topic getUser returns 'Server error' - security problems in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/getuser-returns-server-error-security-problems/m-p/96476#M66289 <HTML><HEAD></HEAD><BODY><SPAN>Hello!</SPAN><BR /><SPAN>I am calling the GetUser method by using the following SOAP:</SPAN><BR /><PRE class="language-none line-numbers"><CODE>&lt;?xml version="1.0" encoding="utf-8"?&gt;<BR />&lt;soap-env:Envelope xmlns:soap-env="<A href="http://schemas.xmlsoap.org/soap/envelope/" rel="nofollow noopener noreferrer">http://schemas.xmlsoap.org/soap/envelope/</A>"&gt;<BR />&nbsp;&nbsp; &lt;soap-env:Header&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;n0:Trace xmlns:n0="<A href="http://www.sap.com/webas/630/soap/features/runtime/tracing/" rel="nofollow noopener noreferrer">http://www.sap.com/webas/630/soap/features/runtime/tracing/</A>"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;TraceLevel xmlns="<A href="http://www.sap.com/webas/630/soap/features/runtime/tracing/" rel="nofollow noopener noreferrer">http://www.sap.com/webas/630/soap/features/runtime/tracing/</A>"&gt;Error&lt;/TraceLevel&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/n0:Trace&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;wsse:Security xmlns:wsse="<A href="http://schemas.xmlsoap.org/ws/2002/07/secext" rel="nofollow noopener noreferrer">http://schemas.xmlsoap.org/ws/2002/07/secext</A>" soap-env:mustUnderstand="1"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;wsu:Timestamp xmlns:wsu="<A href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" rel="nofollow noopener noreferrer">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd</A>"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;wsu:Created&gt;2007-05-30T12:05:50Z&lt;/wsu:Created&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;wsu:Expires&gt;2007-05-30T12:20:00Z&lt;/wsu:Expires&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/wsu:Timestamp&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;wsse:UsernameToken&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;wsse:Username&gt;admin&lt;/wsse:Username&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;wsse:Password Type="<A href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText" rel="nofollow noopener noreferrer">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText</A>"&gt;TICKET_81985699-0e96-11dc-a3dc-d323f1c55fe0&lt;/wsse:Password&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/wsse:UsernameToken&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/wsse:Security&gt;<BR />&nbsp;&nbsp; &lt;/soap-env:Header&gt;<BR /><BR />&nbsp;&nbsp; &lt;soap-env:Body&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;nr1:getUser xmlns:nr1="<A href="http://www.alfresco.org/ws/service/administration/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/ws/service/administration/1.0</A>" xmlns:nr2="<A href="http://www.alfresco.org/ws/model/content/1.0" rel="nofollow noopener noreferrer">http://www.alfresco.org/ws/model/content/1.0</A>"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;nr1:userName&gt;ADMIN&lt;/nr1:userName&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/nr1:getUser&gt;<BR />&nbsp;&nbsp; &lt;/soap-env:Body&gt;<BR />&lt;/soap-env:Envelope&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>If I pass yesterday's date in Timestamp values, I get </SPAN><EM>Invalid timestamp The security semantics of message have expired</EM><SPAN>, as expected. However, when I provide timestamp which is supposed to be valid, I get only </SPAN><PRE class="language-none line-numbers"><CODE>&lt;faultcode xmlns:ns1="<A href="http://xml.apache.org/axis/" rel="nofollow noopener noreferrer">http://xml.apache.org/axis/</A>"&gt;ns1:Server&lt;/faultcode&gt; <BR />&nbsp; &lt;faultstring&gt;Server Error&lt;/faultstring&gt; <BR />- &lt;detail&gt;<BR />&nbsp; &lt;ns2:stackTrace xmlns:ns2="<A href="http://xml.apache.org/axis/" rel="nofollow noopener noreferrer">http://xml.apache.org/axis/</A>"&gt;Server Error at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:474) at org.apache.axis.server.AxisServer.invoke(AxisServer.java:281)…<SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN>What is incorrect in my SOAP call?</SPAN><BR /><SPAN>Thanks in advance for your replies!</SPAN><BR /><SPAN>Regards,</SPAN><BR /><SPAN>Igor</SPAN></BODY></HTML> Wed, 30 May 2007 10:27:21 GMT ibarbaric 2007-05-30T10:27:21Z getUser returns 'Server error' - security problems https://connect.hyland.com/t5/alfresco-archive/getuser-returns-server-error-security-problems/m-p/96476#M66289 Hello!I am calling the GetUser method by using the following SOAP:&lt;?xml version="1.0" encoding="utf-8"?&gt;&lt;soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/"&gt;&nbsp;&nbsp; &lt;soap-env:Header&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;n0:Trace xmlns:n0="http://www.sap.com/webas/630/soap/features/runtime/ Wed, 30 May 2007 10:27:21 GMT https://connect.hyland.com/t5/alfresco-archive/getuser-returns-server-error-security-problems/m-p/96476#M66289 ibarbaric 2007-05-30T10:27:21Z Re: getUser returns 'Server error' - security problems https://connect.hyland.com/t5/alfresco-archive/getuser-returns-server-error-security-problems/m-p/96477#M66290 <HTML><HEAD></HEAD><BODY><SPAN>Solved. The security namespace was wrong. Instead </SPAN><BR /><PRE class="language-none line-numbers"><CODE>xmlns:wsse="<A href="http://schemas.xmlsoap.org/ws/2002/07/secext" rel="nofollow noopener noreferrer">http://schemas.xmlsoap.org/ws/2002/07/secext</A>" <SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><SPAN> it should be </SPAN><PRE class="language-none line-numbers"><CODE>xmlns:wsse="<A href="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" rel="nofollow noopener noreferrer">http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd</A>"<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Regards,</SPAN><BR /><SPAN>Igor</SPAN></BODY></HTML> Fri, 01 Jun 2007 21:57:31 GMT https://connect.hyland.com/t5/alfresco-archive/getuser-returns-server-error-security-problems/m-p/96477#M66290 ibarbaric 2007-06-01T21:57:31Z