Re: Axis2 1.8.2 with Rampart 1.7.1

Prasanth <[email protected]> Tue, 11 Oct 2022 14:42:37 -0500
Newsgroups gmane.text.xml.axis.user
Message-ID <[email protected]>
--------------g4QQtgD3mgMGDRT15bjHGRhP
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

I have talked to the service provider they don't seem to have access to the actual request to tell me what is wrong. They keep telling me to make sure I have username token, nonce and time stamp in 
the request.

Looking at the log shouldn't I see the security details in the below SOAP request? Also when I run it in debug mode there doesn't seem to be a call back to my password callback class.  Is the config I 
have correct?

-------------From Log--------------------------------------------
2022-10-10 15:18:49,121 [main] DEBUG org.apache.axis2.transport.http.SOAPMessageFormatter  - end writeTo()
2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  - >> "1ed[\r][\n]"
*2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  - >> "<?xml version='1.0' encoding='UTF-8'?><soapenv:Envelope 
xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope"><soapenv:Header/><soapenv:Body><ns1:RetrieveFacsimile 
xmlns:ns1="http://cdr.ffiec.gov/public/services"><ns1:dataSeries>Call</ns1:dataSeries><ns1:reportingPeriodEndDate>06/30/2011</ns1:reportingPeriodEndDate><ns1:fiIDType>FDICCertNumber</ns1:fiIDType><ns1:fiID>57095</ns1:fiID><ns1:facsimileFormat>XBRL</ns1:facsimileFormat></ns1:RetrieveFacsimile></soapenv:Body></soapenv:Envelope>"**
*2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "[\r][\n]"
2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  - >> "0"
2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  - >> "[\r][\n]"
2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  - >> "[\r][\n]"
2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "<html>[\r][\n]"
2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "<head><title>403 Forbidden</title></head>[\r][\n]"
2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "<body>[\r][\n]"
2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "<center><h1>403 Forbidden</h1></center>[\r][\n]"
2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "<hr><center>Microsoft-Azure-Application-Gateway/v2</center>[\r][\n]"
2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "</body>[\r][\n]"
2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "</html>[\r][\n]"

----------------------From axis2.xml---------------------
<axisconfig name="AxisJava2.0">
     <module ref="rampart" />

     <!-- ================================================= -->
     <!-- Parameters -->
     <!-- ================================================= -->
     <parameter name="OutflowSecurity">
         <action>
             <items>UsernameToken  Timestamp</items>
             <user>prasanth</user>
<passwordCallbackClass>com.nqadmin.callreports.client.PasswordCallback</passwordCallbackClass>
         </action>
     </parameter>

Thanks,
Prasanth

On 10/11/22 1:29 PM, robertlazarski wrote:
>
>
> On Mon, Oct 10, 2022 at 10:22 AM Prasanth <[email protected]> wrote:
>
>     2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  - << "<head><title>403 Forbidden</title></head>[\r][\n]"
>
>     Thanks,
>     Prasanth
>
>
> The error "http 403" means "forbidden" and is a red flag.
>
> There is something, somewhere, that is denying access to that URL.

--------------g4QQtgD3mgMGDRT15bjHGRhP
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <font face="Verdana">I have talked to the service provider they
      don't seem to have access to the actual request to tell me what is
      wrong. They keep telling me to make sure I have username token,
      nonce and time stamp in the request. <br>
      <br>
      Looking at the log shouldn't I see the security details in the
      below SOAP request? Also when I run it in debug mode there doesn't
      seem to be a call back to my password callback class.  Is the
      config I have correct?<br>
      <br>
      -------------From Log--------------------------------------------<br>
      2022-10-10 15:18:49,121 [main] DEBUG
      org.apache.axis2.transport.http.SOAPMessageFormatter  - end
      writeTo()<br>
      2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  -
      &gt;&gt; "1ed[\r][\n]"<br>
      <b>2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  -
        &gt;&gt; "&lt;?xml version='1.0'
        encoding='UTF-8'?&gt;&lt;soapenv:Envelope
xmlns:soapenv=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2003/05/soap-envelope">"http://www.w3.org/2003/05/soap-envelope"</a>&gt;&lt;soapenv:Header/&gt;&lt;soapenv:Body&gt;&lt;ns1:RetrieveFacsimile
xmlns:ns1=<a class="moz-txt-link-rfc2396E" href="http://cdr.ffiec.gov/public/services">"http://cdr.ffiec.gov/public/services"</a>&gt;&lt;ns1:dataSeries&gt;Call&lt;/ns1:dataSeries&gt;&lt;ns1:reportingPeriodEndDate&gt;06/30/2011&lt;/ns1:reportingPeriodEndDate&gt;&lt;ns1:fiIDType&gt;FDICCertNumber&lt;/ns1:fiIDType&gt;&lt;ns1:fiID&gt;57095&lt;/ns1:fiID&gt;&lt;ns1:facsimileFormat&gt;XBRL&lt;/ns1:facsimileFormat&gt;&lt;/ns1:RetrieveFacsimile&gt;&lt;/soapenv:Body&gt;&lt;/soapenv:Envelope&gt;"</b><b><br>
      </b>2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content 
      - &gt;&gt; "[\r][\n]"<br>
      2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  -
      &gt;&gt; "0"<br>
      2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  -
      &gt;&gt; "[\r][\n]"<br>
      2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content  -
      &gt;&gt; "[\r][\n]"<br>
      2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  -
      &lt;&lt; "&lt;html&gt;[\r][\n]"<br>
      2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  -
      &lt;&lt; "&lt;head&gt;&lt;title&gt;403
      Forbidden&lt;/title&gt;&lt;/head&gt;[\r][\n]"<br>
      2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  -
      &lt;&lt; "&lt;body&gt;[\r][\n]"<br>
      2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  -
      &lt;&lt; "&lt;center&gt;&lt;h1&gt;403
      Forbidden&lt;/h1&gt;&lt;/center&gt;[\r][\n]"<br>
      2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  -
      &lt;&lt;
"&lt;hr&gt;&lt;center&gt;Microsoft-Azure-Application-Gateway/v2&lt;/center&gt;[\r][\n]"<br>
      2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  -
      &lt;&lt; "&lt;/body&gt;[\r][\n]"<br>
      2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content  -
      &lt;&lt; "&lt;/html&gt;[\r][\n]"<br>
    </font><br>
    ----------------------From axis2.xml---------------------<br>
    &lt;axisconfig name="AxisJava2.0"&gt;<br>
        &lt;module ref="rampart" /&gt;<br>
    <br>
        &lt;!-- ================================================= --&gt;<br>
        &lt;!-- Parameters --&gt;<br>
        &lt;!-- ================================================= --&gt;<br>
        &lt;parameter name="OutflowSecurity"&gt;<br>
            &lt;action&gt;<br>
                &lt;items&gt;UsernameToken  Timestamp&lt;/items&gt;<br>
                &lt;user&gt;prasanth&lt;/user&gt;<br>
               
&lt;passwordCallbackClass&gt;com.nqadmin.callreports.client.PasswordCallback&lt;/passwordCallbackClass&gt;<br>
            &lt;/action&gt;<br>
        &lt;/parameter&gt;<br>
    <br>
    Thanks,<br>
    Prasanth<br>
    <br>
    <div class="moz-cite-prefix">On 10/11/22 1:29 PM, robertlazarski
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CABpPLBW1g9MZHtonuCVa=xUj4LkU6vnoE1y59TXwDKYQ+JbR0Q@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div dir="ltr"><br>
        </div>
        <br>
        <div class="gmail_quote">
          <div dir="ltr" class="gmail_attr">On Mon, Oct 10, 2022 at
            10:22 AM Prasanth &lt;<a
              href="mailto:[email protected]"
              moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>&gt;
            wrote:<br>
          </div>
          <blockquote class="gmail_quote" style="margin:0px 0px 0px
            0.8ex;border-left:1px solid
            rgb(204,204,204);padding-left:1ex">
            <div> <font face="Verdana">2022-10-10 15:18:49,171 [main]
                DEBUG httpclient.wire.content  - &lt;&lt;
                "&lt;head&gt;&lt;title&gt;403
                Forbidden&lt;/title&gt;&lt;/head&gt;[\r][\n]"<br>
                <br>
                Thanks,<br>
                Prasanth<br>
              </font><br>
            </div>
          </blockquote>
          <div><br>
          </div>
          <div>The error "http 403" means "forbidden" and is a red flag.
            <br>
          </div>
          <div><br>
          </div>
          <div>There is something, somewhere, that is denying access to
            that URL. <br>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------g4QQtgD3mgMGDRT15bjHGRhP--