Questions tagged [usernametoken]

67 questions
0
votes
1 answer

Custom WebLogic Web Service Policy

I use Weblogic 12.1.2 as the JavaEE container. I want to use my custom ws-security policy (because weblogic predefined ws-plocies has IncludeTimestamp and I want to remove this tag). Therefore I need one of the policies' xml file, for example…
AliReza19330
  • 397
  • 3
  • 18
0
votes
1 answer

webservice SOAP UsernameToken CXF not send username/password on each requests

I am using the usernameToken security policy to secure a soap webservice. I don't want the client to send the username/password on each requests. Is it possible to make the webservice statefull ? Currently the ServerPasswordCallback is called for…
Olivier Boissé
  • 9,568
  • 4
  • 27
  • 43
0
votes
1 answer

How to add custom elements to Wsse Security / Username Token in Suds

Default SOAP Username Token has the following elements: USERNAME PASSWORD For the same I would to like an additional tokens…
Deep
  • 51
  • 12
0
votes
2 answers

Websphere Role Based WS-Security with UsernameToken

Through the Websphere Console I've setup a Policy Set and a Policy Set Binding in order to support UsernameToken authentication on a webservice. As expected, it is rejecting web service calls without correct usernames and passwords. However, it is…
0
votes
1 answer

Missing UsernameToken element

I am getting a request in the following method but the soap message does not appear to contain the UsernameToken Element: $policy = new WSPolicy( array( 'useUsernameToken'=>true ) ); $security = new WSSecurityToken( array( …
dorgan
  • 135
  • 1
  • 9
0
votes
1 answer

Websphere The time stamp value occurs too far into the future

I have set Username token webservice security and deployed this application on Websphere 7.0 app server. I have set below properties to false: com.ibm.wsspi.wssecurity.token.username.verifyNonce…
0
votes
1 answer

Http 400 Bad Request while authenticating with ONVIF camera

I am trying to authenticate with the ONVIF camera by sending the "usernametoken" soap request to get the device capabilities. But I am getting "The action requested requires authorization and the sender is not authorized" error back from the camera.…
0
votes
1 answer

SOAP WS-Security header UsernameToken is element tenant valid?

I've got a UsernameToken: myTenant USER PASSWORD Now I've googled a lot but couldn't find…
Christian
  • 21,440
  • 9
  • 77
  • 100
0
votes
1 answer

IBM Websphere application server 7 JAX-WS client WSSE UsernameToken

I'm consuming web service using JAX-WS on IBM Websphere application server 7. Setting WS message level security while passing the SOAP Message. UsernameToken xmlns:wsu is not passed correctly to provider end. Is there any configuration need on…
Ashok Kumar
  • 11
  • 1
  • 3
0
votes
2 answers

WS-securitypolicy in cxf-bc deploy in servicemix

I was wondering if it is possible to build a cxf-bc with WS-SecurityPolicy instead of just the WS-Security. WS-SecurityPolicy seems to be a more elegant solution since everything is in the WSDL. Examples welcome. :) Well with David's help I got…
Vinh
  • 131
  • 1
  • 14
0
votes
1 answer

Testing WS Security using soapUI - using security header in message payload

I am new to webservice and WS Security. I have a sample webservice using CFX interceptor. Following is the config file I have. Cfx-servelet.xml:
user3394427
  • 1
  • 1
  • 3
0
votes
1 answer

.net call WS-Security enabled web service (created in java)

How to call a webservice (created in java) with ws security, they provided a certificate file , username & password, i tried using Web Services Enhancements (WSE) 3.0, Inherited the service proxy from …
Priyan R
  • 1,012
  • 1
  • 14
  • 24
0
votes
1 answer

In ws-security under UsernameToken, is not a valid assertion?

We are implementing the web services using Apache Axis2 and integrating with WS-Security (using Apache Rampart module) too. We are trying to define the Ws-Security policy that does NOT force the consumer to send the password in Usernametoken…
aRvi
  • 87
  • 2
  • 13
0
votes
1 answer

Develop web service - UsernameToken header with password digest authentication

We are trying to host a service over ABC Server with client certificate and message authentication. Client will provide WSSE UsernameToken Security header that need to be understood by the service and appropriate authentication has to take place. …
Software Enginner
  • 587
  • 1
  • 11
  • 40
0
votes
1 answer

Inserting Username token in security header of already generated SOAP envelope gives me two headers!

I'm using WSS4J to add a Username token in the header of an already formed SOAP request envelope. Here is what the SOAP request looks like:
zzztimbo
  • 2,245
  • 4
  • 28
  • 31