Re: Axis2 1.8.2 with Rampart 1.7.1
Prasanth <[email protected]> Tue, 11 Oct 2022 16:26:29 -0500
| Newsgroups | gmane.text.xml.axis.user |
|---|---|
| Message-ID | <[email protected]> |
--------------JZ0FvLjP0YywBGNyI8L0oV8Z Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Eclipse doesn't download the mar file when using the maven plugin so I had manually download it and save it. It was still using 1.7.1 (while I downgraded the rampart version to 1.6.4 in the pom). After manually downloading the mar file and including it in the build path the security elements are now added. I am still getting the 403 error. At least I have the full soap message with the usernameToken and Timestamp that I can send to the service provider. Appreciate your help. Thanks, Prasanth On 10/11/22 3:53 PM, robertlazarski wrote: > I am working on a new Rampart release now, the goal is by the end of the year. > > For now, increase your rampart logging by: > > log4j.category.org.apache.rampart=TRACE > > I also suggest putting all your Axis2 logging at the TRACE level. > > Let us know if that clarifies the HTTP 403 error. You seem not to be executing your Rampart code. > > On Tue, Oct 11, 2022 at 9:42 AM Prasanth <[email protected]> wrote: > > I have talked to the service provider they don't seem to have access to the actual request to tell me what is wrong. They keep telling me to make sure I have username token, nonce and time stamp > in the request. > > Looking at the log shouldn't I see the security details in the below SOAP request? Also when I run it in debug mode there doesn't seem to be a call back to my password callback class. Is the > config I have correct? > > -------------From Log-------------------------------------------- > 2022-10-10 15:18:49,121 [main] DEBUG org.apache.axis2.transport.http.SOAPMessageFormatter - end writeTo() > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "1ed[\r][\n]" > *2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "<?xml version='1.0' encoding='UTF-8'?><soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope" > <http://www.w3.org/2003/05/soap-envelope>><soapenv:Header/><soapenv:Body><ns1:RetrieveFacsimile xmlns:ns1="http://cdr.ffiec.gov/public/services" > <http://cdr.ffiec.gov/public/services>><ns1:dataSeries>Call</ns1:dataSeries><ns1:reportingPeriodEndDate>06/30/2011</ns1:reportingPeriodEndDate><ns1:fiIDType>FDICCertNumber</ns1:fiIDType><ns1:fiID>57095</ns1:fiID><ns1:facsimileFormat>XBRL</ns1:facsimileFormat></ns1:RetrieveFacsimile></soapenv:Body></soapenv:Envelope>"** > *2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "[\r][\n]" > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "0" > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "[\r][\n]" > 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<html>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<head><title>403 Forbidden</title></head>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<body>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<center><h1>403 Forbidden</h1></center>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<hr><center>Microsoft-Azure-Application-Gateway/v2</center>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "</body>[\r][\n]" > 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "</html>[\r][\n]" > > ----------------------From axis2.xml--------------------- > <axisconfig name="AxisJava2.0"> > <module ref="rampart" /> > > <!-- ================================================= --> > <!-- Parameters --> > <!-- ================================================= --> > <parameter name="OutflowSecurity"> > <action> > <items>UsernameToken Timestamp</items> > <user>prasanth</user> > <passwordCallbackClass>com.nqadmin.callreports.client.PasswordCallback</passwordCallbackClass> > </action> > </parameter> > > Thanks, > Prasanth > > On 10/11/22 1:29 PM, robertlazarski wrote: >> >> >> On Mon, Oct 10, 2022 at 10:22 AM Prasanth <[email protected]> wrote: >> >> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<head><title>403 Forbidden</title></head>[\r][\n]" >> >> Thanks, >> Prasanth >> >> >> The error "http 403" means "forbidden" and is a red flag. >> >> There is something, somewhere, that is denying access to that URL. > --------------JZ0FvLjP0YywBGNyI8L0oV8Z Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body> <font face="Verdana">Eclipse doesn't download the mar file when using the maven plugin so I had manually download it and save it. It was still using 1.7.1 (while I downgraded the rampart version to 1.6.4 in the pom). After manually downloading the mar file and including it in the build path the security elements are now added. I am still getting the 403 error. At least I have the full soap message with the usernameToken and Timestamp that I can send to the service provider. <br> <br> Appreciate your help.<br> <br> Thanks,<br> Prasanth</font><br> <br> <div class="moz-cite-prefix">On 10/11/22 3:53 PM, robertlazarski wrote:<br> </div> <blockquote type="cite" cite="mid:CABpPLBXVm9UBhgiAGdMsYN9KD=UCfS__O9a=n9iP796A5JeiBw@mail.gmail.com"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr"> <div>I am working on a new Rampart release now, the goal is by the end of the year. <br> </div> <div><br> </div> <div>For now, increase your rampart logging by: <br> </div> <div><br> </div> <div> <pre class="gmail-chatty_body"> log4j.category.org.apache.rampart=TRACE </pre> <pre class="gmail-chatty_body">I also suggest putting all your Axis2 logging at the TRACE level. </pre> <pre class="gmail-chatty_body">Let us know if that clarifies the HTTP 403 error. You seem not to be executing your Rampart code. </pre> </div> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">On Tue, Oct 11, 2022 at 9:42 AM Prasanth <<a href="mailto:[email protected]" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>> wrote:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div> <font face="Verdana">I have talked to the service provider they don't seem to have access to the actual request to tell me what is wrong. They keep telling me to make sure I have username token, nonce and time stamp in the request. <br> <br> Looking at the log shouldn't I see the security details in the below SOAP request? Also when I run it in debug mode there doesn't seem to be a call back to my password callback class. Is the config I have correct?<br> <br> -------------From Log--------------------------------------------<br> 2022-10-10 15:18:49,121 [main] DEBUG org.apache.axis2.transport.http.SOAPMessageFormatter - end writeTo()<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "1ed[\r][\n]"<br> <b>2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "<?xml version='1.0' encoding='UTF-8'?><soapenv:Envelope xmlns:soapenv=<a href="http://www.w3.org/2003/05/soap-envelope" target="_blank" moz-do-not-send="true">"http://www.w3.org/2003/05/soap-envelope"</a>><soapenv:Header/><soapenv:Body><ns1:RetrieveFacsimile xmlns:ns1=<a href="http://cdr.ffiec.gov/public/services" target="_blank" moz-do-not-send="true">"http://cdr.ffiec.gov/public/services"</a>><ns1:dataSeries>Call</ns1:dataSeries><ns1:reportingPeriodEndDate>06/30/2011</ns1:reportingPeriodEndDate><ns1:fiIDType>FDICCertNumber</ns1:fiIDType><ns1:fiID>57095</ns1:fiID><ns1:facsimileFormat>XBRL</ns1:facsimileFormat></ns1:RetrieveFacsimile></soapenv:Body></soapenv:Envelope>"</b><b><br> </b>2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "[\r][\n]"<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "0"<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "[\r][\n]"<br> 2022-10-10 15:18:49,121 [main] DEBUG httpclient.wire.content - >> "[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<html>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<head><title>403 Forbidden</title></head>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<body>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<center><h1>403 Forbidden</h1></center>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<hr><center>Microsoft-Azure-Application-Gateway/v2</center>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "</body>[\r][\n]"<br> 2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "</html>[\r][\n]"<br> </font><br> ----------------------From axis2.xml---------------------<br> <axisconfig name="AxisJava2.0"><br> <module ref="rampart" /><br> <br> <!-- ================================================= --><br> <!-- Parameters --><br> <!-- ================================================= --><br> <parameter name="OutflowSecurity"><br> <action><br> <items>UsernameToken Timestamp</items><br> <user>prasanth</user><br> <passwordCallbackClass>com.nqadmin.callreports.client.PasswordCallback</passwordCallbackClass><br> </action><br> </parameter><br> <br> Thanks,<br> Prasanth<br> <br> <div>On 10/11/22 1:29 PM, robertlazarski wrote:<br> </div> <blockquote type="cite"> <div dir="ltr"> <div dir="ltr"><br> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">On Mon, Oct 10, 2022 at 10:22 AM Prasanth <<a href="mailto:[email protected]" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>> wrote:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div> <font face="Verdana">2022-10-10 15:18:49,171 [main] DEBUG httpclient.wire.content - << "<head><title>403 Forbidden</title></head>[\r][\n]"<br> <br> Thanks,<br> Prasanth<br> </font><br> </div> </blockquote> <div><br> </div> <div>The error "http 403" means "forbidden" and is a red flag. <br> </div> <div><br> </div> <div>There is something, somewhere, that is denying access to that URL. <br> </div> </div> </div> </blockquote> <br> </div> </blockquote> </div> </blockquote> <br> </body> </html> --------------JZ0FvLjP0YywBGNyI8L0oV8Z--