Removing BSP Compliance when using Axis2 and Rampart

[David R. Robison]

I have an endpoint that is implementing WS-Securty that does not pass
the BSP compliance tests. I get the error:

2014-10-06 09:25:49,228 JavaFX Application Thread ERROR
org.apache.axis2.engine.AxisEngine An invalid security token was
provided (An error happened processing a Username Token "{0}")
org.apache.axis2.AxisFault: An invalid security token was provided (An
error happened processing a Username Token "{0}")
at
org.apache.rampart.handler.RampartReceiver.setFaultCodeAndThrowAxisFault(RampartReceiver.java:186)
at
org.apache.rampart.handler.RampartReceiver.invoke(RampartReceiver.java:95)
at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:340)
at org.apache.axis2.engine.Phase.invoke(Phase.java:313)
at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:262)
at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:168)
at
org.apache.axis2.description.OutInAxisOperationClient.handleResponse(OutInAxisOperation.java:364)
at
org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:421)
at
org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229)
at
org.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
at
org.onvif.www.ver10.device.wsdl.DeviceServiceStub.setSystemDateAndTime(DeviceServiceStub.java:7360)
at com.orci.OnvifWS.OnvifProxy.setSystemDateTime(OnvifProxy.java:604)
at
com.orci.vicads.TalonConfig.TalonEncoderTableView.syncDateTime(TalonEncoderTableView.java:275)
at
com.orci.vicads.TalonConfig.TalonEncoderTableView.access$2(TalonEncoderTableView.java:270)
at
com.orci.vicads.TalonConfig.TalonEncoderTableView$1.handle(TalonEncoderTableView.java:81)
at
com.orci.vicads.TalonConfig.TalonEncoderTableView$1.handle(TalonEncoderTableView.java:1)
at
com.sun.javafx.event.CompositeEventHandler.dispatchBubblingEvent(Unknown
Source)
at
com.sun.javafx.event.EventHandlerManager.dispatchBubblingEvent(Unknown
Source)
at
com.sun.javafx.event.EventHandlerManager.dispatchBubblingEvent(Unknown
Source)
at com.sun.javafx.event.BasicEventDispatcher.dispatchEvent(Unknown
Source)
at
com.sun.javafx.event.EventDispatchChainImpl.dispatchEvent(Unknown Source)
at com.sun.javafx.event.EventUtil.fireEventImpl(Unknown Source)
at com.sun.javafx.event.EventUtil.fireEvent(Unknown Source)
at javafx.event.Event.fireEvent(Unknown Source)
at javafx.scene.control.MenuItem.fire(Unknown Source)
at
com.sun.javafx.scene.control.skin.ContextMenuContent$MenuItemContainer.doSelect(Unknown
Source)
at
com.sun.javafx.scene.control.skin.ContextMenuContent$MenuItemContainer.lambda$createChildren$324(Unknown
Source)
at
com.sun.javafx.scene.control.skin.ContextMenuContent$MenuItemContainer$$Lambda$273/227523629.handle(Unknown
Source)
at
com.sun.javafx.event.CompositeEventHandler$NormalEventHandlerRecord.handleBubblingEvent(Unknown
Source)
at
com.sun.javafx.event.CompositeEventHandler.dispatchBubblingEvent(Unknown
Source)
at
com.sun.javafx.event.EventHandlerManager.dispatchBubblingEvent(Unknown
Source)
at
com.sun.javafx.event.EventHandlerManager.dispatchBubblingEvent(Unknown
Source)
at
com.sun.javafx.event.CompositeEventDispatcher.dispatchBubblingEvent(Unknown
Source)
at com.sun.javafx.event.BasicEventDispatcher.dispatchEvent(Unknown
Source)
at
com.sun.javafx.event.EventDispatchChainImpl.dispatchEvent(Unknown Source)
at com.sun.javafx.event.BasicEventDispatcher.dispatchEvent(Unknown
Source)
at
com.sun.javafx.event.EventDispatchChainImpl.dispatchEvent(Unknown Source)
at com.sun.javafx.event.BasicEventDispatcher.dispatchEvent(Unknown
Source)
at
com.sun.javafx.event.EventDispatchChainImpl.dispatchEvent(Unknown Source)
at com.sun.javafx.event.BasicEventDispatcher.dispatchEvent(Unknown
Source)
at
com.sun.javafx.event.EventDispatchChainImpl.dispatchEvent(Unknown Source)
at com.sun.javafx.event.EventUtil.fireEventImpl(Unknown Source)
at com.sun.javafx.event.EventUtil.fireEvent(Unknown Source)
at javafx.event.Event.fireEvent(Unknown Source)
at javafx.scene.Scene$MouseHandler.process(Unknown Source)
at javafx.scene.Scene$MouseHandler.access$1500(Unknown Source)
at javafx.scene.Scene.impl_processMouseEvent(Unknown Source)
at javafx.scene.Scene$ScenePeerListener.mouseEvent(Unknown Source)
at
com.sun.javafx.tk.quantum.GlassViewEventHandler$MouseEventNotification.run(Unknown
Source)
at
com.sun.javafx.tk.quantum.GlassViewEventHandler$MouseEventNotification.run(Unknown
Source)
at java.security.AccessController.doPrivileged(Native Method)
at
com.sun.javafx.tk.quantum.GlassViewEventHandler.handleMouseEvent(Unknown
Source)
at com.sun.glass.ui.View.handleMouseEvent(Unknown Source)
at com.sun.glass.ui.View.notifyMouse(Unknown Source)
at com.sun.glass.ui.win.WinApplication._runLoop(Native Method)
at com.sun.glass.ui.win.WinApplication.lambda$null$141(Unknown Source)
at
com.sun.glass.ui.win.WinApplication$$Lambda$37/728890494.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: org.apache.ws.security.WSSecurityException: An invalid
security token was provided (An error happened processing a Username
Token "{0}")
at
org.apache.ws.security.message.token.UsernameToken.checkBSPCompliance(UsernameToken.java:1159)
at
org.apache.ws.security.message.token.UsernameToken.<init>(UsernameToken.java:158)
at
org.apache.ws.security.processor.UsernameTokenProcessor.handleUsernameToken(UsernameTokenProcessor.java:139)
at
org.apache.ws.security.processor.UsernameTokenProcessor.handleToken(UsernameTokenProcessor.java:67)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:396)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:303)
at
org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:248)
at org.apache.rampart.RampartEngine.process(RampartEngine.java:149)
at
org.apache.rampart.handler.RampartReceiver.invoke(RampartReceiver.java:92)
... 56 more

What is the best way to disable BSP compliance testing? David
--
David R Robison
Open Roads Consulting, Inc.
103 Watson Road, Chesapeake, VA 23320
phone: [phone]
e-mail: ***@openroadsconsulting.com
web: http://www.openroadsconsulting.com
blog: http://therobe.blogspot.com
book:
http://www.xulonpress.com/bookstore/bookdetail.php?PB_ISBN=9781597816526



This email communication (including any attachments) may contain confidential and/or privileged material intended solely for the individual or entity to which it is addressed.
If you are not the intended recipient, please delete this email immediately.