Implemented securing Authentication and Session Tokens using

WS-Security.

CASA-auth-token/java/server/Svc/README

@@ -69,6 +69,8 @@ Thhe following is an example svc.settings file:
 	<IAConfigFile>/home/jluciani/jakarta-tomcat-5.0.28/webapps/CasaAuthTokenSvc/WEB-INF/conf/iaRealms.xml</IAConfigFile>
 	<ReconfigureInterval>60</ReconfigureInterval>
 	<startSearchContext>o=novell</startSearchContext>
+	<KeyStoreUser>privKey<KeyStoreUser>
+	<KeyStorePwd>foobar<KeyStorePwd>
 </settings>
 
 Note the following about the sample svc.settings file:
@@ -102,6 +104,12 @@ Note the following about the sample svc.settings file:
   from the root of the tree. This setting or an equivalent setting will be moved
   to the identity abstraction configuration file where it belongs. Once this is done,
   the setting will no longer be recognized within the svc.settings file. 
+
+- The KeyStoreUses setting specifies the user's alias name in the keystore that identifies
+  the private key that is to be used to sign tokens.
+
+- The KeyStorePwd setting specifies the password of the user specified by KeyStoreUser to get
+  the private signing key from the keystore.
  
 CONFIGURING SERVICES TO CONSUME CASA AUTHENTICATION TOKENS