So I've essentially taken Rampart sample6 and split it across three machines with my own web service instead of SimpleService. Here's what happens:
1) client makes Mex request to Service : Service responds. 2) Client makes token request to STS - STS responds 3) Client attempts to make the actual call the Service. Service then responds with "axisFault: Missing wsse:Security header in request" The server logs show something different: ERROR org.apache.ws.security.components.crypto.CryptoFactory - Unable to instantiate (1): org.apache.ws.security.components.crypto.Merlin java.lang.reflect.InvocationTargetException So, I checked and made sure I had BouncyCastle jar in lib directory. I check that security provider is updated (though I haven't a clue why i'm doing this). And, now, I've run out of things to check. i'd appreciate any help. Thanks, --tim --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]