// shall I write some keywords here to boost search engine ranking?

Wednesday, June 13, 2012

Axis2 + Rampart: Generate Nonce and Created when Plain Text Password was Used

Axis2 support WS-Security via Apache Rampart module. I had develop the SOAP client based on tutorial : UsernameToken Authentication with Rampart

However, the default implementation of Apache Rampart will not generate Nonce when plain text password was used.

After some google, I found this page talk about a configuration called "addUTElements".

So below are the modified configuration fragment:


<parameter name="OutflowSecurity">
<action>
<items>UsernameToken Timestamp</items>
<user>bob</user>
<passwordCallbackClass>org.apache.rampart.samples.sample03.PWCBHandler</passwordCallbackClass>
<passwordType>PasswordText</passwordType>
<addUTElements>Nonce Created</addUTElements>
</action>
</parameter>
view raw gistfile1.xml hosted with ❤ by GitHub

No comments: