If you have access to the service, I would start with the individual policies (i.e. remove all of the alternatives) and see which ones work, and which don't with CXF. You should be able to narrow down the problem that way - it's quite hard to figure out what the problem is when you have a bunch of policy alternatives.
Colm. On Tue, Jul 30, 2013 at 4:09 PM, Jennifer Ruttan <[email protected]>wrote: > Hi, > > Yeah, I'm expecting the WSDL policy to be strange... although I didn't > write it and ultimately I don't have control over the service itself. I'm > only trying to replicate the real service because I have no access to test > against it. In regards to the header policy, how could I change it to make > it valid? > > Thanks > Jen > > > > On 2013-07-30, at 6:02 AM, Colm O hEigeartaigh <[email protected]> > wrote: > > > Your WSDL policies look a little strange. Is it really necessary to have > > such a complex set of policy alternatives? Furthermore, several of the > > "Header" policies are not valid as they refer to children of the security > > header rather than SOAP headers, e.g.: > > > > <sp:Header Name="UsernameToken" Namespace="http://docs.oasis- > > open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"/> > > > > Colm. > > > > > > On Mon, Jul 29, 2013 at 6:12 PM, Jennifer Ruttan <[email protected] > >wrote: > > > >> Hi, > >> > >> One further issue with this WSDL file. I believe this might be the final > >> one. > >> > >> I am now receiving the following response from CXF: > >> <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/";> > >> <soap:Body> > >> <soap:Fault> > >> <faultcode>soap:Server</faultcode> > >> <faultstring>These policy alternatives can not be satisfied: > >> { > >> > http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702}SignedSupportingTokens > >> { > http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702}RequiredParts > >> {http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702}SignedParts > >> </faultstring> > >> </soap:Fault> > >> </soap:Body> > >> </soap:Envelope> > >> > >> Am I missing a dependency? > >> > >> > >> I changed the dependencies to be loaded via maven. My pom.xml > dependencies > >> are: > >> <dependencies> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-frontend-jaxws</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-transports-http-jetty</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-transports-http</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-ws-policy</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-ws-security</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-core</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-frontend-simple</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-databinding-aegis</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-transports-local</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-transports-jms</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.apache.cxf</groupId> > >> <artifactId>cxf-rt-management</artifactId> > >> <version>${cxf.version}</version> > >> </dependency> > >> <dependency> > >> <groupId>org.springframework</groupId> > >> <artifactId>spring-web</artifactId> > >> <version>3.2.3.RELEASE</version> > >> </dependency> > >> <dependency> > >> <groupId>org.springframework</groupId> > >> <artifactId>spring-context</artifactId> > >> <version>3.2.3.RELEASE</version> > >> </dependency> > >> </dependencies> > >> > >> > >> My request looks like: > >> <soapenv:Envelope xmlns:ebs="http://ebs.health.ontario.ca/"; > >> xmlns:hcv="http://hcv.health.ontario.ca/"; xmlns:idp=" > >> http://idp.ebs.health.ontario.ca/"; > >> xmlns:msa="http://msa.ebs.health.ontario.ca/"; xmlns:soapenv=" > >> http://schemas.xmlsoap.org/soap/envelope/";> > >> <soapenv:Header> > >> <wsse:Security soapenv:mustUnderstand="1" > >> xmlns:wsse=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd > >> " > >> xmlns:wsu=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd > >> "> > >> <wsse:BinarySecurityToken > >> EncodingType=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary > >> " > >> ValueType=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3 > >> " > >> > >> > wsu:Id="X509-8F87C8BB7153C9F44A137511765007837">MIIDCDCCAnECAhI2MA0GCSqGSIb3DQEB > >> > >> > BQUAMIGbMQswCQYDVQQGEwJDQTEQMA4GA1UECAwHT250YXJpbzEQMA4GA1UEBwwHVG9yb250bzERMA8GA1U > >> > >> > ECgwISW5kaXZpY2ExFDASBgNVBAsMC0RldmVsb3BtZW50MRgwFgYDVQQDDA9JbmRpdmljYSBFQlMgQ0ExJTAjBgkq > >> > >> > hkiG9w0BCQEWFmVicy1hZG1pbkBpbmRpdmljYS5jb20wHhcNMTMwNzE5MTc0NDI1WhcNMTQwNzE5MTc0NDI1WjB4M > >> > >> > QswCQYDVQQGEwJDQTEQMA4GA1UECBMHT250YXJpbzEQMA4GA1UEBxMHVG9yb250bzERMA8GA1UEChMISW5ka > >> > >> > XZpY2ExFDASBgNVBAsTC0RldmVsb3BtZW50MRwwGgYDVQQDExNJbmRpdmljYSBFQlMgQ2xpZW50MIIBIjANBgkqhkiG > >> > >> > 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7/+bc5QgW43UuaMoUOpbsQy8Kc32jrBGA0lrxZkqH/PnfdbtRhRypxkc6+r3O17AT > >> > >> > i0Cuo/MByJwYS6Y9bIviWcKWPPVMKpermHxniN+kqjWiGDm10xVMphXryR01LSItgRoi5V54oTFgeJxsdA/1J3kf/QE2Ymsw > >> > >> > ZwLH6+PwvZfExKExvGArojkyveOewWkvKMobLB3d6gtrPJtUxjb18UJugEHyNSiVYFymbgAyvanT4pmNPaqHW1ZlmQ0WB > >> > >> > iDI7oeT1pZzgEwzikcvEHilJye0PcB4PkkrGLKfEE4HoWG4ZVLgyWNRgTURHzKeQPhsQn4fjouqkHHVMMiUvYgQIDAQAB > >> > >> > MA0GCSqGSIb3DQEBBQUAA4GBAA83b5yRECQUppIEIbDOh4E5OsR0wesm4czfNDnh56TUwmjRDzI+tVVEj+fxk0FMSMf > >> > >> > 3NPoUGonb3bfyO20bpGbUBsMR8P4+FHb64zgr0PESUEsSPoO2OFLgeDXoD5VH5u8cRtfPXXX+baL2NThYjMoNVFItOM > >> 0XL3xwzblWi++B > >> </wsse:BinarySecurityToken> > >> <ds:Signature Id="SIG-36" xmlns:ds=" > >> http://www.w3.org/2000/09/xmldsig#";> > >> <ds:SignedInfo> > >> <ds:CanonicalizationMethod > >> Algorithm=" > >> http://www.w3.org/2001/10/xml-exc-c14n#";> > >> <ec:InclusiveNamespaces > >> PrefixList="ebs hcv idp msa soapenv" > >> xmlns:ec=" > >> http://www.w3.org/2001/10/xml-exc-c14n#"; /> > >> </ds:CanonicalizationMethod> > >> <ds:SignatureMethod Algorithm=" > >> http://www.w3.org/2000/09/xmldsig#rsa-sha1"; /> > >> <ds:Reference URI="#id-12"> > >> <ds:Transforms> > >> <ds:Transform > >> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";> > >> > >> <ec:InclusiveNamespaces PrefixList="ebs hcv idp msa" > >> > >> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; /> > >> </ds:Transform> > >> </ds:Transforms> > >> <ds:DigestMethod > >> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; /> > >> > >> <ds:DigestValue>L8p2S05GWybjnnTm1cv2xouWj/w=</ds:DigestValue> > >> </ds:Reference> > >> <ds:Reference URI="#id-7"> > >> <ds:Transforms> > >> <ds:Transform > >> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";> > >> > >> <ec:InclusiveNamespaces PrefixList="hcv idp msa soapenv" > >> > >> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; /> > >> </ds:Transform> > >> </ds:Transforms> > >> <ds:DigestMethod > >> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; /> > >> > >> <ds:DigestValue>DshPBCDvkhmoIGUjaYpq8y1DldA=</ds:DigestValue> > >> </ds:Reference> > >> <ds:Reference URI="#id-8"> > >> <ds:Transforms> > >> <ds:Transform > >> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";> > >> > >> <ec:InclusiveNamespaces PrefixList="ebs hcv msa soapenv" > >> > >> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; /> > >> </ds:Transform> > >> </ds:Transforms> > >> <ds:DigestMethod > >> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; /> > >> > >> <ds:DigestValue>cStXQ+Qf4MYZw7oZh3EwQnCO9kE=</ds:DigestValue> > >> </ds:Reference> > >> <ds:Reference URI="#TS-35"> > >> <ds:Transforms> > >> <ds:Transform > >> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";> > >> > >> <ec:InclusiveNamespaces PrefixList="wsse ebs hcv idp msa soapenv" > >> > >> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; /> > >> </ds:Transform> > >> </ds:Transforms> > >> <ds:DigestMethod > >> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; /> > >> > >> <ds:DigestValue>OPmJN60ggUWBc3EoJ+m8p7jbG50=</ds:DigestValue> > >> </ds:Reference> > >> <ds:Reference > >> URI="#UsernameToken-34"> > >> <ds:Transforms> > >> <ds:Transform > >> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";> > >> > >> <ec:InclusiveNamespaces PrefixList="ebs hcv idp msa soapenv" > >> > >> xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; /> > >> </ds:Transform> > >> </ds:Transforms> > >> <ds:DigestMethod > >> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; /> > >> > >> <ds:DigestValue>/N9BmZT8YqTsrcdvX7AVYbnkofQ=</ds:DigestValue> > >> </ds:Reference> > >> </ds:SignedInfo> > >> > >> > <ds:SignatureValue>OfwAzd25uNxfjPMzRHgZbXAoW0HQ20nkdNL/QS0KyyXH80es9RqzoB8F0QtXkJC4kcGr3xjHqftM > >> > >> > jQUWxioFqk4G/jG01080kuJHkJULGVKkTf5zpJzu3F9cdfG9pkuhFjuPCKiFfIaxc5dDu20OT5KD > >> > >> > EPjXFW7NqlIcBOFaVSM5feR224cRkvRqzqYOc3bCDSUpqT6+o5Gce5LyV4OKhPpWfsFy1g3FbSsF > >> > >> > vElsygbjSxo3mDREBY3pEPBJruN5Gd8T/kCL/nNNos++L4MwwMIFyQbzsaxINiFKA3YoUSUb9mfB > >> > >> ZeMu6z6zd3CSebMHnZVi2iOgSApomLGsUhsmEg== > >> </ds:SignatureValue> > >> <ds:KeyInfo > >> Id="KI-8F87C8BB7153C9F44A137511765007838"> > >> <wsse:SecurityTokenReference > >> > >> wsu:Id="STR-8F87C8BB7153C9F44A137511765007839"> > >> <wsse:Reference > >> URI="#X509-8F87C8BB7153C9F44A137511765007837" > >> ValueType=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3 > " > >> /> > >> </wsse:SecurityTokenReference> > >> </ds:KeyInfo> > >> </ds:Signature> > >> <wsu:Timestamp wsu:Id="TS-35"> > >> > >> <wsu:Created>2013-07-29T17:07:30.076Z</wsu:Created> > >> > >> <wsu:Expires>2013-08-05T15:47:30.076Z</wsu:Expires> > >> </wsu:Timestamp> > >> <wsse:UsernameToken wsu:Id="UsernameToken-34"> > >> <wsse:Username>abc</wsse:Username> > >> <wsse:Password > >> Type=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText > >> ">abcd</wsse:Password> > >> </wsse:UsernameToken> > >> </wsse:Security> > >> <idp:IDP wsu:Id="id-8" > >> xmlns:wsu=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd > >> "> > >> <ServiceUserMUID>?</ServiceUserMUID> > >> </idp:IDP> > >> <ebs:EBS wsu:Id="id-7" > >> xmlns:wsu=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd > >> "> > >> > >> <SoftwareConformanceKey>12345</SoftwareConformanceKey> > >> <AuditId>12345</AuditId> > >> </ebs:EBS> > >> </soapenv:Header> > >> <soapenv:Body wsu:Id="id-12" > >> xmlns:wsu=" > >> > http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd > >> "> > >> <hcv:validate> > >> <requests> > >> <hcvRequest> > >> > >> <healthNumber>9876543217</healthNumber> > >> <versionCode>AB</versionCode> > >> </hcvRequest> > >> </requests> > >> </hcv:validate> > >> </soapenv:Body> > >> </soapenv:Envelope> > >> > >> > >> > >> > >> > >> On 2013-07-27, at 1:17 AM, Jason Pell <[email protected]> wrote: > >> > >>> Yea the namespace cannot be Namespace="" either. > >>> > >>> > >>> On Sat, Jul 27, 2013 at 3:14 PM, Jennifer Ruttan < > [email protected]> > >> wrote: > >>> That got rid of the problem with Eclipse complaining about the invalid > >> element. I still get this error though: > >>> > >>> Jul 27, 2013 1:12:05 AM > >> > org.apache.cxf.ws.policy.attachment.wsdl11.Wsdl11AttachmentPolicyProvider > >> getElementPolicy > >>> WARNING: Failed to build the policy > >> 'request-policy':sp:RequiredParts/sp:Header@Namespace must have a value > >>> > >>> Which I find weird, because all the <sp:Header> elements in > >> <sp:RequiredParts> tag have a Namespace attribute and the attribute has > a > >> value. > >>> > >>> > >>> > >>> On 2013-07-27, at 1:11 AM, Jason Pell <[email protected]> wrote: > >>> > >>>> that's with the new sp namespace I mean... > >>> > >>> > >> > >> > > > > > > -- > > Colm O hEigeartaigh > > > > Talend Community Coder > > http://coders.talend.com > > -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
