Hi all,

There is a incompatibility issue between the rampart trunk version and Axis2
1.3 binary distribution. In this distribution, the Security phase is only
enabled on the Inflow, Outflow, and InFaultFlow phase orders. Rampart trunk
version adds a handler to the Security phase on OutFaultFlow, as can be seen
in the module.xml from rampart-SNAPSHOT.mar:

<OutFaultFlow>
     <handler name="PolicyBasedSecurityOutHandler" class="
org.apache.rampart.handler.RampartSender">
         <order phase="Security" phaseLast="true" />
     </handler>
</OutFaultFlow>

This causes a PhaseException [1] in the Axis2 engine. In order to fix this,
one has to manually add the Security phase to the OutFaultFlow in
axis2.xml($AXIS2_HOME/WEB-INF/conf). I'm not part of the Axis2 mailing
lists, but
perhaps it would be interesting to let them know about it, and enable the
Security phase by default in OutFaultFlow.

Thanks and regards,
Joana

[1] - org.apache.axis2.phaseresolver.PhaseException: Did not find the
desired phase 'Security' while deploying handler
'PolicyBasedSecurityOutHandler'.

-- 
Student Intern
SAP Research - Security & Trust
SAP Labs France

805 Avenue du Dr. Maurice Donat
06250 Mougins
T +33/492286319
F +33/492286201
Personal Homepage: http://www.inf.ufrgs.br/~jmftrindade

Reply via email to