For parameterbased ws-security enabled services, in normal cases when there is no error at the time of invocation (invocation of business logic) of the service, it works fine. So far so good. Now when some error happens at the time of service invocation it does not return SOAP fault back.
I guess this a bug in RampartReceiver/(RampartSender?). Please find rampart_debug.log. See at line 801.