Barry, if there is no UsernameToken in the message then the receiver does not handle it. Because the receiver triggers on a UsernameToken there is one in the response message. Can you record the response, e.g. via TCPMON and send it.
Regards, Werner > -----Ursprüngliche Nachricht----- > Von: Barry McGann [mailto:[EMAIL PROTECTED] > Gesendet: Montag, 13. März 2006 17:23 > An: [email protected] > Betreff: re: UsernameToken issue > > Hi, > > I am having a problem with the response that I get back from > a .NET web > service. I can successfully call the service adding a UsernameToken, > Encrypting the body and signing the message but the response > I get back > fails with : > > - Using Crypto Engine > [org.apache.ws.security.components.crypto.Merlin] > - Verification successful for URI "#id-886220" > > {http://xml.apache.org/axis/}stackTrace:java.lang.NullPointerException > > at > org.apache.ws.security.message.token.UsernameToken.<init> ;(UsernameToken.java:110) > at org.apache.ws.security.WSSecurityEngine.handleUsernameToken > at > org.apache.ws.security.WSSecurityEngine.handleUsernameToken(WS > SecurityEngine.java:832) > at > org.apache.ws.security.WSSecurityEngine.processSecurityHeader( > WSSecurityEngine.java:379) > at > org.apache.ws.security.WSSecurityEngine.processSecurityHeader( > WSSecurityEngine.java:259) > at > org.apache.ws.axis.security.WSDoAllReceiver.invoke(WSDoAllRece > iver.java:183) > ........... > > Here is the wsdd file I am using: > > <deployment xmlns="http://xml.apache.org/axis/wsdd/" > xmlns:java="http://xml.apache.org/axis/wsdd/providers/java"> > <transport name="http" > pivot="java:org.apache.axis.transport.http.HTTPSender"/> > <globalConfiguration > > <requestFlow > > <handler name="EcsResponseHandler" > type="java:ict.ecs.EcsResponseHandler" > > </handler> > <handler type="java:org.apache.ws.axis.security.WSDoAllReceiver"> > <parameter name="passwordCallbackClass" > value="ict.ecs.PWCallback"/> > <parameter name="action" value="Encrypt Timestamp Signature"/> > <parameter name="decryptionPropFile" value="key.properties" /> > <parameter name="signaturePropFile" value="key.properties" /> > <parameter name="encryptionKeyIdentifier" > value="DirectReference" /> > <parameter name="signatureKeyIdentifier" > value="DirectReference" /> > </handler> > </requestFlow > > </globalConfiguration > > </deployment> > > > I build the outgoing message manually. > I can see that the digital signature is verified successfully > but how do > I setup the wsdd file to ignore the fact that no > UsernameToken is being > passed back in the response? > > Any help is appreciated. > > Thanks > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
