WSS username password token tutorial

[pi4630]

Hi,

is there any tutorial that explains WSS (no BASIC auth) username password token with AS 7.1.1.?

I've checked the one contained in the AS 7.1.1. (advanced) documentation guide, i.e. WS-Security - JBoss Web Services - Project Documentation Editor,  but I stumble upon two points:

1. The contract first approach. Is this a must? For quick tests, I'd like to make a couple of annotations, some deployment descriptors,  and see my SLSB in action;
2. The WSDL contract makes use of a "SecurityService_schema1.xsd". Nothing is said on how this schema is made.

Thanks in advance,

pi4630