You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-user@axis.apache.org by Massimiliano Masi <ma...@math.unifi.it> on 2007/09/27 16:09:14 UTC

Rampart as STS question

Hi all,

I'm trying to use rampart (1.2) as STS. I removed from the axis2.xml
in the axis2.war the  <module ref=3D"rampart"/> (rampart.mar is still in
WEB-INF/modules).

I created a WS a simple class that returns null.
I created another class that implements TokenIssuer and I put in the =20
services.xml the rampart info as shown in the rampart quick-start.

I would like to issue my own token (SAML2).

What are the methods that I can use to put my own SAMLAssertion (as OMELemen=
t)
in the response?

My client sets as action the IssueToken operation. I then created the =20
following
SOAP Message:

<?xml version=3D'1.0' encoding=3D'utf-8'?>
<soapenv:Envelope xmlns:soapenv=3D"http://www.w3.org/2003/05/soap-envelope">
    <soapenv:Header>
      <wsse:Security =20
xmlns:wsse=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecu=
rity-secext-1.0.xsd" =20
mustUnderstand=3D"1">
        <wsse:UsernameToken =20
xmlns:wsu=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecur=
ity-utility-1.0.xsd" =20
wsu:Id=3D"UsernameToken-5168970">
          <wsse:Username>masi</wsse:Username>
          <wsse:Password =20
Type=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-tok=
en-profile-1.0#PasswordText">quezalcoatl</wsse:Password>
        </wsse:UsernameToken>
      </wsse:Security>
    </soapenv:Header>
    <soapenv:Body>
      <wst:RequestSecurityToken =20
xmlns:wst=3D"http://docs.oasis-open.org/ws-sx/ws-trust/200512" =20
ID=3D"FAKEID">
        <wst:TokenType>oasis:names:tc:SAML:2.0:assertion</wst:TokenType>
        =20
<wst:RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue<=
/wst:RequestType>
        <wsp:AppliesTo =20
xmlns:wsp=3D"http://schemas.xmlsoap.org/ws/2004/09/policy">http://localhost:=
8080/Spirit/XDS/Registry</wsp:AppliesTo>
      </wst:RequestSecurityToken>
    </soapenv:Body>
</soapenv:Envelope>


Rahas returns with an error:

15:56:54,255 ERROR [STDERR] org.apache.rahas.TrustException: The =20
specified request failed
15:56:54,257 ERROR [STDERR]     at =20
org.apache.rahas.RahasData.processWSS4JSecurityResults(RahasData.java:143)
15:56:54,257 ERROR [STDERR]     at =20
org.apache.rahas.RahasData.<init>(RahasData.java:87)
15:56:54,258 ERROR [STDERR]     at =20
org.apache.rahas.TokenRequestDispatcher.handle(TokenRequestDispatcher.java:4=
7)
15:56:54,258 ERROR [STDERR]     at =20
org.apache.rahas.STSMessageReceiver.invokeBusinessLogic(STSMessageReceiver.j=
ava:57)
15:56:54,258 ERROR [STDERR]     at =20
org.apache.axis2.receivers.AbstractInOutSyncMessageReceiver.receive(Abstract=
InOutSyncMessageReceiver.java:39)
15:56:54,259 ERROR [STDERR]     at =20
org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:144)
15:56:54,259 ERROR [STDERR]     at =20
org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HT=
TPTransportUtils.java:279)
15:56:54,259 ERROR [STDERR]     at =20
org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:116)
15:56:54,260 ERROR [STDERR]     at =20
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
15:56:54,260 ERROR [STDERR]     at =20
javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
15:56:54,261 ERROR [STDERR]     at =20
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Application=
FilterChain.java:252)
15:56:54,261 ERROR [STDERR]     at =20
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterCh=
ain.java:173)
15:56:54,261 ERROR [STDERR]     at =20
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.ja=
va:96)
15:56:54,262 ERROR [STDERR]     at =20
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Application=
FilterChain.java:202)
15:56:54,262 ERROR [STDERR]     at =20
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterCh=
ain.java:173)
15:56:54,262 ERROR [STDERR]     at =20
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.ja=
va:213)
15:56:54,263 ERROR [STDERR]     at =20
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.ja=
va:178)
15:56:54,263 ERROR [STDERR]     at =20
org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssoci=
ationValve.java:175)
15:56:54,263 ERROR [STDERR]     at =20
org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:=
74)
15:56:54,263 ERROR [STDERR]     at =20
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126=
)
15:56:54,264 ERROR [STDERR]     at =20
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105=
)
15:56:54,264 ERROR [STDERR]     at =20
org.jboss.web.tomcat.tc5.jca.CachedConnectionValve.invoke(CachedConnectionVa=
lve.java:156)
15:56:54,264 ERROR [STDERR]     at =20
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java=
:107)
15:56:54,265 ERROR [STDERR]     at =20
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
15:56:54,265 ERROR [STDERR]     at =20
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
15:56:54,265 ERROR [STDERR]     at =20
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processC=
onnection(Http11BaseProtocol.java:664)
15:56:54,265 ERROR [STDERR]     at =20
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.jav=
a:527)
15:56:54,266 ERROR [STDERR]     at =20
org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThre=
ad.java:112)
15:56:54,266 ERROR [STDERR]     at java.lang.Thread.run(Thread.java:613)
15:56:54,266 ERROR [STSMessageReceiver] =20
org.apache.rahas.TrustException: The specified request failed




Do you have any idea?


Thanks,

                Massimiliano




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.



---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org