MQSeries.net :: View topic - WS-Security with SOAP Request Node

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » WS-Security with SOAP Request Node

WS-Security with SOAP Request Node

« View previous topic :: View next topic »

Author

Message

wbisantosh

Posted: Fri Aug 16, 2013 11:29 am Post subject: WS-Security with SOAP Request Node

Apprentice

Joined: 12 Nov 2012
Posts: 47

Hi Experts,

I have a Webservice to consume, which is Security enabled and Here is the Soap header i will need to pass to make a successful connection

Code:

<soap:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss
/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsu:Timestamp wsu:Id="TS-12">
<wsu:Created>2013-08-16T16:11:16.124Z</wsu:Created>
<wsu:Expires>2013-08-16T16:36:16.124Z</wsu:Expires>
</wsu:Timestamp>
<wsse:UsernameToken wsu:Id="UsernameToken-11">
<wsse:Username>UserName</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">Password</wsse:Password>
<wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">Nonce</wsse:Nonce>
<wsu:Created>2013-08-09T14:58:23.666Z</wsu:Created>
</wsse:UsernameToken> </wsse:Security>
</soap:Header>

I am able to consume the Webservice using SoapUI and to test the connectivity from WMB, I have copied the Request from SoapUI(including the Header) to a file and read it in the Message Flow, passed it to the Soap Request node and I get a valid Response.

Problem - I am not able to make a successful connection when I try to create the Header part in the Compute node. I have looked at the other posts made on this topic and tried these,
1. Created a Default Security profile with propagation=True
2. used this code in the Compute

Code:

SET OutputRoot.Properties.IdentitySourceType = 'usernameAndPassword';
SET OutputRoot.Properties.IdentitySourceToken = 'UserName';
SET OutputRoot.Properties.IdentitySourcePassword = 'Password';

3. Also tried this

Code:

SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.(SOAP.NamespaceDecl)wsse = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.(SOAP.NamespaceDecl)wsu = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsu:Timestamp.(SOAP.Attribute)wsu:Id = 'TS-12';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsu:Timestamp.wsu:Created = CAST(CURRENT_GMTTIMESTAMP AS CHARACTER FORMAT 'IU');
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsu:Timestamp.wsu:Expires = CAST((CURRENT_GMTTIMESTAMP + INTERVAL '25' MINUTE) AS CHARACTER FORMAT 'IU');
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.(SOAP.Attribute)wsu:Id = 'UsernameToken-11';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Username = 'Username';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Password.(SOAP.Attribute)Type = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Password = 'Password';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Nonce.(SOAP.Attribute)EncodingType = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Nonce = 'NONCE';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsu:Created = CAST(CURRENT_GMTTIMESTAMP AS CHARACTER FORMAT 'IU');

Any advise would be highly appreciated

lancelotlinc

Posted: Fri Aug 16, 2013 11:32 am Post subject:

Jedi Knight

Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA

soap:Envelope is not needed. Remove it from your statements.

Have you attended the training? This topic is covered in-depth there.

Code:

SET OutputRoot.SOAP.Header....

http://publib.boulder.ibm.com/infocenter/wmbhelp/v8r0m0/index.jsp?topic=%2Fcom.ibm.etools.mft.doc%2Fac55790_.htm

You really need to acquire the skill to accomplish this task. It seems you are in over your head. What's your plan?
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER

Tibor

Posted: Sat Aug 17, 2013 5:55 am Post subject:

Grand Master

Joined: 20 May 2001
Posts: 1033
Location: Hungary

This is a very good article in this topic (with samples): http://www.ibm.com/developerworks/websphere/library/techarticles/1008_fan/1008_fan.html

Simbu

Posted: Sat Aug 17, 2013 7:20 am Post subject:

Master

Joined: 17 Jun 2011
Posts: 289
Location: Tamil Nadu, India

Another useful link.

Webcast replay: WebSphere Message Broker - Security in SOAP nodes

http://www-01.ibm.com/support/docview.wss?uid=swg27015721

wbisantosh

Posted: Sun Aug 18, 2013 2:32 pm Post subject:

Apprentice

Joined: 12 Nov 2012
Posts: 47

Thank You for the Reply!

@lancelotlinc, I have changed it is still the same.

@Tibor, The article do not include the SoapRequest WS-Security Topic

@Simbu, Your link gives me a 500

I am little confused here, I was able to get good response when I copy header (without manipulating in Compute) from the SoapUI Request and when I try create the same headers in ESQL, I am not able to make the call.

As, I am able to consume it without using Security Policy or policy binding( with SoapUI Reqest payload), do I have to use them when I create the headers in the Compute Node ?

Thanks

Tibor

Posted: Sun Aug 18, 2013 11:05 pm Post subject:

Grand Master

Joined: 20 May 2001
Posts: 1033
Location: Hungary

Quote:

In case of that you should insert a Trace node before the SoapRequest and compare the outputs (or post them for revising).

Simbu

Posted: Sun Aug 18, 2013 11:51 pm Post subject:

Master

Joined: 17 Jun 2011
Posts: 289
Location: Tamil Nadu, India

wbisantosh wrote:

I am little confused here, I was able to get good response when I copy header (without manipulating in Compute) from the SoapUI Request and when I try create the same headers in ESQL, I am not able to make the call.

As, I am able to consume it without using Security Policy or policy binding( with SoapUI Reqest payload), do I have to use them when I create the headers in the Compute Node ?

Also you can use TCP/IPMonitor in WMB Toolkit to see what your SOAPRequest node is actually sending to the provider.

mqjeff

Posted: Mon Aug 19, 2013 6:36 am Post subject:

Grand Master

Joined: 25 Jun 2008
Posts: 17447

Simbu wrote:

Also you can use TCP/IPMonitor in WMB Toolkit to see what your SOAPRequest node is actually sending to the provider.

That probably doesn't help with SSL.

wbisantosh - I've seen a number of posts here discussing issues with webservices and Nonce headers. You might do some searching and see if there's further information of use.

wbisantosh

Posted: Mon Aug 19, 2013 8:09 am Post subject:

Apprentice

Joined: 12 Nov 2012
Posts: 47

Thank you very much for the replies

@Tibor I have tried that and I noticed the only difference in the type of Field for Password and Nonce (they were declared as Folder, when I created it in ESQL) and they were PCDATA while i passthru the SoapUI Request(from File)
I changed that and still expericen the issue

@simbu and @mqjeff That is true. TCP/IP Monitor is not working as my Company is little more protective and the only way I could connect to the Provide is from the DEV Server

and @mqjeff, I will keep looking

Here is what I have tried,
1. I have tried to create the Envelope using the following ESQL and I get
"SOAP tree cannot be serialized"

Code:

CREATE LASTCHILD of OutputRoot DOMAIN 'SOAP' Name 'SOAP';
   CREATE FIRSTCHILD OF OutputRoot.SOAP DOMAIN 'SOAP' NAME 'Context';
   CREATE LASTCHILD OF OutputRoot.SOAP DOMAIN 'SOAP' NAME 'Header';
   CREATE LASTCHILD OF OutputRoot.SOAP DOMAIN 'SOAP' NAME 'Body';

   SET OutputRoot.SOAP.Context.SOAP_Version = '1.2';
   SET OutputRoot.SOAP.Context.Namespace.xml = 'http://www.w3.org/XML/1998/namespace';
   SET OutputRoot.SOAP.Context.Namespace.soapenv = 'http://www.w3.org/2003/05/soap-envelope';
   SET OutputRoot.SOAP.Context._XmlDeclaration.Version = '1.0';
   SET OutputRoot.SOAP.Context._XmlDeclaration.Encoding = 'UTF-8';

   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)soap = 'http://www.w3.org/2003/05/soap-envelope';
   CALL createWSSE();
   CALL namespaceDeclaration();
   --SET OutputRoot.SOAP.Body = InputRoot.XMLNSC.soap:Envelope.soap:Body;
   SET OutputRoot.SOAP.Body.ApplicantEligibilityRequest = InputRoot.XMLNSC.[<];

CREATE PROCEDURE namespaceDeclaration() BEGIN

   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)xmlns:soap = 'http://www.w3.org/2003/05/soap-envelope';
   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)xmlns:hix = 'http://hix.cms.gov/0.1/hix-core';
   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)xmlns:ns = 'http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0';
   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)xmlns:"ns1" = 'http://niem.gov/niem/structures/2.0';
   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)xmlns:"ns2" = 'http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0';
   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)xmlns:"ns3" = 'http://niem.gov/niem/niem-core/2.0';
   SET OutputRoot.SOAP.(SOAP.NamespaceDecl)xmlns:"s" = 'http://niem.gov/niem/structures/2.0';

END;

CREATE PROCEDURE createWSSE() BEGIN
   SET OutputRoot.SOAP.Header.wsse:Security.(SOAP.NamespaceDecl)wsse = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd';
   SET OutputRoot.SOAP.Header.wsse:Security.(SOAP.NamespaceDecl)wsu = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd';
   SET OutputRoot.SOAP.Header.wsse:Security.wsu:Timestamp.(SOAP.Attribute)wsu:Id = 'TS-12';
   SET OutputRoot.SOAP.Header.wsse:Security.wsu:Timestamp.wsu:Created = CAST(CURRENT_GMTTIMESTAMP AS CHARACTER FORMAT 'IU');
   SET OutputRoot.SOAP.Header.wsse:Security.wsu:Timestamp.wsu:Expires = CAST((CURRENT_GMTTIMESTAMP + INTERVAL '25' MINUTE) AS CHARACTER FORMAT 'IU');
   SET OutputRoot.SOAP.Header.wsse:Security.wsse:UsernameToken.(SOAP.Attribute)wsu:Id = 'UsernameToken-11';
   SET OutputRoot.SOAP.Header.wsse:Security.wsse:UsernameToken.wsse:Username = 'ID';
   SET OutputRoot.SOAP.Header.wsse:Security.wsse:UsernameToken.wsse:Password.(SOAP.Attribute)Type = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest';
   SET OutputRoot.SOAP.Header.wsse:Security.wsse:UsernameToken.wsse:Password = 'pwd';
   SET OutputRoot.SOAP.Header.wsse:Security.wsse:UsernameToken.wsse:Nonce.(SOAP.Attribute)EncodingType = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary';
   SET OutputRoot.SOAP.Header.wsse:Security.wsse:UsernameToken.wsse:Nonce = 'jpeqkW1bjiJaEvkD7uEaDA==';
   SET OutputRoot.SOAP.Header.wsse:Security.wsse:UsernameToken.wsu:Created = CAST(CURRENT_GMTTIMESTAMP AS CHARACTER FORMAT 'IU');
END;

2. I also tried setting these,
a. In ESQL,

Code:

--SET OutputRoot.Properties.IdentitySourceType='usernameAndPassword';
--SET OutputRoot.Properties.IdentitySourceToken = 'ID';
--SET OutputRoot.Properties.IdentitySourcePassword = 'pwd';

b. Ran these commands on Broker ,

Code:

mqsisetdbparms BRKDWMB05 -n FFMSecurityID -u "ID" -p "pwd"

mqsicreateconfigurableservice BRKDWMB05 -c SecurityProfiles -o FFMSProfile -n "propagation,idToPropagateToTransport,transportPropagationConfig" -v "TRUE,STATIC ID,FFMSecurityID"

mqsiapplybaroverride -b "C:\Users\b\IBM\wmbt80\workspace\SAMPLE\SAMPLE.bar" -k SAMPLE -m "SAMPLEMF#SOAP Request.securityProfileName=FFMSProfile"

And Set the Security profile in the BAR file

And the password type I have to pass is a "passwordDigest"

Welcome for Suggestions [/code]

fjb_saper

Posted: Mon Aug 19, 2013 9:30 am Post subject:

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

I see you doing the xml declarations for the namespace, what I do miss in your code however is the corresponding ESQL namespace declaration.

The way you did your namespace declarations allows for the declaration and prefixing in the output. It does not translate into prefixing in the code. For that you need the ESQL namespace declaration.

Have fun

_________________
MQ & Broker admin

wbisantosh

Posted: Mon Aug 19, 2013 9:40 am Post subject:

Apprentice

Joined: 12 Nov 2012
Posts: 47

@fjb_saper, You mean these ?

Code:

DECLARE soap NAMESPACE 'http://www.w3.org/2003/05/soap-envelope';
DECLARE hix NAMESPACE 'http://hix.cms.gov/0.1/hix-core';
DECLARE ns NAMESPACE 'http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0';
DECLARE ns1 NAMESPACE 'http://niem.gov/niem/structures/2.0';
DECLARE ns2 NAMESPACE 'http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0';
DECLARE ns3 NAMESPACE 'http://niem.gov/niem/niem-core/2.0';
DECLARE s NAMESPACE 'http://niem.gov/niem/structures/2.0';
DECLARE wsse NAMESPACE 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd';
DECLARE wsu NAMESPACE 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd';

If yes, Sorry for not including them in the presious post (they were buried at the top of the ESQL File

wbisantosh

Posted: Mon Aug 19, 2013 9:42 am Post subject:

Apprentice

Joined: 12 Nov 2012
Posts: 47

Here are the trace node outputs,

1. This is working,

Code:

( ['GENERICROOT' : 0x3ff948f47c0]
(0x01000000:Name ):Properties = ( ['GENERICPROPERTYPARSER' : 0x3ff94573cb0]
(0x03000000:NameValue):MessageSet = '' (CHARACTER)
(0x03000000:NameValue):MessageType = '' (CHARACTER)
(0x03000000:NameValue):MessageFormat = '' (CHARACTER)
(0x03000000:NameValue):Encoding = 273 (INTEGER)
(0x03000000:NameValue):CodedCharSetId = 1208 (INTEGER)
(0x03000000:NameValue):Transactional = FALSE (BOOLEAN)
(0x03000000:NameValue):Persistence = FALSE (BOOLEAN)
(0x03000000:NameValue):CreationTime = GMTTIMESTAMP '2013-08-19 17:33:27.116979' (GMTTIMESTAMP)
(0x03000000:NameValue):ExpirationTime = -1 (INTEGER)
(0x03000000:NameValue):Priority = 0 (INTEGER)
(0x03000000:NameValue):ReplyIdentifier = X'' (BLOB)
(0x03000000:NameValue):ReplyProtocol = 'SOAP-HTTP' (CHARACTER)
(0x03000000:NameValue):Topic = NULL
(0x03000000:NameValue):ContentType = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourceType = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourceToken = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourcePassword = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourceIssuedBy = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedType = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedToken = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedPassword = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedIssuedBy = '' (CHARACTER)
)
(0x01000000:Folder):XMLNSC = ( ['xmlnsc' : 0x3ff949f9590]
(0x01000000:Folder)http://www.w3.org/2003/05/soap-envelope:Envelope = (
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:hix = 'http://hix.cms.gov/0.1/hix-core' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns = 'http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns1 = 'http://niem.gov/niem/structures/2.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns2 = 'http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns3 = 'http://niem.gov/niem/niem-core/2.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:soap = 'http://www.w3.org/2003/05/soap-envelope' (CHARACTER)
(0x01000000:Folder )http://www.w3.org/2003/05/soap-envelope:Header = (
(0x01000000:Folder)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Security = (
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:wsse = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:wsu = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd' (CHARACTER)
(0x01000000:Folder )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Timestamp = (
(0x03000100:Attribute )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Id = 'TS-55' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Created = '2013-08-19T17:32:33.039Z' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Expires = '2013-08-19T17:57:33.039Z' (CHARACTER)
)
(0x01000000:Folder )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:UsernameToken = (
(0x03000100:Attribute )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Id = 'UsernameToken-54' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Username = '04.UCI.VA*.703.529' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Password = 'athXWp4bMLq842rBKJkexbSFbAM=' (CHARACTER)
(
(0x03000100:Attribute):Type = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest' (CHARACTER)
)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Nonce = 'rKUcRUedXHl6Vp0XEbxKpA==' (CHARACTER)
(
(0x03000100:Attribute):EncodingType = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary' (CHARACTER)
)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Created = '2013-08-19T15:40:57.365Z' (CHARACTER)
)
)
)
(0x01000000:Folder )http://www.w3.org/2003/05/soap-envelope:Body = (
(0x01000000:Folder)http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0:ApplicantEligibilityRequest = (
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:s = 'http://niem.gov/niem/structures/2.0' (CHARACTER)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:PartnerWebSiteInformationExchangeSystem = (
(0x03000000:PCDataField)http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemStateCode = 'VA' (CHARACTER)
(0x01000000:Folder )http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '213' (CHARACTER)
)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:PartnerAssignedConsumerIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '123' (CHARACTER)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeAssignedConsumerIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '7951539' (CHARACTER)
)
(0x03000000:PCDataField )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:PartnerWebSiteUserCode = 'Consumer' (CHARACTER)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeUser = (
(0x01000000:Folder)http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeUserIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '123' (CHARACTER)
)
(0x01000000:Folder)http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:RoleOfPersonReference = (
(0x03000100:Attribute)http://niem.gov/niem/structures/2.0:ref = 'ID014' (CHARACTER)
)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeInformationExchangeSystem = (
(0x03000000:PCDataField)http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemStateCode = 'VA' (CHARACTER)
(0x01000000:Folder )http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '82983597-d602-4d35-8c16-9c549123d9d0' (CHARACTER)
)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ReferencedPerson = (
(0x03000100:Attribute)http://niem.gov/niem/structures/2.0:id = 'ID014' (CHARACTER)
(0x01000000:Folder )http://niem.gov/niem/niem-core/2.0:PersonBirthDate = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:Date = '1980-05-04' (CHARACTER)
)
(0x01000000:Folder )http://niem.gov/niem/niem-core/2.0:PersonName = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:PersonGivenName = 'Kenny' (CHARACTER)
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:PersonMiddleName = 'Lofton' (CHARACTER)
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:PersonSurName = 'Loften' (CHARACTER)
)
(0x01000000:Folder )http://niem.gov/niem/niem-core/2.0:PersonSSNIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '1' (CHARACTER)
)
)
)
)
)
)
)

Well, This is not

Code:

( ['WSRoot' : 0x3ffc0172ac0]
(0x01000000:Name ):Properties = ( ['MQPROPERTYPARSER' : 0x3ffc098afa0]
(0x03000000:NameValue):MessageSet = '' (CHARACTER)
(0x03000000:NameValue):MessageType = '' (CHARACTER)
(0x03000000:NameValue):MessageFormat = '' (CHARACTER)
(0x03000000:NameValue):Encoding = 273 (INTEGER)
(0x03000000:NameValue):CodedCharSetId = 1208 (INTEGER)
(0x03000000:NameValue):Transactional = FALSE (BOOLEAN)
(0x03000000:NameValue):Persistence = FALSE (BOOLEAN)
(0x03000000:NameValue):CreationTime = GMTTIMESTAMP '2013-08-19 17:33:44.657751' (GMTTIMESTAMP)
(0x03000000:NameValue):ExpirationTime = -1 (INTEGER)
(0x03000000:NameValue):Priority = 0 (INTEGER)
(0x03000000:NameValue):ReplyIdentifier = X'000000000000000000000000000000000000000000000000' (BLOB)
(0x03000000:NameValue):ReplyProtocol = 'SOAP-HTTP' (CHARACTER)
(0x03000000:NameValue):Topic = NULL
(0x03000000:NameValue):ContentType = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourceType = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourceToken = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourcePassword = '' (CHARACTER)
(0x03000000:NameValue):IdentitySourceIssuedBy = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedType = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedToken = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedPassword = '' (CHARACTER)
(0x03000000:NameValue):IdentityMappedIssuedBy = '' (CHARACTER)
)
(0x01000000:Name ):HTTPInputHeader = ( ['WSINPHDR' : 0x3ffc08c6d40]
(0x03000000:NameValue):X-Original-HTTP-Command = 'POST http://lwmqd005:7080/create HTTP/1.1' (CHARACTER)
(0x03000000:NameValue):Host = 'lwmqd005:7080' (CHARACTER)
(0x03000000:NameValue):Content-Length = '2561' (CHARACTER)
(0x03000000:NameValue):Cookie = '' (CHARACTER)
(0x03000000:NameValue):X-Remote-Addr = '10.22.2.75' (CHARACTER)
(0x03000000:NameValue):X-Remote-Host = '10.22.2.75' (CHARACTER)
(0x03000000:NameValue):X-Server-Name = 'lwmqd005' (CHARACTER)
(0x03000000:NameValue):X-Server-Port = '7080' (CHARACTER)
(0x03000000:NameValue):X-Scheme = 'http' (CHARACTER)
)
(0x01000000:Folder):XMLNSC = ( ['xmlnsc' : 0x3ffc049b300]
(0x01000000:Folder)http://www.w3.org/2003/05/soap-envelope:Envelope = (
(0x03000102:NamespaceDecl)XMLNS:soap = 'http://www.w3.org/2003/05/soap-envelope' (CHARACTER)
(0x03000102:NamespaceDecl)xmlns:hix = 'http://hix.cms.gov/0.1/hix-core' (CHARACTER)
(0x03000102:NamespaceDecl)xmlns:ns = 'http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0' (CHARACTER)
(0x03000102:NamespaceDecl)xmlns:ns1 = 'http://niem.gov/niem/structures/2.0' (CHARACTER)
(0x03000102:NamespaceDecl)xmlns:ns2 = 'http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0' (CHARACTER)
(0x03000102:NamespaceDecl)xmlns:ns3 = 'http://niem.gov/niem/niem-core/2.0' (CHARACTER)
(0x03000102:NamespaceDecl)xmlns:s = 'http://niem.gov/niem/structures/2.0' (CHARACTER)
(0x01000000:Folder )http://www.w3.org/2003/05/soap-envelope:Header = (
(0x01000000:Folder)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Security = (
(0x03000102:NamespaceDecl):wsse = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd' (CHARACTER)
(0x03000102:NamespaceDecl):wsu = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd' (CHARACTER)
(0x01000000:Folder )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Timestamp = (
(0x03000100:Attribute )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Id = 'TS-55' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Created = '2013-08-19T17:33:47.235Z' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Expires = '2013-08-19T17:58:47.235Z' (CHARACTER)
)
(0x01000000:Folder )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:UsernameToken = (
(0x03000100:Attribute )http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Id = 'UsernameToken-54' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Username = '04.UCI.VA*.703.529' (CHARACTER)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Password = 'athXWp4bMLq842rBKJkexbSFbAM=' (CHARACTER)
(
(0x03000100:Attribute):Type = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest' (CHARACTER)
)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd:Nonce = 'rKUcRUedXHl6Vp0XEbxKpA==' (CHARACTER)
(
(0x03000100:Attribute):EncodingType = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary' (CHARACTER)
)
(0x03000000:PCDataField)http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd:Created = '2013-08-19T17:33:47.235Z' (CHARACTER)
)
)
)
(0x01000000:Folder )http://www.w3.org/2003/05/soap-envelope:Body = (
(0x01000000:Folder)http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0:ApplicantEligibilityRequest = (
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:s = 'http://niem.gov/niem/structures/2.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:hix = 'http://hix.cms.gov/0.1/hix-core' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns = 'http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns1 = 'http://niem.gov/niem/structures/2.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns2 = 'http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:ns3 = 'http://niem.gov/niem/niem-core/2.0' (CHARACTER)
(0x03000102:NamespaceDecl)http://www.w3.org/2000/xmlns/:soap = 'http://www.w3.org/2003/05/soap-envelope' (CHARACTER)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:PartnerWebSiteInformationExchangeSystem = (
(0x03000000:PCDataField)http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemStateCode = 'VA' (CHARACTER)
(0x01000000:Folder )http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '213' (CHARACTER)
)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:PartnerAssignedConsumerIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '123' (CHARACTER)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeAssignedConsumerIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '7951539' (CHARACTER)
)
(0x03000000:PCDataField )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:PartnerWebSiteUserCode = 'Consumer' (CHARACTER)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeUser = (
(0x01000000:Folder)http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeUserIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '123' (CHARACTER)
)
(0x01000000:Folder)http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:RoleOfPersonReference = (
(0x03000100:Attribute)http://niem.gov/niem/structures/2.0:ref = 'ID014' (CHARACTER)
)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ExchangeInformationExchangeSystem = (
(0x03000000:PCDataField)http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemStateCode = 'VA' (CHARACTER)
(0x01000000:Folder )http://hix.cms.gov/0.1/hix-core:InformationExchangeSystemIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '82983597-d602-4d35-8c16-9c549123d9d0' (CHARACTER)
)
)
(0x01000000:Folder )http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0:ReferencedPerson = (
(0x03000100:Attribute)http://niem.gov/niem/structures/2.0:id = 'ID014' (CHARACTER)
(0x01000000:Folder )http://niem.gov/niem/niem-core/2.0:PersonBirthDate = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:Date = '1980-05-04' (CHARACTER)
)
(0x01000000:Folder )http://niem.gov/niem/niem-core/2.0:PersonName = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:PersonGivenName = 'Kenny' (CHARACTER)
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:PersonMiddleName = 'Lofton' (CHARACTER)
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:PersonSurName = 'Loften' (CHARACTER)
)
(0x01000000:Folder )http://niem.gov/niem/niem-core/2.0:PersonSSNIdentification = (
(0x03000000:PCDataField)http://niem.gov/niem/niem-core/2.0:IdentificationID = '1' (CHARACTER)
)
)
)
)
)
)
)

wbisantosh

Posted: Mon Aug 19, 2013 9:47 am Post subject:

Apprentice

Joined: 12 Nov 2012
Posts: 47

Sorry For not being so brief,

The one working by using the Request from Soapui and the one I created is with these ESQL Lines,

Code:

   CALL namespaceDeclaration();
   CALL createWSSE();
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Body.ns:ApplicantEligibilityRequest = InputRoot.XMLNSC.[<];
   RETURN TRUE;
END;

   CREATE PROCEDURE namespaceDeclaration() BEGIN

   SET OutputRoot.XMLNSC.soap:Envelope.(XMLNSC.NamespaceDecl)XMLNS:soap = 'http://www.w3.org/2003/05/soap-envelope';
   SET OutputRoot.XMLNSC.soap:Envelope.(XMLNSC.NamespaceDecl)xmlns:hix = 'http://hix.cms.gov/0.1/hix-core';
   SET OutputRoot.XMLNSC.soap:Envelope.(XMLNSC.NamespaceDecl)xmlns:ns = 'http://applicant-eligibility.ee.ffe.cms.gov/exchange/1.0';
   SET OutputRoot.XMLNSC.soap:Envelope.(XMLNSC.NamespaceDecl)xmlns:ns1 = 'http://niem.gov/niem/structures/2.0';
   SET OutputRoot.XMLNSC.soap:Envelope.(XMLNSC.NamespaceDecl)xmlns:ns2 = 'http://applicant-eligibility.ee.ffe.cms.gov/extension/1.0';
   SET OutputRoot.XMLNSC.soap:Envelope.(XMLNSC.NamespaceDecl)xmlns:ns3 = 'http://niem.gov/niem/niem-core/2.0';
   SET OutputRoot.XMLNSC.soap:Envelope.(XMLNSC.NamespaceDecl)xmlns:s = 'http://niem.gov/niem/structures/2.0';

END;

CREATE PROCEDURE createWSSE() BEGIN
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.(XMLNSC.NamespaceDecl)wsse = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.(XMLNSC.NamespaceDecl)wsu = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsu:Timestamp.(XMLNSC.Attribute)wsu:Id = 'TS-55';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsu:Timestamp.wsu:Created = CAST(CURRENT_GMTTIMESTAMP AS CHARACTER FORMAT 'IU');
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsu:Timestamp.wsu:Expires = CAST((CURRENT_GMTTIMESTAMP + INTERVAL '25' MINUTE) AS CHARACTER FORMAT 'IU');
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.(XMLNSC.Attribute)wsu:Id = 'UsernameToken-54';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Username = '04.UCI.VA*.703.529';
   --CREATE NEXTSIBLING OF OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Username NAMESPACE 'wsse' NAME 'Password' ;
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.(XMLNSC.Element)wsse:Password = FIELDVALUE(OutputLocalEnvironment.Variables.pwd);
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Password.(XMLNSC.Attribute)Type = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.(XMLNSC.Element)wsse:Nonce = FIELDVALUE(OutputLocalEnvironment.Variables.Nonce);
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsse:Nonce.(XMLNSC.Attribute)EncodingType = 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary';
   SET OutputRoot.XMLNSC.soap:Envelope.soap:Header.wsse:Security.wsse:UsernameToken.wsu:Created = CAST(CURRENT_GMTTIMESTAMP AS CHARACTER FORMAT 'IU');
END;

fjb_saper

Posted: Mon Aug 19, 2013 9:47 am Post subject:

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

And the difference between the 2 is?

_________________
MQ & Broker admin

wbisantosh

Posted: Mon Aug 19, 2013 9:59 am Post subject:

Apprentice

Joined: 12 Nov 2012
Posts: 47

@fjb_saper
Please refer to previous post for the Message Flow Difference between the 2 traces

Thanks

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » WS-Security with SOAP Request Node

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP