Quantcast
Channel: Process Integration (PI) & SOA Middleware
Viewing all articles
Browse latest Browse all 741

Error in implementing WS-Security Username token standard in soap receiver axis adapter

$
0
0

Hi,

 

I am implementing a scenario to call from PI, a webservice with WS-Security username token standard,along with message encryption and signature.

 

  • Username Token          Base64( SHA1 (Username+Password + Nonce + Time stamp))
  • Username 4 digit code used for the consumer application as set up in Planning IT.
  • Password Password for consumer application as set up by HP on the server
  • Nonce Random number generated for each request by the application server
  • Time stamp      Time stamp for each request

 

I have deployed and am using the axis protocol of soap adapter and configured the modules as shown in attached screen.

It is almost same . But it gives me the below error when I use password Digest.Parameters.jpg

PasswordDigest.JPG

 

 

 

Error While Sending Message: Additional error text from response: com.sap.engine.interfaces.messaging.api.exception.MessagingException: security.wssecurity.WSSContextImpl.s02: com.ibm.websphere.security.WSSecurityException: Exception org.apache.axis2.AxisFault: CWWSS6521E: The Login failed because of an exception: javax.security.auth.login.LoginException: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest was supplied, but only http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText is supported. ocurred while running action: com.ibm.ws.wssecurity.handler.WSSecurityConsumerHandler$1@4d774d77

 

 

When I used PasswordText instead of PasswordDigest (Rest all is same), I get the below error,even though I have added it as UsernameToken Timestamp

Password Digest.JPG

 

Error While Sending Message: Additional error text from response: com.sap.engine.interfaces.messaging.api.exception.MessagingException: security.wssecurity.WSSContextImpl.s02: com.ibm.websphere.security.WSSecurityException: Exception org.apache.axis2.AxisFault: CWWSS6521E: The Login failed because of an exception: javax.security.auth.login.LoginException: CWWSS5327E: A null value is not allowed for the created time of the time stamp. The Application Server expected the wsu:Created element. ocurred while running action: com.ibm.ws.wssecurity.handler.WSSecurityConsumerHandler$1@7d5e7d5e

 

I needed security configuration for encryption and signature as well  for encoding the username token. I have deployed the public provider in trusted CAs and private key pair in the default  key store.But I have still not configured the encryption modules as I wanted to get through this username token issue in the first place.

 

Please also find attached the security xml the provider is expecting.

 

Could you please help me here?

 

Regards,

Mahesh


Viewing all articles
Browse latest Browse all 741

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>