topic Re: WcfCmisTest Problem in Alfresco Archive

WcfCmisTest Problem

mirkob — Thu, 05 Mar 2009 07:48:16 GMT

Hi, I have a problem running the WcfCmisTest example.I downloaded the last "alfresco-labs-sdk-3Stable", where I found the source code of the example, and the last "alfresco-labs-tomcat-3Stable" for the server side.I configured Tomcat to accept connection whith the "https" protocol (WcfCmisTest seems

Re: WcfCmisTest Problem

mirkob — Thu, 05 Mar 2009 08:09:22 GMT

An upgrade to the previous post.

I tried to compare the two versions of the example: .Net vs Java.

I used the same server, but the Java version uses the "http" protocol (this example does not support "https")

I ran the test:


cmis-test.bat http://localhost:8080 admin admin
‍‍‍

and it worked perfectly.

The Java version uses the "PasswordDigest" password type, the .Net "PasswordText". To compare the two exemples I changed the Java password type to "PasswordText".

I compared the two envelope:

.NET


<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<s:Header>
<o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
   <u:Timestamp u:Id="_0">
      <u:Created>2009-03-04T12:35:29.863Z</u:Created>
      <u:Expires>2009-03-04T12:40:29.863Z</u:Expires>
   </u:Timestamp>
   <o:UsernameToken u:Id="uuid-bc221500-1123-423b-9b11-ffad75ed252d-1">
      <o:Username>admin</o:Username>
      <o:Password o:Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">admin</o:Password>
   </o:UsernameToken>
</o:Security>
</s:Header>
<s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
   <getRootFolder xmlns="http://www.cmis.org/ns/1.0"><filter>*</filter></getRootFolder>
</s:Body>
</s:Envelope>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Java


<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header>
   <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soap:mustUnderstand="1">
      <wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Timestamp-9742914">
         <wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2009-03-04T12:42:13.304Z</wsu:Created>
         <wsu:Expires xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2009-03-04T12:47:13.304Z</wsu:Expires>
      </wsu:Timestamp>
      <wsse:UsernameToken xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" 
                          xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" 
         wsu:Id="UsernameToken-8593864">
         
         <wsse:Username xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">admin</wsse:Username>
         <wsse:Password xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" 
            Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">admin</wsse:Password>
      </wsse:UsernameToken>
   </wsse:Security>
</soap:Header>
<soap:Body>
   <ns1:getRepositories xmlns:ns1="http://www.cmis.org/2008/05" />
</soap:Body>
</soap:Envelope>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The envelopes are very similar, this suggests that the problem is not in the message, but in some other place.

Re: WcfCmisTest Problem

mirkob — Thu, 05 Mar 2009 15:37:07 GMT

I discovered the cause of the problem:

.Net generate an envelope like this:


<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<s:Header>
<o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
   <u:Timestamp u:Id="_0">
      <u:Created>2009-03-04T12:35:29.863Z</u:Created>
      <u:Expires>2009-03-04T12:40:29.863Z</u:Expires>
   </u:Timestamp>
   <o:UsernameToken u:Id="uuid-bc221500-1123-423b-9b11-ffad75ed252d-1">
      <o:Username>admin</o:Username>
      <o:Password o:Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">admin</o:Password>
   </o:UsernameToken>
</o:Security>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

in particular:

<o:Password o:Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">admin</o:Password>‍

has the attribute "Type" with the namespace.

This violates the definition of the tag "UsernameToken" as described in:
http://www.oasis-open.org/committees/download.php/16782/wss-v1.1-spec-os-UsernameTokenProfile.pdf

See also:
http://mail-archives.apache.org/mod_mbox/ws-wss4j-dev/200810.mbox/%3C1928235844.1224139846575.JavaMail.jira@brutus%3E

Re: WcfCmisTest Problem

pie — Thu, 09 Apr 2009 14:03:24 GMT

When I connected to Alfresco, I used the following header in my SOAP calls:


<soapenv:Envelope xmlns:ns="http://www.cmis.org/2008/05" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
   <soapenv:Header>
      <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
         <wsu:Timestamp wsu:Id="Timestamp-26726559" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
            <wsu:Created>2009-04-09T13:57:50.375Z</wsu:Created>
            <wsu:Expires>2009-04-09T14:03:50.375Z</wsu:Expires>
         </wsu:Timestamp>
         <wsse:UsernameToken wsu:Id="UsernameToken-10473606" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
            <wsse:Username>admin</wsse:Username>
            <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">p50qO4MOV/3uXRsWvZWR/CkW5yI= </wsse:Password>
            <wsse:Nonce>NonceValue</wsse:Nonce>
            <wsu:Created>2009-04-09T13:37:28.391Z</wsu:Created>
         </wsse:UsernameToken>
      </wsse:Security>
   </soapenv:Header>
   <soapenv:Body>
   </soapenv:Body>
</soapenv:Envelope>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I found I had to generate much of the header myself in .NET to get it to work.

-Pie

Re: WcfCmisTest Problem

gswamy — Fri, 05 Feb 2010 21:41:12 GMT

I get a similar problem, my one is SOAPUI and other client java. It works fine with Java.

How I do I convert the text password to digest password?

I use rampart, axis and webservice. I get same authentication error.

-Geetha