Axis2 1.4 and Rampart 1.3?

[Savitsky, Alex]

Hi all,

Does Axis2 1.4 work with Rampart 1.3? I have an existing app that works for the 
Axis2 1.3 and Rampart 1.3 combination, but when I upgrade server and client to 
1.4, I get an exception from server:

ERROR [org.apache.axis2.engine.AxisEngine] - Must Understand check failed for 
header 
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
 : Security
org.apache.axis2.AxisFault: Must Understand check failed for header 
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
 : Security
at org.apache.axis2.engine.AxisEngine.checkMustUnderstand(AxisEngine.java:102)
at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:166)
at 
org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:275)
at org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:131)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
...

Previously, Axis2 1.3 could understand this header without any problems. Is 
this a version incompatibility, or am I missing something here?

My service.xml looks like this:

<service name="RecordWebService">
        <messageReceivers>
                <messageReceiver mep="http://www.w3.org/2004/08/wsdl/in-only";
                        
class="org.apache.axis2.rpc.receivers.RPCInOnlyMessageReceiver" />
                <messageReceiver mep="http://www.w3.org/2004/08/wsdl/in-out";
                        
class="org.apache.axis2.rpc.receivers.RPCMessageReceiver" />
        </messageReceivers>
        <parameter name="ServiceClass" locked="false">
                com.td.cems.ws.service.RecordWebServiceImpl
        </parameter>
        <module ref="addressing" />
        <module ref="rampart" />
        <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy";
                xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";
                xmlns:ramp="http://ws.apache.org/rampart/policy";>
                <wsp:ExactlyOne>
                        <wsp:All>
                                <wsp:Policy>
                                        <sp:SupportingToken>
                                                <wsp:Policy>
                                                        <sp:UserNameToken>
                                                                <wsp:Policy>
                                                                        
<sp:HashPassword />
                                                                </wsp:Policy>
                                                        </sp:UserNameToken>
                                                </wsp:Policy>
                                        </sp:SupportingToken>
                                </wsp:Policy>
                                <ramp:RampartConfig>
                                        <ramp:passwordCallbackClass>
                                                
com.td.cems.ws.service.PWCBHandler
                                        </ramp:passwordCallbackClass>
                                </ramp:RampartConfig>
                        </wsp:All>
                </wsp:ExactlyOne>
        </wsp:Policy>
</service>

Thanks,

Alex


********************
NOTICE OF CONFIDENTIALITY
This communication including any information transmitted with it is 
intended only for the use of the addressees and is confidential. 
If you are not an intended recipient or responsible for delivering 
the message to an intended recipient, any review, disclosure, 
conversion to hard copy, dissemination, reproduction or other use 
of any part of this communication is strictly prohibited, as is the 
taking or omitting of any action in reliance upon this communication. 
If you receive this communication in error or without authorization 
please notify us immediately by return e-mail or otherwise and 
permanently delete the entire communication from any computer, 
disk drive, or other storage medium.

If the above disclaimer is not properly readable, it can be found at 
www.td.com/legal
                                                           
AVERTISSEMENT DE CONFIDENTIALITE                   
Ce courriel, ainsi que tout renseignement ci-inclus, destiné uniquement 
aux destinataires susmentionnés,  est confidentiel.  Si vous 
n’êtes pas le destinataire prévu ou un agent responsable de la 
livraison de ce courriel, tout examen, divulgation, copie, impression, 
reproduction, distribution, ou autre utilisation d’une partie de ce 
courriel est strictement interdit de même que toute intervention ou 
abstraction à cet égard.  Si vous avez reçu ce message par erreur ou 
sans autorisation, veuillez en aviser immédiatement l’expéditeur par 
retour de courriel ou par un autre moyen et supprimer immédiatement 
cette communication entière de tout système électronique.

Si l'avis de non-responsabilité ci-dessus n'est pas lisible, vous 
pouvez le consulter à www.td.com/francais/legale