Re: ws-policy/ws-security: Remote-Service reports "An error occurred when verifying security for the message"

Thu, 17 Nov 2016 09:01:35 -0800

I was able to fix this by adding my own AbstractSoapInterceptor and manually adding the mustUnderstand-Attribute to the EncryptedHeader Element and set it to "true". 
After this the remote server accept my messages.

Thanks - solved!

Am 16.11.2016 um 15:39 schrieb Martin Fernau:

Hi Colm,
thanks for your response. I finally got a maybe valuable information from the distributor of this service. 
They found the following information in their logs:

--cut
Message authentication failed.
Service: https://www.fhdsales.dealerconnection.com/DMSInterface/V4/ServiceCustomer.svc 
 Action: http://tempuri.org/IServiceCustomer/InsertCustomer
 ClientIdentity:
 ActivityId: <null>
MessageSecurityException: The Encrypted Header and the Security Header 'mustUnderstand' attribute did not match. Encrypted Header: False. Security Header: True. 
--cut
I already saw that CXF did not specify the mustUnderstand attribute for the EncryptedHeader as it the .NET Client does but because of lack of knowledge I thought this is normal or just a redundant information. Is there a way to enable this attribute for the missing parts of the message? 

Thanks and Regards
Martin


Am 10.11.2016 um 12:20 schrieb Colm O hEigeartaigh:

Hi Martin,
The .NET + CXF messages look structurally the same, so there's no obvious 
hint there. I'd suggest two things:
a) Try to create a CXF-based test-case using your WSDL (it should be easy enough to adapt one of the existing ws-security system tests). See if the client request works to the service, or whether the service can reproduce 
the .NET error when validating the request.
b) If you have access to the .NET service, try tweaking the security policy a bit. If you remove the header from EncryptedParts does it still fail? If 
you remove the Derived Keys does it still fail etc? That might help to
narrow down the problem.

Colm.
On Tue, Nov 8, 2016 at 10:32 AM, Martin Fernau <[email protected]> 
wrote:


As I'm still stuck in this I'm going to post WSDL and examples in hope
someone can point me to the right direction.
The problematic method is "InsertCustomer". Other methods work! I guess
its related to the additional header for the InserCustomer method which I 
add as follows:

-----cut
SOAPFactory sf = SOAPFactory.newInstance();
SOAPElement s_ffeHeader = sf.createElement(new QName("http://tempuri.org/ 
","FfeHeader"));
SOAPElement s_ffeDealerCode = sf.createElement(new QName("
http://schemas.datacontract.org/2004/07/DMSInterface.Model";,
"ffeDealerCode"));
s_ffeDealerCode.addTextNode("dealerCode");
s_ffeHeader.addChildElement(s_ffeDealerCode);
SoapHeader tokenHeader = new SoapHeader(new QName("http://tempuri.org/","FfeHeader";), 
s_ffeHeader);
headersList.add(tokenHeader);
client.getRequestContext().put(Header.HEADER_LIST, headersList);
-----cut

I'll post three files after these lines:
[1] The original WSDL-File
[2] The working request from .NET Client
[3] The request from CXF-Client which fails with "An error occurred when 
verifying security for the message"

-----cut [1]-----
<wsdl:definitions name="ServiceCustomer" targetNamespace="http://tempur
i.org/"
     xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/"; xmlns:xsd="
http://www.w3.org/2001/XMLSchema";
     xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-2004
01-wss-wssecurity-utility-1.0.xsd"
     xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/";
     xmlns:soap12="http://schemas.xmlsoap.org/wsdl/soap12/"; xmlns:tns="
http://tempuri.org/";
xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing";
     xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex";
xmlns:wsap="http://schemas.xmlsoap.org/ws/2004/08/addressing/policy";
     xmlns:wsaw="http://www.w3.org/2006/05/addressing/wsdl";
xmlns:msc="http://schemas.microsoft.com/ws/2005/12/wsdl/contract";
     xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";
     xmlns:wsa10="http://www.w3.org/2005/08/addressing";
xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata";>
     <wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SymmetricBinding xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <wsp:Policy>
                         <sp:ProtectionToken>
                             <wsp:Policy>
                                 <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/
securitypolicy/IncludeToken/Never">
                                     <wsp:Policy>
<sp:RequireDerivedKeys/>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
                                     </wsp:Policy>
                                 </sp:X509Token>
                             </wsp:Policy>
                         </sp:ProtectionToken>
                         <sp:AlgorithmSuite>
                             <wsp:Policy>
                                 <sp:Basic128Rsa15/>
                             </wsp:Policy>
                         </sp:AlgorithmSuite>
                         <sp:Layout>
                             <wsp:Policy>
                                 <sp:Strict/>
                             </wsp:Policy>
                         </sp:Layout>
                         <sp:IncludeTimestamp/>
<sp:OnlySignEntireHeadersAndBody/>
                     </wsp:Policy>
                 </sp:SymmetricBinding>
                 <sp:EndorsingSupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
                     <wsp:Policy>
                         <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/
securitypolicy/IncludeToken/AlwaysToRecipient">
                             <wsp:Policy>
<sp:RequireThumbprintReference/>
                                 <sp:WssX509V3Token10/>
                             </wsp:Policy>
                         </sp:X509Token>
                     </wsp:Policy>
                 </sp:EndorsingSupportingTokens>
                 <sp:Wss11 xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <wsp:Policy>
                         <sp:MustSupportRefThumbprint/>
<sp:MustSupportRefEncryptedKey/>
<sp:RequireSignatureConfirmation/>
                     </wsp:Policy>
                 </sp:Wss11>
                 <sp:Trust10 xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <wsp:Policy>
                         <sp:MustSupportIssuedTokens/>
                         <sp:RequireClientEntropy/>
                         <sp:RequireServerEntropy/>
                     </wsp:Policy>
                 </sp:Trust10>
                 <sp:TransportBinding xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <wsp:Policy>
                         <sp:TransportToken>
                             <wsp:Policy>
                                 <sp:HttpsToken
RequireClientCertificate="false"/>
                             </wsp:Policy>
                         </sp:TransportToken>
                         <sp:AlgorithmSuite>
                             <wsp:Policy>
                                 <sp:Basic128/>
                             </wsp:Policy>
                         </sp:AlgorithmSuite>
                         <sp:Layout>
                             <wsp:Policy>
                                 <sp:Strict/>
                             </wsp:Policy>
                         </sp:Layout>
                         <sp:IncludeTimestamp/>
                     </wsp:Policy>
                 </sp:TransportBinding>
                 <wsaw:UsingAddressing/>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_InsertCustomer_Input_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                     <sp:Header Name="FfeHeader" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                     <sp:Header Name="FfeHeader" Namespace="
http://tempuri.org/"/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_InsertCustomer_
output_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_InsertCustomer_ValidationErrorFault_Fault">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetOffersByCustomerID_Input_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetOffersByCustomerID_output_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_GetOfferByOfferID_ 
Input_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
<wsp:Policy wsu:Id="CustomBinding_IServiceCustomer_GetOfferByOfferID_ 
output_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace=" 
http://tempuri.org/"/>
                     <sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace=" 
http://tempuri.org/"/>
                     <sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractsByCustomerID_Input_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractsByCustomerID_output_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractByContractID_Input_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetContractByContractID_output_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace=" 
http://tempuri.org/"/>
                     <sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace=" 
http://tempuri.org/"/>
                     <sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetStockcarByOrderRef_Input_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>
                 </sp:SignedParts>
                 <sp:EncryptedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
                 </sp:EncryptedParts>
             </wsp:All>
         </wsp:ExactlyOne>
     </wsp:Policy>
     <wsp:Policy wsu:Id="CustomBinding_IService
Customer_GetStockcarByOrderRef_output_policy">
         <wsp:ExactlyOne>
             <wsp:All>
                 <sp:SignedParts xmlns:sp="http://schemas.xmlso
ap.org/ws/2005/07/securitypolicy">
                     <sp:Body/>
<sp:Header Name="dealerCountryCodeField" Namespace=" 
http://tempuri.org/"/>
                     <sp:Header Name="dealerLangCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="ffeDealerCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromSystemField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="fromURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="msgIdField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="replyToURIField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="salesPersonCodeField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="timeStampField" Namespace="
http://tempuri.org/"/>
                     <sp:Header Name="userField" Namespace="
http://tempuri.org/"/>
<sp:Header Name="To" Namespace="http://www.w3.org/2 
005/08/addressing"/>
<sp:Header Name="From" Namespace="http://www.w3.org/2 
005/08/addressing"/>
                     <sp:Header Name="FaultTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="ReplyTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="MessageID" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="RelatesTo" Namespace="
http://www.w3.org/2005/08/addressing"/>
                     <sp:Header Name="Action" Namespace="
http://www.w3.org/2005/08/addressing"/>








--
FERNAUSOFT GmbH
Gartenstraße 42 - 37269 Eschwege

Telefon (0 56 51) 95 99-0
Telefax (0 56 51) 95 99-90

eMail [email protected]
Internet http://www.fernausoft.de

Handelsregister Eschwege, HRB 1585
Geschäftsführer: Axel Fernau, Ulrich Fernau, Martin Fernau
Steuernummer 025 233 00041
USt-ID-Nr. DE 178 554 622

Reply via email to