Hi Colm,
thanks for your response. I finally got a maybe valuable information
from the distributor of this service.
They found the following information in their logs:
--cut
Message authentication failed.
Service:
https://www.fhdsales.dealerconnection.com/DMSInterface/V4/ServiceCustomer.svc
Action: http://tempuri.org/IServiceCustomer/InsertCustomer
ClientIdentity:
ActivityId: <null>
MessageSecurityException: The Encrypted Header and the Security Header
'mustUnderstand' attribute did not match. Encrypted Header: False.
Security Header: True.
--cut
I already saw that CXF did not specify the mustUnderstand attribute for
the EncryptedHeader as it the .NET Client does but because of lack of
knowledge I thought this is normal or just a redundant information.
Is there a way to enable this attribute for the missing parts of the
message?
Thanks and Regards
Martin
Am 10.11.2016 um 12:20 schrieb Colm O hEigeartaigh:
Hi Martin,
The .NET + CXF messages look structurally the same, so there's no obvious
hint there. I'd suggest two things:
a) Try to create a CXF-based test-case using your WSDL (it should be easy
enough to adapt one of the existing ws-security system tests). See if the
client request works to the service, or whether the service can reproduce
the .NET error when validating the request.
b) If you have access to the .NET service, try tweaking the security policy
a bit. If you remove the header from EncryptedParts does it still fail? If
you remove the Derived Keys does it still fail etc? That might help to
narrow down the problem.
Colm.
On Tue, Nov 8, 2016 at 10:32 AM, Martin Fernau <martin.fer...@fernausoft.de>
wrote:
As I'm still stuck in this I'm going to post WSDL and examples in hope
someone can point me to the right direction.
The problematic method is "InsertCustomer". Other methods work! I guess
its related to the additional header for the InserCustomer method which I
add as follows:
-----cut
SOAPFactory sf = SOAPFactory.newInstance();
SOAPElement s_ffeHeader = sf.createElement(new QName("http://tempuri.org/
","FfeHeader"));
SOAPElement s_ffeDealerCode = sf.createElement(new QName("
http://schemas.datacontract.org/2004/07/DMSInterface.Model",
"ffeDealerCode"));
s_ffeDealerCode.addTextNode("dealerCode");
s_ffeHeader.addChildElement(s_ffeDealerCode);
SoapHeader tokenHeader = new SoapHeader(new
QName("http://tempuri.org/","FfeHeader"),
s_ffeHeader);
headersList.add(tokenHeader);
client.getRequestContext().put(Header.HEADER_LIST, headersList);
-----cut
I'll post three files after these lines:
[1] The original WSDL-File
[2] The working request from .NET Client
[3] The request from CXF-Client which fails with "An error occurred when
verifying security for the message"
-----cut [1]-----
<wsdl:definitions name="ServiceCustomer" targetNamespace="http://tempur
i.org/"
xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:xsd="
http://www.w3.org/2001/XMLSchema"
xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-2004
01-wss-wssecurity-utility-1.0.xsd"
xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/" xmlns:tns="
http://tempuri.org/"
xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing"
xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex"
xmlns:wsap="http://schemas.xmlsoap.org/ws/2004/08/addressing/policy"
xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl"
xmlns:msc="http://schemas.microsoft.com/ws/2005/12/wsdl/contract"
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:wsa10="http://www.w3.org/2005/08/addressing"
xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata">
<wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SymmetricBinding xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:ProtectionToken>
<wsp:Policy>
<sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/
securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:RequireDerivedKeys/>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:ProtectionToken>
<sp:AlgorithmSuite>
<wsp:Policy>
<sp:Basic128Rsa15/>
</wsp:Policy>
</sp:AlgorithmSuite>
<sp:Layout>
<wsp:Policy>
<sp:Strict/>
</wsp:Policy>
</sp:Layout>
<sp:IncludeTimestamp/>
<sp:OnlySignEntireHeadersAndBody/>
</wsp:Policy>
</sp:SymmetricBinding>
<sp:EndorsingSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/
securitypolicy/IncludeToken/AlwaysToRecipient">
<wsp:Policy>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:EndorsingSupportingTokens>
<sp:Wss11 xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:MustSupportRefThumbprint/>
<sp:MustSupportRefEncryptedKey/>
<sp:RequireSignatureConfirmation/>
</wsp:Policy>
</sp:Wss11>
<sp:Trust10 xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:MustSupportIssuedTokens/>
<sp:RequireClientEntropy/>
<sp:RequireServerEntropy/>
</wsp:Policy>
</sp:Trust10>
<sp:TransportBinding xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:TransportToken>
<wsp:Policy>
<sp:HttpsToken
RequireClientCertificate="false"/>
</wsp:Policy>
</sp:TransportToken>
<sp:AlgorithmSuite>
<wsp:Policy>
<sp:Basic128/>
</wsp:Policy>
</sp:AlgorithmSuite>
<sp:Layout>
<wsp:Policy>
<sp:Strict/>
</wsp:Policy>
</sp:Layout>
<sp:IncludeTimestamp/>
</wsp:Policy>
</sp:TransportBinding>
<wsaw:UsingAddressing/>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_InsertCustomer_Input_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="FfeHeader" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="FfeHeader" Namespace="
http://tempuri.org/"/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_InsertCustomer_
output_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_InsertCustomer_ValidationErrorFault_Fault">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetOffersByCustomerID_Input_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetOffersByCustomerID_output_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_GetOfferByOfferID_
Input_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_GetOfferByOfferID_
output_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractsByCustomerID_Input_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractsByCustomerID_output_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractByContractID_Input_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractByContractID_output_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetStockcarByOrderRef_Input_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
</sp:SignedParts>
<sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:EncryptedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetStockcarByOrderRef_output_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
<sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2
005/08/addressing"/>
<sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
<sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
--
FERNAUSOFT GmbH
Gartenstraße 42 - 37269 Eschwege
Telefon (0 56 51) 95 99-0
Telefax (0 56 51) 95 99-90
eMail martin.fer...@fernausoft.de
Internet http://www.fernausoft.de
Handelsregister Eschwege, HRB 1585
Geschäftsführer: Axel Fernau, Ulrich Fernau, Martin Fernau
Steuernummer 025 233 00041
USt-ID-Nr. DE 178 554 622