[WSS4J] Current state of callbacks question

I am about ready to start a second iteration of a Web
Services Security project. The first used a pure
apache xml security approach. I have seen lots of
wss4j activity and have some questions.  

I have one web service and many clients. We would like
to store a digital certificate in LDAP for each
client. 
There is also a need for XML Encryption. We would like
to store the info nessecary to decrypt in LDAP too. 

So the issue here is that the Web service itself -
_not_ the web service client, needs to do a callback
to  retrieve the digital certificate and private key
password needed for decryption from LDAP. 

My questions are: 

1) Does wss4j have a callback for server-side password
retrieval from LDAP? Earlier versions only supported
filesystem retrieval. 

2) We would like to store a serialized java object in
LDAP, that contains all the info the web service needs
- the certificate and the password - for decryption
and certificate validation. Does that make sense? 

3) Could we implement a new call that replaces the
Merlin class which implements the Crypto interface to
accomplish this?. We would like to do all this in an
axis handler or wss4j equivalent - intercepting all
requests before the web service. 

So the idea here is that the web service client calls
call.setUsername("name"); to be uniquely identified by
the web service. The digital certificate serial number
is included in the invokation. The client receives the
certficate from LDAP. 

The web service verifies the certificate and decrypts
the message, via a serialized java object. 

Please help. 

iksrazal








__________________________________
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click