-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On client side I'm chaining two different handlers with "Signature 
NoSerialization" and "UsernameToken". 
I need chaining because I'm trying to use two different user and different 
password callback with the same actor.
The situation is described below.

<requestFlow>
  <handler type="java:org.apache.ws.axis.security.WSDoAllSender">
   <parameter name="actor" value="toServer"/>
   <parameter name="action" value="Signature NoSerialization"/>
   <parameter name="user" value="clientCertIdDsa"/> 
   [...]
  </handler>
  <handler type="java:org.apache.ws.axis.security.WSDoAllSender">
   <parameter name="actor" value="toServer"/>
   <parameter name="action" value="UsernameToken"/>
   <parameter name="user" value="1t3d-34s3-5gsh-65wf-56qs-5hs9-awwc-s4bn"/> 
   [...]
 </handler>
</requestFlow> 

In the wire message the element order into the Security header is inverted

<wsse:UsernameToken>
[...]
<wsse:BinarySecurityToken>
[...]
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
 

And also server works only if actions on the server side descriptor are 
inverted. 
 <parameter name="action" value="Signature UsernameToken"/>

Ciao,
  Ilias

PS.
I could use also two differnt actors, but this needs chaining on server side 
and NoSerialization isn't supported in WsDoAllReceiver :(

- --
/**
 * Reply to: ilias.bartolini(at)studio.unibo.it
 * ICQ# 42797710 - FeSToso n�143 - PGP Key-IDs:0x6A951A45
 * http://www.brainetwork.net/homepage
 * https://www.universibo.unibo.it
 */
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFB3Ybu+CP4pmqVGkURAo7uAJ4ngokJhSD9z3oJEgPgsl6Ro3BKXQCfdBUg
a8NAUIQzKiSYi3tQWlGJBQA=
=nKPh
-----END PGP SIGNATURE-----

Reply via email to