[AXIS2C-406] Security Enabled server unable to handle requests, without security headers

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Fix Version/s: 0.96
• Component/s: rampart
• Assignee: Unassigned
• Reporter: Dinesh Weerapurage
• Created: 16/Nov/06 15:55
• Updated: 07/Apr/20 17:45
• Resolved: 17/Nov/06 05:50

Description

I sent a normal request (without security headers) to security enabled simple axis server. Then server gave me a soap fault saying security headers not available.

request
------------
OST /axis2/services/echo HTTP/1.1

User-Agent: Axis2/C

Content-Length: 302

Content-Type: application/soap+xml;charset=UTF-8;

Host: 127.0.0.1

<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">
<soapenv:Header></soapenv:Header>
<soapenv:Body>
<ns1:echoString xmlns:ns1="http://ws.apache.org/axis2/c/samples">
<text>Hello World !</text>
</ns1:echoString>
</soapenv:Body>
</soapenv:Envelope>

Response
----------------

HTTP/1.1 500 Internal Server Error

Content-Type: application/soap+xml;charset=UTF-8

Content-Length: 706

<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">
<soapenv:Header></soapenv:Header>
<soapenv:Body>
<soapenv:Fault>
<soapenv:Code>
<soapenv:Value>soapenv:Sender</soapenv:Value>
<soapenv:Subcode>
<soapenv:Value>wsse:SecurityTokenUnavailable</soapenv:Value>
</soapenv:Subcode>
</soapenv:Code>
<soapenv:Reason>
<soapenv:Text xml:lang="en">Security header element is unavailable</soapenv:Text>
</soapenv:Reason>
<soapenv:Detail>
<wsse:ProblemSecurityHeader xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">wsse:Security</wsse:ProblemSecurityHeader>
</soapenv:Detail>
</soapenv:Fault>
</soapenv:Body>
</soapenv:Envelope>