topic Re: How to disable WS-Security header?? in Alfresco Archive

How to disable WS-Security header??

nathant99 — Fri, 04 May 2007 00:05:33 GMT

Hi all,I'm using the Alfresco web services API but the WS Client (Tibco BusinessWorks) is not allowing me to set the ticket value dynamically. I've tried so many ways to fix it on the Tibco side but there's no solution that I found.Is there a way to disable the WS Security check and just use the ti

Re: How to disable WS-Security header??

rwetherall — Tue, 08 May 2007 09:31:44 GMT

Hi,

The Alfresco web services have always used the WS Security header to pass the ticket information to the server.

The ticket is plucked out of the password parameter and cross checked within the server to ensure the request can proceed.

So long as you construct the WS Security header correctly authentication at the repository should occure without problem,

Cheers,
Roy

Re: How to disable WS-Security header??

nathant99 — Wed, 09 May 2007 15:08:36 GMT

Roy,

Thanks for your reply..

I got it working by using a workaround.

I have Tibco BW send the ticket in the SOAP header without the WS security header by modifying Alfresco WSDLs. Then on the server side, I created an Axis handler that adds the WS security header to the SOAP header before the WS security handler is invoked.

BTW, I had to fix the handler code in WSS4J 1.5.1 b/c it couldn't deal newline characters after the <SOAP:Header> tag

Regards,
–Nathan

Hi,

The Alfresco web services have always used the WS Security header to pass the ticket information to the server.

The ticket is plucked out of the password parameter and cross checked within the server to ensure the request can proceed.

So long as you construct the WS Security header correctly authentication at the repository should occure without problem,

Cheers,
Roy