axis2 - why pwcb.getPassword is null in this code -

-

i try add rampart security axis2 web service using rampart module.

so here have made:

  1. i have stored in database hashed value of "bobwww" password , salt

in pwcbhandler.java class

•i select stored in database password , hash

•i try hash same algorithm pwcb.getpassword() same stored salt

•check if new hashed password equal stored password

but receiving nullpointerexception decide check , wrote code

if(pwcb.getpassword()==null) {    try {         throw new exception ("passwordget pass null" +pwcb.getpassword());         }          catch (exception e)          {            // todo auto-generated catch block         e.printstacktrace();          } }

and see pwcb.getpassword() empty. here code of pwcbhandler.java

public void handle(callback[] callbacks)   throws ioexception,  unsupportedcallbackexception    {        (int = 0; < callbacks.length; i++)         {                       wspasswordcallback pwcb = (wspasswordcallback)callbacks[i];             try {               pasandsalt = getdataforchecking();                if(pwcb.getpassword()==null)             {                  try {                     throw new exception ("passwordget pass null" +pwcb.getpassword());                 } catch (exception e) {                     // todo auto-generated catch block                     e.printstacktrace();                 }             }                try {                 passwordforchecking = hash(pwcb.getpassword(),base64.decodebase64(pasandsalt[1]));               } catch (exception e) {                  // todo auto-generated catch block                 e.printstacktrace();             }                   if((pwcb.getidentifier().equals("bob")) && (passwordforchecking.equals(pasandsalt[0])) )               {                 return;               }           }

and here soaprequest sequeiry header

 var sr =                   "<?xml version=\"1.0\" encoding=\"utf-8\"?>" +                 "<soapenv:envelope " +                    "xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\" " +                  "xmlns:nilo=\"http://nilo\">"+                   "<soapenv:header>"+                   '<wsse:security xmlns:wsse=\"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd\" soapenv:mustunderstand="1">'+                   '<wsse:usernametoken xmlns:wsu="http://docs.oasisopen.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:id="123">'+                   '<wsse:username>bob</wsse:username>'+                   '<wsse:password type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#passwordtext">bobwww</wsse:password>'+                   '</wsse:usernametoken>'+                   '</wsse:security>'+                   "</soapenv:header>"+                   "<soapenv:body>" +                   "<nilo:getdataforchecking>" +                   '<nilo:data>'+tranxml+'</nilo:data>' +                     ' </nilo:getdataforchecking>'+                      '</soapenv:body>' +                      '</soapenv:envelope>';

according soap headers can see using plain text password instead of password digest. might need change rampart configuration 

<wsse:password type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#passwordtext">bobwww</wsse:password>

this might helpful you. http://wso2.com/library/240/


Comments

Post a Comment

Popular posts from this blog

java - Jmockit String final length method mocking Issue -

-
using jmockit 1.2 jar, trying mock string's length method getting unexpected invocation exception: failed: test java.lang.illegalstateexception: missing invocation mocked type @ point; please make sure such invocations appear after declaration of suitable mock field or parameter @ stringdemo.testa$1.<init>(testa.java:17) @ stringdemo.testa.test(testa.java:13) i using testng: @test public void test() throws exception { new expectations() { @mocked("length") string astring; { astring.length(); result = 2; } }; system.out.println(a.showa("test")); } } actual class a: public class { public static int showa(string str){ int a= str.length(); return a; } } this wrong way of recording expected results. shouldn't mock , record string's length() method, record showa() instead. here solution @suppresswarnings("unused&qu
Read more

asp.net - Razor Page Hosted on IIS 6 Fails Every Morning -

-
i have simple page in intranet uses razor/asp fetch single record table , display it, plus few graphic, dashboard display. meaning, no user intervention other first time open ie internal url. the problem having every morning ie displays "page not found or network error" message. refresh page, , it's stuck , doesn't display anything. try different pc, open ie internal url , it's stuck... ...until following: login server hosting page run inetmgr go web sites, etc right click on page that's giving me problem , select browse at moment, error message: server error in '/' application. -------------------------------------------------------------------------------- type of page not served. description: type of page have requested not served because has been explicitly forbidden. extension '.cshtml' may incorrect. please review url below , make sure spelled correctly. requested url: /application/dashboard.cshtml ---------------
Read more

c++ - wxwidget compiling on windows command prompt -

-
can please guide me on method,as how compile wxwidget using windows command prompt or msys. [i can't seem find on wxwiki/wxwidget official book/anywhere else] i have compiled wxwidget instructions have provided (using msys). from searching on internet seems 1 can (maybe?) through use of makefile (is correct?) if yes: directory & how should link wx libraries in makefile if no: way besides makefile? i know can use ide's code::block , make life simpler prefer compile using command prompt/msys. thanks in advance.
Read more