This article describes how to use an EJB proxy to handle the WS-Security specification level interoperability issue.
本文说明了如何使用EJB代理来处理WS - Security规范级别互操作性问题。
The solution is to make sure that the user specified under the RunAs role matches the required security specification of the service.
解决方案是确保指定的用户以RunAs角色匹配所需服务的安全规范。
Migrating your applications and (if necessary) your middleware to J2EE 1.4 is the preferred way to avoid the WS-Security specification level interoperability problem.
将应用程序和（如果有必要）中间件迁移到J2EE 1.4是避免WS-Security规范级别互操作性问题的首选方法。
You now have specified that the UsernameToken to be passed in the SOAP header according to the WS-Security specification is to be used as the authentication token by the service provider.
根据WS - Security规范，您现在已经将在SOAP头部传递的UsernameToken指定为供服务提供者使用的身份验证令牌。
You need to do this because the WS-Security specification allows attaching multiple tokens for authentication, thus additional metadata is required to identify which is the primary security token.
这样做的原因是因为WS - Security规范允许为身份验证附加多个令牌，这样就需要更多的元数据来识别哪一个是主安全令牌。
The WS-Security specification defines the core facilities for protecting the integrity and confidentiality of a message, as well as mechanisms for associating security-related claims with a message.
WS - Security规范定义了用于保护消息的完整性和机密性的核心功能程序，以及用于把与安全性相关的声明和消息关联起来的机制。
The next version of the UDDI Specification planned for mid-2002 will focus on security, advanced data management, and further internationalization.
UDDI规范的下一版本计划在2002年年中推出，重点在安全性、高级数据管理以及进一步的国际化上。
SCAP is a NIST specification for expressing and manipulating security data in standardized ways.
SCAP是一种使用标准化方法表达和操作安全数据的NIST规范。
Third -- and where the JDBC specification does not have any corresponding focus -- is security management for enabling secure access to back-end systems.
第三个是支持后端系统的安全访问的安全性管理，在这点上，JDBC规范并没有任何对应点。
See the specification for specific syntax and semantics of the different annotations, but the same transactional and security features all have annotations.
请参见规范，了解不同标注的具体语法和语义，但相同事务和安全功能都有标注。
The specification also defines a set of system-level contracts between the J2EE application server and the RAs for connection, transaction, and security management.
该规范也在J2EE应用程序服务器及RA之间定义了一套系统级的合同，用于连接、事务处理及安全管理。
Due to limited processing power and memory, however, a domain-based security manager is not yet available in the MIDP 1.0 specification.
但是，由于处理能力和内存有限，MIDP 1.0规范中还不可以使用基于域的安全性管理器。
The specification also discusses JMS message types, security concerns and message exchange patterns.
该规范同时还讨论了JMS消息类型，安全考虑以及消息交换模式。
The current MIDP 1.0 specification does not provide enough in the way of security APIs.
在安全性API方面，当前的MIDP 1.0规范没有提供足够的支持。
Security is not directly addressed in the Atom API specification, but one would expect an implementation to support HTTP-based authentication for the various Atom API operations.
AtomAPI规范中没有直接处理安全问题，但预计会出现用于各种Atom API操作的支持基于HTTP验证的实现。
Then, the EJB proxy application communicates with the Web services provider application using Web services and the WS-Security version 1.0 specification.
然后，EJB代理应用程序将使用Web服务及WS-Security V1.0 规范与 Web 服务提供者应用程序通信。
Note that the client application could be a J2EE 1.3 servlet, J2EE 1.3 portlet, or any other client application that cannot communicate using the WS-Security version 1.0 specification.
请注意，客户机应用程序可以为无法使用WS - Security V1.0规范通信的J2EE 1.3Servlet、J2EE 1.3Portlet或任何客户机应用程序。
This implementation of WS-Security was based on the OASIS working draft 13 specification.
WS - Security的这个实现基于OASIS工作草案13规范。
Programmatic security implemented in Geronimo works in the same way as described in the J2EE 1.4 specification.
在Geronimo中实现的程序性安全的工作方式与J2EE 1.4规范中描述的一样。
For example, the assertion could declare that the message be encrypted; the actual definition of this assertion would be in the WS-Security Policy domain specification.
例如，断言可以声明消息是被加密的。这种断言的实际定义将包含在WS - Security策略域规范中。
With that said, OAuth can be implemented in a very secure manner and the specification includes a good amount of security considerations to take into account when working with sensitive resources.
也就是说，OAuth可以以非常安全的方式实现，并且在处理敏感资源时，规范本身提供了很多安全方面的考虑。
In the current JCA 1.5 specification, and in the Geronimo implementation, inbound connections do not interact with the container's security subsystem.
在目前的JCA 1.5规范以及Geronimo实现中，入站连接不与容器的安全子系统交互。
This is a security token service (STS), as defined in the OASIS WS-Trust specification.
这是一个OASISWS - Trust规范中定义的安全令牌服务(STS)。
In the connection factory that is created, navigate to Custom Properties and enter the security level and the DE-Light gateway specification in the gatewaySpec field.
在已创建好的连接工厂中，转到CustomProperties并在gatewayspec字段中输入安全级别及DE - Light网关规范。
The XML Key management Specification (XKMS) allows for easy management of the security infrastructure, while the security Assertion Markup Language (SAML) makes trust portable.
xml密钥管理规范(XML Key Management Specification,XKMS)使得安全性基础设施易于管理，而安全性断言标记语言(Security Assertion Markup Language,SAML)则使信任可以移植。
Publish-Subscribe Notification for Web services: This specification sets the goals and requirements for the WS-Notification family of documents and includes security consideration.
Publish -SubscribeNotificationforWebservices：此规范为WS - Notification文档系列设置目标和需求并包括安全注意事项。
A quick look at the OpenSocial 2.0 specification indicates that a list of standards and technologies from the OAuth 2.0 security standard to ActivityStreams are included in the specification.
快速浏览一下OpenSocial 2.0规范就会发现，从OAuth 2.0安全标准到ActivityStreams等一系列的标准和技术都包含在了这一规范中。
The security Assertion Markup Language specification (SAML) is an XML based framework that aims to solve problems associated with exchanging security information in an SOA architecture.
SecurityAssertionMarkupLanguage规范(SAML)是一个基于XML的框架，旨在解决SOA体系结构中与交换安全信息相关的问题。
Transport Layer Security (TLS) is the standard for security at the transport layer, while at the SOAP message level, WS-Security is the specification of choice.
传输层安全性（Transport LayerSecurity，TLS）是传输层的安全标准，而在SOAP消息级别，WS-Security 是首选的安全规范。
The EJB specification forbids using JNI, as it compromises the stability, security, and scalability of the application server.
EJB的技术规定禁止使用JNI，因为它损害了应用服务器的稳定性、安全性和可伸缩性。
应用推荐