In the axis2 client, it looks like it is possible to configure password
authentication with clear text passwords or a password digest. Like this:
<passwordType>PasswordText</passwordType>
or
<passwordType>PasswordDigest</passwordType>
On the Axis2 server, my inflow security is similar to rampart's sample02:
<parameter name="InflowSecurity">
<action>
<items>UsernameToken Timestamp</items>
<passwordCallbackClass>myClass</passwordCallbackClass>
</action>
</parameter>
Is it possible to configure the server to require a Password Digest? It
would be nice if I can configure the server to fail authentication if the
password sent in clear text.
Thanks,
Kevin