Per the OASIS WS-Security 2004 spec, the value of the "Type" field
must be a URI, not a QName. This is one of the changes that occurred
between older versions of WS-Security and the final OASIS standards.
If you want to be spec-compliant, you must use
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText";.

Anne

On 7/11/05, Mfenetre Mfenetre <[EMAIL PROTECTED]> wrote:
> Hi all,
> 
> I'm using WSS4J and it works well. However, when I use a
> UsernameToken, the value of the field "Type" for the Password is
> "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText";.
> 
> I would like to use a value equal to "wsse:PasswordText". Is it
> possible to do that ? (like specifying a specific value for Password
> Type instead of "PasswordText" in the client_deploy.wsdd ? So far I've
> tried "wsse:PasswordText" but it doesn't work...)
> 
> Thanks for your replies.
> Regards,
> 
> Alexis.
>

Reply via email to