Hello,

I would like to have a RST without the username token in the soap header,
using the wst:Base instead, in the RST.

If I engage rampart, I've to put something in the security header, right?

BTW, this is the policy for the service:
<wsp:Policy Id="urn:uuid:1CD756D0A145FF8A6B1198787786622">
&#8722;
        <wsp:ExactlyOne>
<wsp:All/>
</wsp:ExactlyOne>
</wsp:Policy>

That contains nothing.

If I add an empty Security header by hand, I got a strange exception, looking
for a jsp page.

If I try to put this header:
<soapenv:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>
      <wsse:UsernameToken>
        <wsse:Username>max</wsse:Username>
        <wsse:Password>max</wsse:Password>
      </wsse:UsernameToken>
    </wsse:Security>
<wsa:To>https://localhost/SpiritXUAServer/services/IdentityProviderIBMLike</wsa:To>
    <wsa:MessageID>urn:uuid:ED1644D814BBAE48231198788276862</wsa:MessageID>
<wsa:Action>http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue</wsa:Action>
  </soapenv:Header>


I get this: (really strange, since no policy and no mustUnderstand=true in the header)


21:44:39,835 ERROR [STDERR] org.apache.axis2.AxisFault: Must Understand check failed for header http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd : Security 21:44:39,837 ERROR [STDERR] at org.apache.axis2.engine.AxisEngine.checkMustUnderstand(AxisEngine.java:86) 21:44:39,839 ERROR [STDERR] at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:135) 21:44:39,839 ERROR [STDERR] at org.apache.axis2.description.OutInAxisOperationClient.handleResponse(OutInAxisOperation.java:336) 21:44:39,841 ERROR [STDERR] at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:389) 21:44:39,842 ERROR [STDERR] at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:211) 21:44:39,842 ERROR [STDERR] at org.apache.axis2.client.OperationClient.execute(OperationClient.java:163) 21:44:39,843 ERROR [STDERR] at org.apache.axis2.client.ServiceClient.sendReceive(ServiceClient.java:528) 21:44:39,843 ERROR [STDERR] at com.spirit.XUA.utils.MySTSClient.requestSecurityTokenWithSSL(MySTSClient.java:219) 21:44:39,844 ERROR [STDERR] at com.spirit.XUA.utils.XUAAssertions.getAuthenticatedViaWSTrustAsPlain(XUAAssertions.java:553) 21:44:39,844 ERROR [STDERR] at com.tmed.report.xds.io.XUAHandler.askNewAssertion(XUAHandler.java:90)
21:44:39,845 ERROR [STDERR]     at com.tmed.report.Login.doGet(Login.java:83)
21:44:39,845 ERROR [STDERR]     at com.tmed.report.Login.doPost(Login.java:128)
21:44:39,845 ERROR [STDERR] at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) 21:44:39,846 ERROR [STDERR] at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) 21:44:39,846 ERROR [STDERR] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) 21:44:39,847 ERROR [STDERR] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) 21:44:39,847 ERROR [STDERR] at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96) 21:44:39,848 ERROR [STDERR] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) 21:44:39,850 ERROR [STDERR] at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) 21:44:39,850 ERROR [STDERR] at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230) 21:44:39,851 ERROR [STDERR] at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175) 21:44:39,852 ERROR [STDERR] at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:179) 21:44:39,852 ERROR [STDERR] at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84) 21:44:39,853 ERROR [STDERR] at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) 21:44:39,853 ERROR [STDERR] at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) 21:44:39,854 ERROR [STDERR] at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157) 21:44:39,855 ERROR [STDERR] at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) 21:44:39,855 ERROR [STDERR] at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262) 21:44:39,855 ERROR [STDERR] at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844) 21:44:39,856 ERROR [STDERR] at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583) 21:44:39,857 ERROR [STDERR] at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
21:44:39,857 ERROR [STDERR]     at java.lang.Thread.run(Thread.java:613)


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


Reply via email to