Re: Axis2 - Invoking Rampart UsernameToken-service using client written in PHP

[Dimuthu <mu...@apache.org>]

Hi Jaskin,

Can u please check whether the UsernameToken is included in the
SecurityHeader by looking at the message on the wire. You can use the
TCPMonitor[1] to do this.

Security Header is a "Must Understand" header. I think if it is not
processed properly a "Must Understand" failure must be thrown without
invoking the service.

But also check whether you have configured the service properly. Have
you engaged rampart at the server side by editing the services.xml file.
Please have a look at sample03/services.xml

It has engaged rampart using <module ref="rampart"/> element and
specified security items.

Regards,
Dimuthu

[1]http://ws.apache.org/commons/tcpmon/

On Mon, 2007-07-23 at 15:40 +0800, Jaskin wrote:
> Hi,
> I am trying out UsernameToken (plain text) authentication with
> Axis2-Rampart.
> However, I am encountered some issue on the CallbackHandler when
> invoking the service (Rampart’s sample03).
> 
> - The handle() method is not execute at all when invoking the service
> using client written in PHP
> 
> - This has caused the service to be invoked although the user
> name/password is incorrect.
> 
> On the other hand, the client sample03 provided able to authenticate
> correctly.
> Appreciate any help/info from you guys.
> 
> Thanks,
> Jaskin
> 
> 
> 
> ______________________________________________________________________
> Get 2GB of storage space with the new Windows Live Hotmail. Get it
> now!


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org