Topic
2 replies Latest Post - ‏2013-11-20T16:25:58Z by Keith Chong
AA60_Sumo_Chak
AA60_Sumo_Chak
1 Post
ACCEPTED ANSWER

Pinned topic Urgent : Please help !!! Problem with WS Security on Liberty profile 8.5.5.1

‏2013-11-16T07:58:05Z |

I am trying to create a simple JAXWS webservice with XML message level security with XML signature. Below is the XML provided in sample in the link provided. When i try to create a web project and then create a webservice as New -> other -> Webservice following the menu and select JAXWS runtime in WAS Liberty in the dialog boxes that appear it creates the webService but the WS Security is not working. I checked with SOAP UI and the service is not secure. The WS security policy part is not visible when I hit the deployed URL. It just shows the WSDL without the security. 

I am following the example from this link below. I used RAD 9 / Liberty 8.5.5.1 (developer edition)  Also tried Eclipse 4.3.1 with the WAS Developer Tools 8.5.5.1 ( tried with Alpha also seperately).

 

Securing a web service by using a WS-Security policy

http://pic.dhe.ibm.com/infocenter/wasinfo/v8r5/index.jsp?topic=%2Fcom.ibm.websphere.wlp.express.doc%2Fae%2Ftwlp_wssec_securing.html

 

 

PLEASE HELP ME. I will have to complete a POC by this weekend and desperately trying every possible action.

 

Here is the server.xml from Liberty server

================================

<server description="new server">

    <!-- Enable features -->
    <featureManager>
    <feature>servlet-3.0</feature>
    <feature>appSecurity-2.0</feature>
    <feature>jsp-2.2</feature>
    <feature>jaxws-2.2</feature>
    <feature>wsSecurity-1.1</feature>      
    </featureManager>

    <httpEndpoint host="localhost" httpPort="9080" httpsPort="9443" id="defaultHttpEndpoint"/>

 

    <applicationMonitor updateTrigger="mbean"/>

 <wsSecurityProvider
                    ws-security.username="user2">
  <encryptionProperties org.apache.ws.security.crypto.merlin.keystore.type="jks"
                        org.apache.ws.security.crypto.merlin.keystore.password="LibertyX509Server"
                        org.apache.ws.security.crypto.merlin.keystore.alias="x509ServerCert"
                        org.apache.ws.security.crypto.merlin.file="${server.config.dir}/x509ServerDefault.jks"/>
</wsSecurityProvider>
   


    <enterpriseApplication id="jwsAddressbookEAR" location="jwsAddressbookEAR.ear" name="jwsAddressbookEAR"/>
</server>

 

 

 

 

 

Thanks a lot!!!

Sumit Chakrabarti

box4sumit@gmail.com

 

  • 66DP_Syed_Wadood
    66DP_Syed_Wadood
    1 Post
    ACCEPTED ANSWER

    Re: Urgent : Please help !!! Problem with WS Security on Liberty profile 8.5.5.1

    ‏2013-11-18T21:24:57Z  in response to AA60_Sumo_Chak

    Have you developed the callback handler as documented in step 3 in the link?  I do not see the callback handler configured in server.xml.

  • Keith Chong
    Keith Chong
    5 Posts
    ACCEPTED ANSWER

    Re: Urgent : Please help !!! Problem with WS Security on Liberty profile 8.5.5.1

    ‏2013-11-20T16:25:58Z  in response to AA60_Sumo_Chak

    Is your WSDL in here (as specified in the tutorial)?  

    
     wsdlLocation = "WEB-INF/wsdl/Echo.wsdl"
    

    If it is, can you check if the policy is in this WSDL?