Re: Axis2 1.8.2 with Rampart 1.7.1
robertlazarski <[email protected]> Tue, 11 Oct 2022 10:53:42 -1000
| Newsgroups | gmane.text.xml.axis.user |
|---|---|
| Message-ID | <CABpPLBXVm9UBhgiAGdMsYN9KD=UCfS__O9a=n9iP796A5JeiBw@mail.gmail.com> |
--000000000000558a5205eac87915 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I am working on a new Rampart release now, the goal is by the end of the year. For now, increase your rampart logging by: log4j.category.org.apache.rampart=3DTRACE I also suggest putting all your Axis2 logging at the TRACE level. Let us know if that clarifies the HTTP 403 error. You seem not to be executing your Rampart code. On Tue, Oct 11, 2022 at 9:42 AM Prasanth <[email protected]> wrote: > I have talked to the service provider they don't seem to have access to > the actual request to tell me what is wrong. They keep telling me to make > sure I have username token, nonce and time stamp in the request. > > Looking at the log shouldn't I see the security details in the below SOAP > request? Also when I run it in debug mode there doesn't seem to be a call > back to my password callback class. Is the config I have correct? > > -------------From Log-------------------------------------------- > 2022-10-10 15:18:49,121 [main] DEBUG > org.apache.axis2.transport.http.SOAPMessageFormatter - end writeTo() > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> > "1ed[\r][\n]" > *2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "<?xm= l > version=3D'1.0' encoding=3D'UTF-8'?><soapenv:Envelope > xmlns:soapenv=3D"http://www.w3.org/2003/05/soap-envelope" > <http://www.w3.org/2003/05/soap-envelope>><soapenv:Header/><soapenv:Body>= <ns1:RetrieveFacsimile > xmlns:ns1=3D"http://cdr.ffiec.gov/public/services" > <http://cdr.ffiec.gov/public/services>><ns1:dataSeries>Call</ns1:dataSeri= es><ns1:reportingPeriodEndDate>06/30/2011</ns1:reportingPeriodEndDate><ns1:= fiIDType>FDICCertNumber</ns1:fiIDType><ns1:fiID>57095</ns1:fiID><ns1:facsim= ileFormat>XBRL</ns1:facsimileFormat></ns1:RetrieveFacsimile></soapenv:Body>= </soapenv:Envelope>"* > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> > "[\r][\n]" > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "0" > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> > "[\r][\n]" > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> > "[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << > "<html>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << > "<head><title>403 Forbidden</title></head>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << > "<body>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << > "<center><h1>403 Forbidden</h1></center>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << > "<hr><center>Microsoft-Azure-Application-Gateway/v2</center>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << > "</body>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << > "</html>[\r][\n]" > > ----------------------From axis2.xml--------------------- > <axisconfig name=3D"AxisJava2.0"> > <module ref=3D"rampart" /> > > <!-- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D --> > <!-- Parameters --> > <!-- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D --> > <parameter name=3D"OutflowSecurity"> > <action> > <items>UsernameToken Timestamp</items> > <user>prasanth</user> > > <passwordCallbackClass>com.nqadmin.callreports.client.PasswordCallback</p= asswordCallbackClass> > </action> > </parameter> > > Thanks, > Prasanth > > On 10/11/22 1:29 PM, robertlazarski wrote: > > > > On Mon, Oct 10, 2022 at 10:22 AM Prasanth <[email protected]> > wrote: > >> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << >> "<head><title>403 Forbidden</title></head>[\r][\n]" >> >> Thanks, >> Prasanth >> >> > The error "http 403" means "forbidden" and is a red flag. > > There is something, somewhere, that is denying access to that URL. > > > --000000000000558a5205eac87915 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>I am working on a new Rampart release now, the goal i= s by the end of the year. <br></div><div><br></div><div>For now, increase y= our rampart logging by: <br></div><div><br></div><div><pre class=3D"gmail-c= hatty_body"> log4j.category.org.apache.rampart=3DTRACE<br><br></pre><pre c= lass=3D"gmail-chatty_body">I also suggest putting all your Axis2 logging at= the TRACE level. <br><br></pre><pre class=3D"gmail-chatty_body">Let us kno= w if that clarifies the HTTP 403 error. You seem not to be executing your R= ampart code. <br></pre>=C2=A0</div></div><br><div class=3D"gmail_quote"><di= v dir=3D"ltr" class=3D"gmail_attr">On Tue, Oct 11, 2022 at 9:42 AM Prasanth= <<a href=3D"mailto:[email protected]">[email protected]= </a>> wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:= 0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> =20 =20 =20 <div> <font face=3D"Verdana">I have talked to the service provider they don't seem to have access to the actual request to tell me what i= s wrong. They keep telling me to make sure I have username token, nonce and time stamp in the request. <br> <br> Looking at the log shouldn't I see the security details in the below SOAP request? Also when I run it in debug mode there doesn'= t seem to be a call back to my password callback class.=C2=A0 Is the config I have correct?<br> <br> -------------From Log--------------------------------------------<br> 2022-10-10 15:18:49,121 [main] DEBUG org.apache.axis2.transport.http.SOAPMessageFormatter=C2=A0 - end writeTo()<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content=C2=A0 - >> "1ed[\r][\n]"<br> <b>2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content=C2=A0= - >> "<?xml version=3D'1.0' encoding=3D'UTF-8'?><soapenv:Envelope xmlns:soapenv=3D<a href=3D"http://www.w3.org/2003/05/soap-envelope" target= =3D"_blank">"http://www.w3.org/2003/05/soap-envelope"</a>><= soapenv:Header/><soapenv:Body><ns1:RetrieveFacsimile xmlns:ns1=3D<a href=3D"http://cdr.ffiec.gov/public/services" target=3D"_bla= nk">"http://cdr.ffiec.gov/public/services"</a>><ns1:dataSer= ies>Call</ns1:dataSeries><ns1:reportingPeriodEndDate>06/30/2= 011</ns1:reportingPeriodEndDate><ns1:fiIDType>FDICCertNumber<= ;/ns1:fiIDType><ns1:fiID>57095</ns1:fiID><ns1:facsimileFo= rmat>XBRL</ns1:facsimileFormat></ns1:RetrieveFacsimile></= soapenv:Body></soapenv:Envelope>"</b><b><br> </b>2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content=C2= =A0 - >> "[\r][\n]"<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content=C2=A0 - >> "0"<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content=C2=A0 - >> "[\r][\n]"<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content=C2=A0 - >> "[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "<html>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "<head><title>403 Forbidden</title></head>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "<body>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "<center><h1>403 Forbidden</h1></center>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "<hr><center>Microsoft-Azure-Application-Gateway/v2</ce= nter>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "</body>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "</html>[\r][\n]"<br> </font><br> ----------------------From axis2.xml---------------------<br> <axisconfig name=3D"AxisJava2.0"><br> =C2=A0=C2=A0 =C2=A0<module ref=3D"rampart" /><br> <br> =C2=A0=C2=A0=C2=A0 <!-- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --><br> =C2=A0=C2=A0=C2=A0 <!-- Parameters --><br> =C2=A0=C2=A0=C2=A0 <!-- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --><br> =C2=A0=C2=A0=C2=A0 <parameter name=3D"OutflowSecurity">= <br> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <action><br> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <= items>UsernameToken=C2=A0 Timestamp</items><br> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <= user>prasanth</user><br> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <passwordCallbackClass>com.nqadmin.callreports.client.PasswordCallbac= k</passwordCallbackClass><br> =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 </action><br> =C2=A0=C2=A0=C2=A0 </parameter><br> <br> Thanks,<br> Prasanth<br> <br> <div>On 10/11/22 1:29 PM, robertlazarski wrote:<br> </div> <blockquote type=3D"cite"> =20 <div dir=3D"ltr"> <div dir=3D"ltr"><br> </div> <br> <div class=3D"gmail_quote"> <div dir=3D"ltr" class=3D"gmail_attr">On Mon, Oct 10, 2022 at 10:22 AM Prasanth <<a href=3D"mailto:[email protected]= om" target=3D"_blank">[email protected]</a>> wrote:<br> </div> <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8= ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div> <font face=3D"Verdana">2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content=C2=A0 - << "<head><title>403 Forbidden</title></head>[\r][\n]"<br> <br> Thanks,<br> Prasanth<br> </font><br> </div> </blockquote> <div><br> </div> <div>The error "http 403" means "forbidden" a= nd is a red flag. <br> </div> <div><br> </div> <div>There is something, somewhere, that is denying access to that URL. <br> </div> </div> </div> </blockquote> <br> </div> </blockquote></div> --000000000000558a5205eac87915--