cancel
Showing results for 
Search instead for 
Did you mean: 

getUser returns 'Server error' - security problems

ibarbaric
Champ in-the-making
Champ in-the-making
Hello!
I am calling the GetUser method by using the following SOAP:
<?xml version="1.0" encoding="utf-8"?>
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
   <soap-env:Header>
      <n0:Trace xmlns:n0="http://www.sap.com/webas/630/soap/features/runtime/tracing/">
         <TraceLevel xmlns="http://www.sap.com/webas/630/soap/features/runtime/tracing/">Error</TraceLevel>
      </n0:Trace>

      <wsse:Security xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/07/secext" soap-env:mustUnderstand="1">
         <wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
            <wsu:Created>2007-05-30T12:05:50Z</wsu:Created>

            <wsu:Expires>2007-05-30T12:20:00Z</wsu:Expires>
         </wsu:Timestamp>

         <wsse:UsernameToken>
            <wsse:Username>admin</wsse:Username>

            <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">TICKET_81985699-0e96-11dc-a3dc-d323f1c55fe0</wsse:Password>
         </wsse:UsernameToken>
      </wsse:Security>
   </soap-env:Header>

   <soap-env:Body>
      <nr1:getUser xmlns:nr1="http://www.alfresco.org/ws/service/administration/1.0" xmlns:nr2="http://www.alfresco.org/ws/model/content/1.0">
         <nr1:userName>ADMIN</nr1:userName>
      </nr1:getUser>
   </soap-env:Body>
</soap-env:Envelope>
If I pass yesterday's date in Timestamp values, I get Invalid timestamp The security semantics of message have expired, as expected. However, when I provide timestamp which is supposed to be valid, I get only
<faultcode xmlns:ns1="http://xml.apache.org/axis/">ns1:Server</faultcode> 
  <faultstring>Server Error</faultstring>
- <detail>
  <ns2:stackTrace xmlns:ns2="http://xml.apache.org/axis/">Server Error at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:474) at org.apache.axis.server.AxisServer.invoke(AxisServer.java:281)…
What is incorrect in my SOAP call?
Thanks in advance for your replies!
Regards,
Igor
1 REPLY 1

ibarbaric
Champ in-the-making
Champ in-the-making
Solved. The security namespace was wrong. Instead
xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/07/secext" 
it should be
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"

Regards,
Igor