Hi Nandana,
   
  I'm planning on sending the username and the password in clear text. I know 
it's not 100% secure but the call will be done over https anyway...
   
  Here is my service.xml
   
  <service>
  <operation name="echo">
  <messageReceiver class="org.apache.axis2.rpc.receivers.RPCMessageReceiver"/>
  </operation> 
  <parameter name="ServiceClass" 
locked="false">org.apache.rampart.samples.sample03.SimpleService</parameter>
  
  <module ref="rampart" />
  
  <parameter name="InflowSecurity">
  <action>
  <items>UsernameToken</items>
  
<passwordCallbackClass>org.apache.rampart.samples.sample03.MyServiceCallbackHandler</passwordCallbackClass>
  </action>
  </parameter>
  </service>
   
  Thank you.

Nandana Mihindukulasooriya <[EMAIL PROTECTED]> wrote:
  Hi,
Can you please post your security configuration too ?

Thanks,
Nandana

On 1/4/08, red dog wrote:
> Hi everyone,
>
> Is there any resolution to this? I'm facing the same issue and I'm using
> Axis 2 and rampart module 1.3.
>
> If I just send a SOAP message with an empty security header my method gets
> called.
>
> POST /axis2/services/sample03 HTTP/1.1
> User-Agent: Axis2
> SOAPAction: urn:echo
> Host: localhost:18088
> Transfer-Encoding: chunked
> Content-Type: text/xml; charset=UTF-8
> 1ba
> > xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/";>> 
> > xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
> soapenv:mustUnderstand="1" />> xmlns:ns1="
> Hello'>http://sample03.samples.rampart.apache.org/xsd";>
Hello
> world

> 0
>
> Response:
>
> HTTP/1.1 200 OK
> Date: Fri, 04 Jan 2008 15:59:48 GMT
> Server: Simple-Server/1.1
> Transfer-Encoding: chunked
> Content-Type: text/xml; charset=UTF-8
> 133
> > xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/";>> />> 
> > xmlns:ns="Hello'>http://sample03.samples.rampart.apache.org/xsd";>Hello
> world
> 0
>
>
> After debugging I relized that the handle() method from the
> MyServiceCallbackHandler is not getting called although the handler is
> getting invoked (tested by adding an empty constructor to the class).
>
> Your help is much appreciated.
>
>
> Thank you.
>
>
> ---------------------------------
> Looking for last minute shopping deals? Find them fast with Yahoo! Search.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



       
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile.  Try it now.

Reply via email to