[
https://issues.apache.org/jira/browse/RAMPART-333?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15317293#comment-15317293
]
Shuo Pan commented on RAMPART-333:
----------------------------------
Hi Deepu,
Luckily I came across your post. I'm using the exact axis2 1.5.1 and rampart
1.5.1 and have the exact the same issue as yours. I updated the module.xml
just as descried and traced to the same code block in WSDoAllReceiver.java.
Because the headerBlock is not set as processed, I still got the error "Must
Understand check failed". How was the issue finally resolved?
Thanks,
Shuo
> Must Understand check failed for header
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> : Security
> ------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RAMPART-333
> URL: https://issues.apache.org/jira/browse/RAMPART-333
> Project: Rampart
> Issue Type: Question
> Components: rampart-core
> Affects Versions: 1.5.1
> Environment: Windows Xp
> Reporter: Deepu Janardhanan
> Labels: security
> Fix For: 1.5.1
>
> Attachments: axis2.xml, module.xml, policy.xml
>
>
> On receiving the fault response with security header, axis2(version 1.5.1)
> is showing the error "Must Understand check failed for header
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> : Security"
> I have added SecurityInHandler in the <InFaultFlow> tag in module.xml in the
> rampart.mar file (rampart version is 1.5.1)
> The <InFaultFlow> tag in the module.xml will looks like this
> <InFaultFlow>
> <handler name="PolicyBasedSecurityInHandler"
> class="org.apache.rampart.handler.RampartReceiver">
> <order phase="Security" phaseFirst="true"/>
> </handler>
> <handler name="SecurityInHandler"
> class="org.apache.rampart.handler.WSDoAllReceiver">
> <order phase="Security"/>
> </handler>
> <handler name="PostDispatchVerificationHandler"
> class="org.apache.rampart.handler.PostDispatchVerificationHandler">
> <order phase="Dispatch" phaseLast="true"/>
> </handler>
> </InFaultFlow>
> But still this error in security is coming.
> On checking the WSDoAllReceiver.java file in
> rampart-src-1.5.1\modules\rampart-core\src\main\java\org\apache\rampart\handler
> It is found that in the method processBasic(...){
> ...........
> .....
> // Do not process faults
> SOAPConstants soapConstants = WSSecurityUtil.getSOAPConstants(doc
> .getDocumentElement());
> if (WSSecurityUtil.findElement(doc.getDocumentElement(), "Fault",
> soapConstants.getEnvelopeURI()) != null) {
> return;
> }
> ...........
> ...........
> }
> It is not processing if fault is seen.
> Is this a bug?
> If no, how do i read the fault response with security header?
> Please tell how to resolve this issue.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
