On Wed, 2008-05-28 at 14:15 +0530, Manjula Peiris wrote: > Shankar, > > I have tested Rampart/C with a soap action(without addressing) and > putting the Security phase even before Transport phase and it worked. So > I think what is happening in this case is that actual dispatching does > not happen from soap action phase dispatcher. not happen from soap action based dispatcher.
> > > -Manjula. > > > On Wed, 2008-05-28 at 12:21 +0530, Uthaiyashankar wrote: > > Hi, > > > > Currently rampart in-handler is called in "PreDispatch" phase in inflow. > > Due to that, if a message is having only soap action (no operation is > > specified in url or no wsa:action is given, so only possible way of > > dispatching is based on soap action) and message is secured, security > > cannot be verified. This is because, rampart needs operation to be > > resolved before verifying the security of the message. If the message is > > having only soap action, then when message comes to rampart, still the > > operation is not resolved. > > > > Can somebody confirm soap action based dispatching happening on > > "PreDispatch"? If so, can we introduce another phase "Security" between > > "PreDispatch" and "Dispatch" and install rampart-in-handler to > > "Security" phase? will it cause any problem? Any reason why > > rampart-in-handler is installed in "PreDispatch" phase rather than > > another phase? (I tried it and it worked) > > > > Comments are welcome. > > > > Regards, > > Shankar. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
