[jira] Commented: (RAMPART-305) If Rampart detects a security error a HTML page is send to the client instead of a SOAP fault

["Thilina Buddhika (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RAMPART-305?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12893499#action_12893499 ] 

Thilina Buddhika commented on RAMPART-305:
------------------------------------------

Hi Herwig,

Were you able to get this setup working for positive scenarios, i.e. sending the requests with correct security headers?

I had a look at the stack trace. One possible reason for this behavior is that the policy at the service's end is not applied properly. Then I had a look at the WSDL, and it looks like the policy is not attached to any of the policy attachment points.

Thanks,
Thilina

> If Rampart detects a security error a HTML page is send to the client instead of a SOAP fault
> ---------------------------------------------------------------------------------------------
>
>                 Key: RAMPART-305
>                 URL: https://issues.apache.org/jira/browse/RAMPART-305
>             Project: Rampart
>          Issue Type: Bug
>          Components: rampart-core
>    Affects Versions: 1.4
>         Environment: Axis2-1.5..1 is installed as web app under Tomcat 5.5.28 and uses Rampart 1.4.
> Running on Windows XP 
>            Reporter: Herwig David
>            Assignee: Ruchith Udayanga Fernando
>         Attachments: axis2.log, request.txt, response.txt, WS7X4AssortmentOrder.wsdl
>
>
> If I call a web service with wrong security data rampart correctly detects that 'The signature or decryption was invalid'. That's fine.
> Unfortunately I get a NullPointerException when returning to the client afterwards.
> Is there a way to just send the SOAP fault back to the client instead of sending a HTML page?
> Is this related to issue RAMPART-164?
> I've attached the log file, the wsdl file and messages send between client and server.
> Thanks and regards,
> Herwig

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.