
- documentation
-
+
+ Spring Security reference documentation
- for more information about authentication against X509
- certificates.
+ for more information about authentication against X509 certificates.
@@ -1347,7 +1317,7 @@
Validating Username Token
- Spring-WS provides a set of callback handlers to integrate with Acegi Security (and Spring Security).
+ Spring-WS provides a set of callback handlers to integrate with Spring Security.
Additionally, a simple callback handler
SimplePasswordValidationCallbackHandler
is provided to configure users and passwords with an in-memory
@@ -1379,31 +1349,26 @@
]]>
- AcegiPlainTextPasswordValidationCallbackHandler
+ SpringPlainTextPasswordValidationCallbackHandler
- The
- AcegiPlainTextPasswordValidationCallbackHandler
- requires an Acegi
- AuthenticationManager
- to operate. It uses this manager to
- authenticate against a
+ The SpringPlainTextPasswordValidationCallbackHandler requires an Spring
+ Security AuthenticationManager to operate. It uses this manager
+ to authenticate against a
UsernamePasswordAuthenticationToken
- that it
- creates. If authentication is successful, the token is stored in the
+ that it creates. If authentication is successful, the token is stored in the
SecurityContextHolder. You can set the
- authentication manager using the
- authenticationManager
+ authentication manager using the authenticationManager
property:
-
+
-
+
-
+
@@ -1414,25 +1379,23 @@
]]>
- AcegiDigestPasswordValidationCallbackHandler
+ SpringDigestPasswordValidationCallbackHandler
- The
- AcegiDigestPasswordValidationCallbackHandler
- requires an Acegi
+ The SpringDigestPasswordValidationCallbackHandler
+ requires an Spring Security
UserDetailService
to operate. It uses this service to retrieve the
password of the user specified in the token. The digest of the password contained in this
details object is then compared with the digest in the message. If they are equal, the user has
successfully authenticated, and a
UsernamePasswordAuthenticationToken
- is
- stored in theSecurityContextHolder. You can set the service using the
+ is stored in theSecurityContextHolder. You can set the service using the
userDetailsService. Additionally, you can set a
userCache
property, to cache loaded user details.
-
+