<replayDetection> question
From: John Jenkins (john_Jenkins_at_yahoo.com)
Date: 09/27/04
- Next message: Gabe Garza: "Re: Memory leak in IE javascript with webservice.htc"
- Previous message: bruce barker: "Re: Memory leak in IE javascript with webservice.htc"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 27 Sep 2004 20:48:34 GMT
Hi,
this is a repost of a question yesterday. I am using WSE2.0sp1 for my
security implementation for web services. A customer is using WebLogic to
implement their calls to my service.
The call fails with a "token could not be authenticated.." message. I
noticed the customer did not have
<wsse:Nonce></wsse:Nonce>
<wsu:Created></wsu:Created>
Tags in their security header. I took their message, and manually added
a some nonce/created details to the header and submitted it with a soap
tool. The message got validated. Web Logic does not appear to add
nonce/created elements by default.
The customer however pointed out (correctly ) that the implementation of
Nonce etc is only recommended. So my question is, is there a setting I can
turn on which will not require the client to supply a nonce and created
element??
I had initially thought this may be the <replayDetection> element but
this didn't work when I added to my config file.
Any help on this is greatly apprecited.
- Next message: Gabe Garza: "Re: Memory leak in IE javascript with webservice.htc"
- Previous message: bruce barker: "Re: Memory leak in IE javascript with webservice.htc"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
