[RAMPART-374] Not Able to use custom validator for USERNAME_TOKEN during server side validation

• Type: Bug
• Status: In Progress
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.6.2
• Component/s: rampart-core
• Labels: axis21.6 rampart1.6.2
• Environment: Windows 7 Enterprise Service pack 1, jboss-5.1.0.GA, axis2-1.6.2 (exploded war), rampart-1.6.2
• Assignee: Amila Jayasekara
• Reporter: AravindPS
• Created: 14/Jun/12 10:44
• Updated: 30/Jan/14 12:24

Description

Hi,
We are upgrading from Axis2 1.5.5/ Rampart 1.5.11 to axis2 1.6.2/Rampart1.6.2. Here we have seen that the USERNAME_TOKEN_UNKNOWN has been deprecated and hence there is no backward compatibility. At this late stage we cannot implement the code to provide passwords at the server password callback class. So we have a problem.

The server password callback class is asking for the password. We have designed the services such that for username token authentication we are sending the request to another directory store for authentication.
Is there a way to process this without giving the password at server side. Can we configure custom validators to pass the authentication for USERNAME_TOKEN without validating the passwords?
If yes can you tell us how to write/configure custom validators?
Also, if there is any other solution do let us know.

Thanks,
Aravind