WSIT Features of Metro 1.1.1 FCS Status Notes

Last Modified : $Date: 2008/04/29 21:44:00 $ by $Author: jitu $
Updated: ??, 2008

Introduction

This document provides a list of

for each major Metro subsystem.

This document covers the following topics:



Bugs fixed in releases after Metro 1.1.1

Updated: April 15, 2008

Metro 1.1.2 is the next release after Metro 1.1.1 It includes fixes for bugs that were reported after the Metro 1.1.1 release. Please see the

for more information of the bugs that were fixed.



High Availability, JDK support, GF version, etc.

Updated:??, 2008



JAX-WS Status

Updated: Apr 29, 2008

New in this release

Fixed in this release



Metadata Exchange Status

Updated: Apr 17, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented

For this WSIT release, server-side support of MEX is only officially supported in scenarios involving WS-Trust STS (Secure Token Service) metadata retrieval. This restriction might addressed in a future release.

Only the WS-Transfer/Get request is supported not the WS-MEX/GetMetadata request. This is interoperable with MEX-enabled WCF services.



MTOM Status

Updated: ??, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented



Data Binding Status

Updated: ??, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented



Reliable Messaging Status

Updated: April 16, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented



Security Status

Updated: 29th April, 2008

New in this release

Fixed in this release


Known Issues

Interoperability Feature

Status

Remark

Issue 676 : WSIT should go through JSR 196 providers at service side for Plain-JAXWS/ Provider based WebServices.
Scheduled for Metro 1.2 release

Issue 710 :  <sp:IncludeTimestamp> is a binding level assertion in WS-SecurityPolicy. This prevents a clean approach to having some secure and some non-secure methods in a WebService
Scheduled for Metro 1.2 release. 

Issue 715:  Security Failures in AIX when using TripleDES Algorithm
Scheduled for Metro 1.2 release. 
Issue 728: SAML HOK Scenario ArrayIndexOutOfBoundsException Scheduled for Metro 1.2 release.
Issue 732:  JCAPS Service using Transport Security Mechanisms causes 
WSS1601: Security Requirements not met
Scheduled for Metro 1.2 release.
Issue 733: NPE when Multiple SAML Assertions present in Message
Scheduled for Metro 1.2 release.
Issue 735:  A NPE happen when adding additional SOAP headers
Scheduled for Metro 1.2 release.

"" URI Reference not supported in Signature

Need to support empty URI Reference in Signature Issue#269

Will be supported in a future release

includeToken Policy ONCE

WSSecurityPolicy:TokenInclusion: includeToken Policy ONCE is Only Supported for Kerberos Tokens in this release.  Support for other Tokens will be supported in a future release.

Issue#19 on IssueTracker

Will be supported in a future release

Returning of SOAP fault : Negative tests with Mismatched client and server policies

SOAP Fault not returned: Different Algorithm suites used by Service Consumer/Provider.

Issue#22 on IssueTracker

Will be supported in a future release.

EncryptedParts in SupportingTokens

EncryptedParts in SupportingTokens assertion in message policy does not work
Issue #12 on IssueTracker

Need a clarification from the WS-SecurityPolicy Specification as to whether Encrypted Parts inside SupportingTokens makes sense.

SecurityPolicy:sp:AlgorithmSuite/wsp:Policy/
sp:SoapNormalization10  assertion

SecurityPolicy:sp:AlgorithmSuite/wsp:Policy/sp:SoapNormalization10 assertion causes deploy failure Issue#16

Feature Not Implemented

SecurityPolicy: sp:AlgorithmSuite/wsp:Policy/sp:XPath10 assertion

SecurityPolicy: sp:AlgorithmSuite/wsp:Policy/sp:XPath10 assertion causes deploy failure Issue#15

Feature Not Implemented

SecurityPolicy: sp:AlgorithmSuite/wsp:Policy/sp:XPathFilter20 assertion

SecurityPolicy: sp:AlgorithmSuite/wsp:Policy/sp:XPathFilter20 assertion causes deploy failure Issue#14

Feature Not Implemented  

ProtectToken with X509Token and RequireDerivedKeys
The client is uanble to generate the request soap message and the exception thrown is:
javax.xml.crypto.URIReferenceException: 
No elements exist with Id/WsuId: 3
Issue#76
Will be fixed in a future release. Note that WCF RTM does not support sp:ProtectTokens assertion
SamlToken as InitiatorToken in AsymmetricBinding, with ProtectTokens fails with :: Could not find Reference #5 under Signature with ID1
WSDL has AsymmetricBinding (X509Token as Initiator and RecipientToken),SamlToken as SignedSupportingToken.Request/Response messages are signed and encrypted. The client side has a SamlCallbackHandler meant to populate an SenderVouches saml assertion into the request message. The test fails on the server side with the following exception trace :
Could not find Reference
#ff63e9e3-248d-4f77-8802-5326d58da1a9 under Signature with ID1
Issue#206
Will be fixed in a future release. Note that WCF RTM does not support sp:ProtectTokens assertion

What is Not Implemented

The following features have  not been implemented:

WS-SecurityPolicy
Specification
Section

Assertion

Remark

5.3.1

RequiredElements

Will be supported in a future release

6.1.1

TokenInclusion

 includeTokenPolicy=Once  is NOT supported,  Always, AlwaysToRecipient and Never are supported (refer known Issue# 19)

6.3.1

UsernameToken

Only <sp:UsernameToken10>  is supported in this release, <sp:UsernameToken11>  and Password Derived Keys will be supported in a future release

6.3.3

X509Token

Only <sp:WssX509V3Token10> is supported in this release.

The rest  (<sp:WssX509V3Token11>, <sp:WssX509Pkcs7Token10>, <sp:WssX509Pkcs7Token11>,<sp:WssX509PkiPathV1Token10>, <sp:WssX509PkiPathV1Token11>, <sp:WssX509V1Token10>, <sp:WssX509V1Token11>) will be supported in a future release based on real-world usecases and customer preferences.

6.3.9

RelToken

No Plan for supporting this token.

6.3.6

SecurityContextToken

No Plan for supporting this token

6.3.5

SpnegoContextToken

Will be supported in a future release

7.1/8.1

AlgorithmSuite

All algorithms are supported  with the exception of  algorithms under  Asymmetric KeyWrap.

sp:AlgorithmSuite/wsp:Policy/sp:XPathFilter20 assertion causes deploy failure (refer known Issue#14)
sp:AlgorithmSuite/wsp:Policy/sp:XPath10 assertion causes deploy failure (refer known Issue #15)
sp:AlgorithmSuite/wsp:Policy/sp:SoapNormalization10 assertion causes deploy failure(refer known Issue#16)

7.5

Token Protection

Token Protection in cases where includeTokenPolicy="Never" or in cases where the Token is not in the Message, is not handled correctly yet (refer known Issue# 76, 206). Note that WCF RTM does not support sp:ProtectTokens assertion

9.2

SignedSupportingTokens

 The runtime will not be able to sign the supporting token in cases where the Token is not in the Message (such as for includeTokenPolicy=Never/Once).

9.4

SignedEndorsingSupportingTokens

The runtime will not be able to sign the supporting token in cases where the Token is not in the Message (such as for includeTokenPolicy=Never/Once).

10.1

WSS10 Assertion

Everything is supported with the Exception of  <sp:MustSupportRefEmbeddedToken>.

10.2

WSS11 Assertion

Everything is supported with the Exception of  <sp:MustSupportRefEmbeddedToken>.

11.1

Trust10 Assertion

MustSupportClientChallenge, MustSupportServerChallenge are not supported in this release.



Secure Conversation Status

Updated: 29 April, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented



Trust Status

Updated: 29 April, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented



Coordination/Atomic Transactions Status

Updated: ??, 2008

New in this release

Fixed in this release

Known Issues

Feature

Status/Workaround

"WSTXServices" is listed as a deployed web service in the NetBeans 5.5.1 SJSAS admin interface (Runtime -> SJSAS -> Applications -> Web Applications)

This isn't an issue, per se, just an FYI so users are not confused when they see the WS-TX system app listed in the NB UI. It is supposed to be hidden (and it is in NB 6). Users can attempt to undeploy the app, but the AS prevents this operation from happening.

issue 717 - Ejb web service deployment fails on AIX.

Seeing this error during deployment of some TX SQE functional tests only on AIX:
Could not invoke defineClass!;_RequestID=fe0ba2aa-af5d-474f-88bd-fe8085434899;|EJB5090: Exception in creating EJB container [java.lang.RuntimeException: Could not invoke defineClass!]|#]

issue 718 - TX interop S->M on AIX, Error on HTTP request: 500 Internal Error.

Seeing this error during TX interop S->M on AIX :
Error on HTTP request: 500 Internal Error.

Also seeing related problems with TX interop M->S using 1.0.1 on AIX fails, see details here issue 719.

There appears to be some other issue besides security certificate serial number mismatch between two machines for which mutual trust is being established, as certificates have been verified by RI lead as correct. Further investigation required.

Issue 723 There is a regression causing that TX context does not get initialized in certain cases.The PolicyMap that is parsed second time (from the WSDL) does not contain the same, correct data. There is a problem in marshalling Policy data into WSDL during WSDL creation

What is Not Implemented



NetBeans WSIT Module Status

Updated: ??, 2008

New in this release

Fixed in this release

Known Issues

Feature

Status/Workaround

To enable Microsoft WCF <-> Java interoperability, an 'action=operationName' attribute needs to be specified on each operation. The sample code should look like this:
    @WebMethod(action=myOperation)
    public String myOperation() {
        return "";
    )
 
WSIT and Identity modules If you have Enterprise Pack 5.5.1 Beta installed on top of your NetBeans 5.5.1 installation, you may not be able to invoke WSIT Configuration dialog on web service clients. There is exception thrown instead, which is an error in Identity module suite from Enterprise Pack. To enable WSIT configuration on clients, go to Tools->Module Manager, and disable or uninstall all Identity modules. For more information please see issue 657.
Online Help Online help is missing for the Advanced Configuration node for the client side WSIT Web Sevices Attributes Editor. When you click the Help button, the About WSIT page comes up and has help for the subsections (Transport, Certificates, User Authentication, and Secure Token Service. But there is no help for the Advanced Configuration node, which has options for RM. See NetBeans issue 99180
Package rename refactoring does not modify WSIT configuration file name When renaming a package that contains a web service class, the WSIT config file is not renamed accordingly. As a work-around, you can manually change the name of the configuration file under the Web Pages->WEB-INF node to wsit.<newpkgname>.xml. See NetBeans issue 105287

What is Not Implemented



Web Services Addressing Status

Updated: ??, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented



Policy Status

Updated: Apr 17, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented



Security Policy Status

Updated: 29th April, 2008

New in this release

Fixed in this release

Known Issues

Interoperability Feature

Status/Workaround

SupportingTokens assertion

Issue number 12

EncryptedParts in SupportingTokens assertion in message policy does not work

WSSecurity Policy deploy Issue number 14,15,16

The following security policy assertions cause a deploy failure:

- SecurityPolicy:sp:AlgorithmSuite/wsp:Policy/sp:SoapNormalization10

- SecurityPolicy: sp:AlgorithmSuite/wsp:Policy/sp:XPath10

- SecurityPolicy: sp:AlgorithmSuite/wsp:Policy/sp:XPathFilter20

What is Not Implemented



SOAP/TCP Status

Updated: ??, 2008

New in this release

Fixed in this release

Known Issues

What is Not Implemented