MQSeries.net :: View topic

LazyBoy · Posted: Wed May 20, 2009 12:09 pm Post subject: WS Security: SOAP Nodes,

Hi,

I am trying to invoke WS security webservice provider using Username token and x509 token:

This is how the sample message before encryption looks like:

?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<soapenv:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="1">
<xenc:EncryptedKey Id="EncKeyId-1791474">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"></xenc:EncryptionMethod>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<wsse:SecurityTokenReference>
<ds:X509Data>
<ds:X509IssuerSerial>
<ds:X509IssuerName>CN=server3</ds:X509IssuerName>
<ds:X509SerialNumber>8qwe89qw</ds:X509SerialNumber>
</ds:X509IssuerSerial>
</ds:X509Data>
</wsse:SecurityTokenReference>
</ds:KeyInfo>
<xenc:CipherData>
<xenc:CipherValue>bBP5rTitj34VwBmlKA=
</xenc:CipherValue>
</xenc:CipherData>
<xenc:ReferenceList>
<xenc:DataReference URI="#EncDataId-12329707"></xenc:DataReference>
</xenc:ReferenceList>
</xenc:EncryptedKey>
<wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UsernameToken-14399546">
<wsse:Username>server2</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">serv2pwd</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soapenv:Header>
<soapenv:Body><xenc:EncryptedData Id="EncDataId-12329707" Type="http://www.w3.org/2001/04/xmlenc#Content">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"></xenc:EncryptionMethod>
<xenc:CipherData>
<xenc:CipherValue>XedoPDaz8hVXTsS7JgWnLn0+GrA=</xenc:CipherValue>
</xenc:CipherData>
</xenc:EncryptedData>
</soapenv:Body></soapenv:Envelope>

I am using WMB 6.1.0.3 Soap request node.

So far I have done this:
Created a policy set Username authentication token and x509token authentication token for request message and response message to be received.

Then in the binding I have used the above authentication token and specfied the keyname.

Now, I am not sure where do I give the username and password that has to be passed in the soap header.
I have created a tokenname in policy set editor under username authentication token and then used mqsisetdbparms to set password for this token name.Please let me know if someone has implemented this before, is this the correct way.
Also, How can i see the message generated by soap request, I have turned on user trace, couldn't see the request message.

Thanks,