Re: Rampart 1.4 to consume a WCF-Policy webservice

Sat, 27 Dec 2008 17:13:55 -0800 

Hi Nandana,

Thanks for your answer, I've changed the file policy.xml (see attachment),
but I 've the following error:

org.apache.axis2.AxisFault: Error in obtaining a token
    at
org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:70)
    at org.apache.axis2.engine.Phase.invoke(Phase.java:317)
    at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:264)
    at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:429)
    at
org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:401)
    at
org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:228)
    at
org.apache.axis2.client.OperationClient.execute(OperationClient.java:163)
    at
com.publigroupe.common.radio.ratecard.RateServiceStub.GetRegion(RateServiceStub.java:2626)
    at Client1.main(Client1.java:56)
Caused by: org.apache.rampart.RampartException: Error in obtaining a token
    at org.apache.rampart.util.RampartUtil.getToken(RampartUtil.java:657)
    at
org.apache.rampart.util.RampartUtil.getSecConvToken(RampartUtil.java:540)
    at
org.apache.rampart.builder.SymmetricBindingBuilder.initializeTokens(SymmetricBindingBuilder.java:872)
    at
org.apache.rampart.builder.SymmetricBindingBuilder.build(SymmetricBindingBuilder.java:83)
    at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:144)
    at
org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:64)
    ... 8 more
Caused by: java.lang.NullPointerException
    at
org.apache.rampart.builder.SymmetricBindingBuilder.initializeTokens(SymmetricBindingBuilder.java:883)
    at
org.apache.rampart.builder.SymmetricBindingBuilder.build(SymmetricBindingBuilder.java:83)
    at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:144)
    at
org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:64)
    at org.apache.axis2.engine.Phase.invoke(Phase.java:317)
    at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:264)
    at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:429)
    at
org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:401)
    at
org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:228)
    at
org.apache.axis2.client.OperationClient.execute(OperationClient.java:163)
    at
org.apache.axis2.client.ServiceClient.sendReceive(ServiceClient.java:548)
    at
org.apache.rahas.client.STSClient.requestSecurityToken(STSClient.java:134)
    at org.apache.rampart.util.RampartUtil.getToken(RampartUtil.java:644)
    ... 13 more

I think that this policy.xml file is not well created, could you please help
me to know if the file policy.xml or policy2.xml is the better.

Thanks and best regards
Nadine

<?xml version="1.0" encoding="UTF-8"?>

<wsp:Policy wsu:Id="WSHttpBinding_IRateService_policy"
	xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
	xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";
	xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl";
	xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>


		<wsp:ExactlyOne>
			<wsp:All>
				<sp:SymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<wsp:Policy>
						<sp:ProtectionToken>
							<wsp:Policy>
								<sp:SecureConversationToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient";>
									<wsp:Policy>
										<sp:RequireDerivedKeys/>
										<sp:BootstrapPolicy>
											<wsp:Policy>
												<sp:SignedParts>
													<sp:Body/>
													<sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
												</sp:SignedParts>
												<sp:EncryptedParts>
													<sp:Body/>
												</sp:EncryptedParts>
												<sp:SymmetricBinding>
													<wsp:Policy>
														<sp:ProtectionToken>
															<wsp:Policy>
																<sp:SpnegoContextToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient";>
																	<wsp:Policy>
																		<sp:RequireDerivedKeys/>
																	</wsp:Policy>
																</sp:SpnegoContextToken>
															</wsp:Policy>
														</sp:ProtectionToken>
														<sp:AlgorithmSuite>
															<wsp:Policy>
																<sp:Basic256/>
															</wsp:Policy>
														</sp:AlgorithmSuite>
														<sp:Layout>
															<wsp:Policy>
																<sp:Strict/>
															</wsp:Policy>
														</sp:Layout>
														<sp:IncludeTimestamp/>
														<sp:EncryptSignature/>
														<sp:OnlySignEntireHeadersAndBody/>
													</wsp:Policy>
												</sp:SymmetricBinding>
												<sp:Wss11>
													<wsp:Policy>
														<sp:MustSupportRefKeyIdentifier/>
														<sp:MustSupportRefIssuerSerial/>
														<sp:MustSupportRefThumbprint/>
														<sp:MustSupportRefEncryptedKey/>
													</wsp:Policy>
												</sp:Wss11>
												<sp:Trust10>
													<wsp:Policy>
														<sp:MustSupportIssuedTokens/>
														<sp:RequireClientEntropy/>
														<sp:RequireServerEntropy/>
													</wsp:Policy>
												</sp:Trust10>
											</wsp:Policy>
										</sp:BootstrapPolicy>
									</wsp:Policy>
								</sp:SecureConversationToken>
							</wsp:Policy>
						</sp:ProtectionToken>
						<sp:AlgorithmSuite>
							<wsp:Policy>
								<sp:Basic256/>
							</wsp:Policy>
						</sp:AlgorithmSuite>
						<sp:Layout>
							<wsp:Policy>
								<sp:Strict/>
							</wsp:Policy>
						</sp:Layout>
						<sp:IncludeTimestamp/>
						<sp:EncryptSignature/>
						<sp:OnlySignEntireHeadersAndBody/>
					</wsp:Policy>
				</sp:SymmetricBinding>
				<sp:Wss11 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<wsp:Policy>
						<sp:MustSupportRefKeyIdentifier/>
						<sp:MustSupportRefIssuerSerial/>
						<sp:MustSupportRefThumbprint/>
						<sp:MustSupportRefEncryptedKey/>
					</wsp:Policy>
				</sp:Wss11>
				<sp:Trust10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<wsp:Policy>
						<sp:MustSupportIssuedTokens/>
						<sp:RequireClientEntropy/>
						<sp:RequireServerEntropy/>
					</wsp:Policy>
				</sp:Trust10>
				<wsaw:UsingAddressing xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl"/>
					<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy";> 
				<ramp:user>alice</ramp:user>
				<ramp:encryptionUser>bob</ramp:encryptionUser>
				<ramp:passwordCallbackClass>com.publigroupe.common.radio.ratecard.PWCBHandler</ramp:passwordCallbackClass>
		
				<ramp:signatureCrypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">keys/interop2.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:signatureCrypto>
				<ramp:encryptionCypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">keys/interop2.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:encryptionCypto>
				</ramp:RampartConfig>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	

	

<?xml version="1.0" encoding="UTF-8"?>

<wsp:Policy wsu:Id=""
	xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
	xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";
	xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl";
	xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>

  <wsp:Policy wsu:Id="WSHttpBinding_IRateService_policy">
		<wsp:ExactlyOne>
			<wsp:All>
				<sp:SymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<wsp:Policy>
						<sp:ProtectionToken>
							<wsp:Policy>
								<sp:SecureConversationToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient";>
									<wsp:Policy>
										<sp:RequireDerivedKeys/>
										<sp:BootstrapPolicy>
											<wsp:Policy>
												<sp:SignedParts>
													<sp:Body/>
													<sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
													<sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
												</sp:SignedParts>
												<sp:EncryptedParts>
													<sp:Body/>
												</sp:EncryptedParts>
												<sp:SymmetricBinding>
													<wsp:Policy>
														<sp:ProtectionToken>
															<wsp:Policy>
																<sp:SpnegoContextToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient";>
																	<wsp:Policy>
																		<sp:RequireDerivedKeys/>
																	</wsp:Policy>
																</sp:SpnegoContextToken>
															</wsp:Policy>
														</sp:ProtectionToken>
														<sp:AlgorithmSuite>
															<wsp:Policy>
																<sp:Basic256/>
															</wsp:Policy>
														</sp:AlgorithmSuite>
														<sp:Layout>
															<wsp:Policy>
																<sp:Strict/>
															</wsp:Policy>
														</sp:Layout>
														<sp:IncludeTimestamp/>
														<sp:EncryptSignature/>
														<sp:OnlySignEntireHeadersAndBody/>
													</wsp:Policy>
												</sp:SymmetricBinding>
												<sp:Wss11>
													<wsp:Policy>
														<sp:MustSupportRefKeyIdentifier/>
														<sp:MustSupportRefIssuerSerial/>
														<sp:MustSupportRefThumbprint/>
														<sp:MustSupportRefEncryptedKey/>
													</wsp:Policy>
												</sp:Wss11>
												<sp:Trust10>
													<wsp:Policy>
														<sp:MustSupportIssuedTokens/>
														<sp:RequireClientEntropy/>
														<sp:RequireServerEntropy/>
													</wsp:Policy>
												</sp:Trust10>
											</wsp:Policy>
										</sp:BootstrapPolicy>
									</wsp:Policy>
								</sp:SecureConversationToken>
							</wsp:Policy>
						</sp:ProtectionToken>
						<sp:AlgorithmSuite>
							<wsp:Policy>
								<sp:Basic256/>
							</wsp:Policy>
						</sp:AlgorithmSuite>
						<sp:Layout>
							<wsp:Policy>
								<sp:Strict/>
							</wsp:Policy>
						</sp:Layout>
						<sp:IncludeTimestamp/>
						<sp:EncryptSignature/>
						<sp:OnlySignEntireHeadersAndBody/>
					</wsp:Policy>
				</sp:SymmetricBinding>
				<sp:Wss11 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<wsp:Policy>
						<sp:MustSupportRefKeyIdentifier/>
						<sp:MustSupportRefIssuerSerial/>
						<sp:MustSupportRefThumbprint/>
						<sp:MustSupportRefEncryptedKey/>
					</wsp:Policy>
				</sp:Wss11>
				<sp:Trust10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<wsp:Policy>
						<sp:MustSupportIssuedTokens/>
						<sp:RequireClientEntropy/>
						<sp:RequireServerEntropy/>
					</wsp:Policy>
				</sp:Trust10>
				<wsaw:UsingAddressing xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl"/>

			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	
	<wsp:Policy wsu:Id="WSHttpBinding_IRateService_GetRegion_output_policy">
		<wsp:ExactlyOne>
			<wsp:All>
				<sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<sp:Body/>
					<sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
				</sp:SignedParts>
				<sp:EncryptedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<sp:Body/>
				</sp:EncryptedParts>
				<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy";> 
				<ramp:user>alice</ramp:user>
				<ramp:encryptionUser>bob</ramp:encryptionUser>
				<ramp:passwordCallbackClass>com.publigroupe.common.radio.ratecard.PWCBHandler</ramp:passwordCallbackClass>
				
				<ramp:signatureCrypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">keys/interop2.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:signatureCrypto>
				<ramp:encryptionCypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">keys/interop2.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:encryptionCypto>
				
			</ramp:RampartConfig>

			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
		<wsp:Policy wsu:Id="WSHttpBinding_IRateService_GetRegion_Input_policy">
		<wsp:ExactlyOne>
			<wsp:All>
				<sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<sp:Body/>
					<sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
					<sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
				</sp:SignedParts>
								<sp:EncryptedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
					<sp:Body/>
				</sp:EncryptedParts>
				<ramp:RampartConfig xmlns:ramp="http://ws.apache.org/rampart/policy";> 
				<ramp:user>alice</ramp:user>
				<ramp:encryptionUser>bob</ramp:encryptionUser>
				<ramp:passwordCallbackClass>com.publigroupe.common.radio.ratecard.PWCBHandler</ramp:passwordCallbackClass>
				
				<ramp:signatureCrypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">keys/interop2.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:signatureCrypto>
				<ramp:encryptionCypto>
					<ramp:crypto provider="org.apache.ws.security.components.crypto.Merlin">
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.type">jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.file">keys/interop2.jks</ramp:property>
						<ramp:property name="org.apache.ws.security.crypto.merlin.keystore.password">password</ramp:property>
					</ramp:crypto>
				</ramp:encryptionCypto>
				
			</ramp:RampartConfig>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
</wsp:Policy>

Reply via email to