yusuf kurt [
http://community.jboss.org/people/ykurttr] created the discussion
"password hash values do not match"
To view the discussion, visit:
http://community.jboss.org/message/536544#536544
--------------------------------------------------------------
Hi, this is my first post on jboss community,
I searched the forum and google but unfortunately could not find an answer to my
question.
I have created a ws-secure webservice with jbossws on jboss 5.1.0 with username/password
authentication
I am expecting a username and a digested password according to wss-usernametoken profile
from my clients,
i successfully created a jbossws-client application which sends username/digested password
and is authenticated via my custom usernamepasswordloginmodule.
But one of my webservice client which is implemented by Axis c++ library can not be
authenticated although it sends right credentials.When i checked the incoming soap
messages both for jbossws client and axis client, i noticed that axis client nonce value
is not encoded with BASE64 whilst jbossws nonce value is encoded with BASE64. As a result
the created password hash by jbossws client matched the expected password but axis client
did not.
Then i checked the document for creation of nonce from oasis.
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-pr...
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-pr...
starting from line 129, it says that:
Note that the nonce is hashed using the octet sequence of its decoded value while the
timestamp
is hashed using the octet sequence of its UTF8 encoding as specified in the contents of
the
element.
Note that the nonce is hashed using the octet sequence of its decoded value while the
timestamp
is hashed using the octet sequence of its UTF8 encoding as specified in the contents of
the
element.
Now i am confused, how must be the cretaed nonce, encoded, or plain or decoded(how); is
there a conflict with standarts or am i or is axis missing some point?
thank you in advence...
--------------------------------------------------------------
Reply to this message by going to Community
[
http://community.jboss.org/message/536544#536544]
Start a new discussion in JBoss Web Services at Community
[
http://community.jboss.org/choose-container!input.jspa?contentType=1&...]