<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">

<div>
        <table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
                <tbody>
                        <tr>

                                <td>

                                        <table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
                                                <tbody>
                                                        <tr>
                                                                <td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
                                                                        <h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
                                                                        <!-- To have a header image/logo replace the name below with your img tag -->
                                                                        <!-- Email clients will render the images when the message is read so any image -->
                                                                        <!-- must be made available on a public server, so that all recipients can load the image. -->
                                                                        <a href="https://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
                                                                </td>

                                                        </tr>
                                                        <tr>
                                                                <td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px;  -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
    MustUnderstand error with security
</h3>
<span style="margin-bottom: 10px;">
    created by <a href="https://community.jboss.org/people/meetoblivion">John Ament</a> in <i>JBoss Web Services</i> - <a href="https://community.jboss.org/message/787399#787399">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">

<div class="jive-rendered-content"><p>Hi All</p><p style="min-height: 8pt; height: 8pt; padding: 0px;">&#160;</p><p>I am trying to build out a Security based web service, based on this example:</p><p><a class="jive-link-external-small" href="https://docs.jboss.org/author/display/JBWS/WS-Security#WS-Security-Authenticationandauthorization" target="_blank">https://docs.jboss.org/author/display/JBWS/WS-Security#WS-Security-Authenticationandauthorization</a></p><p style="min-height: 8pt; height: 8pt; padding: 0px;">&#160;</p><p>When I follow this example, I try to post a document to the deployed service.&#160; Here is that document:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;">&#160;</p><p>Headers: {accept-encoding=[gzip,deflate], Authorization=[Basic am9obi5kLmFtZW50QGdtYWlsLmNvbTphYmMxMjM=], connection=[Keep-Alive], Content-Length=[1059], content-type=[text/xm</p><p>l;charset=UTF-8], host=[SSI11021:8082], SOAPAction=[""], user-agent=[Apache-HttpClient/4.1.1 (java 1.5)]}</p><p><span>Payload: &lt;soapenv:Envelope xmlns:sec="</span><a class="jive-link-external-small" href="http://secure.mycompany.com/" target="_blank">http://secure.mycompany.com/</a><span>" xmlns:soapenv="</span><a class="jive-link-external-small" href="http://schemas.xmlsoap.org/soap/envelope/" target="_blank">http://schemas.xmlsoap.org/soap/envelope/</a><span>"&gt;</span></p><p><span>&#160;&#160; &lt;soapenv:Header&gt;&lt;wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="</span><a class="jive-link-external-small" href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" target="_blank">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd</a><span>" </span></p><p><span>&#160;&#160; xmlns:wsu="</span><a class="jive-link-external-small" href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" target="_blank">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd</a><span>"&gt;</span></p><p>&#160;&#160; &lt;wsse:UsernameToken wsu:Id="UsernameToken-6"&gt;</p><p>&#160;&#160;&#160;&#160; &#160;&#160;&#160;&#160;&#160;&lt;wsse:Username&gt;myusername&lt;/wsse:Username&gt;</p><p><span>&#160;&#160;&#160;&#160; &#160;&#160;&#160;&#160;&#160;&lt;wsse:Password Type="</span><a class="jive-link-external-small" href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest" target="_blank">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest</a><span>"&gt;aCuq2iVcyJ5AvUBw/FLrBkjNpgM=&lt;/wsse:Password&gt;</span></p><p><span>&#160;&#160;&#160;&#160; &#160;&#160;&#160;&#160;&#160;&lt;wsse:NonceEncodingType="</span><a class="jive-link-external-small" href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" target="_blank">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary</a><span>"&gt;rm4xHQrLQiO+9Zdf2nIA2Q==&lt;/wsse:Nonce&gt;</span></p><p>&#160;&#160;&#160;&#160; &#160;&#160;&#160;&#160;&#160;&lt;wsu:Created&gt;2013-01-03T17:40:43.245Z&lt;/wsu:Created&gt;</p><p>&#160;&#160; &lt;/wsse:UsernameToken&gt;</p><p>&#160;&#160; &lt;/wsse:Security&gt;</p><p>&#160;&#160; &lt;/soapenv:Header&gt;</p><p>&#160;&#160; &lt;soapenv:Body&gt;</p><p>&#160;&#160;&#160;&#160;&#160; &lt;sec:sayHello&gt;</p><p>&#160;&#160;&#160;&#160;&#160;&#160;&#160;&#160; &lt;!--Optional:--&gt;</p><p>&#160;&#160;&#160;&#160;&#160;&#160;&#160;&#160; &lt;arg0&gt;Bob&lt;/arg0&gt;</p><p>&#160;&#160;&#160;&#160;&#160; &lt;/sec:sayHello&gt;</p><p>&#160;&#160; &lt;/soapenv:Body&gt;</p><p>&lt;/soapenv:Envelope&gt;</p><p style="min-height: 8pt; height: 8pt; padding: 0px;">&#160;</p><p><span>12:40:43,493 WARNING [org.apache.cxf.phase.PhaseInterceptorChain] (http--0.0.0.0-8082-2) Interceptor for {</span><a class="jive-link-external-small" href="http://secure.mycompany.com/" target="_blank">http://secure.mycompany.com/</a><span>}ServiceImplService#{</span><a class="jive-link-external-small" href="http://secure.mycompany.com/" target="_blank">http://secure.mycompany.com/</a><span>}sayHello has thrown exception, unwinding now: org.apache.cxf.binding.soap.SoapFault: MustUnderstand headers: [{</span><a class="jive-link-external-small" href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" target="_blank">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd</a><span>}Security] are not understood.</span></p><p style="min-height: 8pt; height: 8pt; padding: 0px;">&#160;</p><p>This results in no credentials being passed to the webservice.</p></div>

<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
    <p style="margin: 0;">Reply to this message by <a href="https://community.jboss.org/message/787399#787399">going to Community</a></p>
        <p style="margin: 0;">Start a new discussion in JBoss Web Services at <a href="https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2044">Community</a></p>
</div></td>
                        </tr>
                    </tbody>
                </table>


                </td>
            </tr>
        </tbody>
    </table>

</div>

</body>
</html>