3

We have a requirement where a webservice with username token security has been created in IBM Websphere Integration Developer 6.1. Now, in order to test this, we have to develop a Web Service Client in Java. The requirement is to get this done using Apache Axis2. After doing a lot of reading on this, I was able to use Axis2 to generate a client for a simple Web Service which does not require authentication and I was able to test it correctly. But I came to know that in order to use UserName token Security with axis2, rampart is needed.

Now I need to know how to use Rampart with Axis2 in eclipse. We dont have apache server installed in our systems, but we deploy it in eclipse. Even after reading a lot of articles on the same, I havent been able to get Rampart to work.

Can someone please guide me through the steps of configuring Rampart in eclipse and also how to use it for WebService Client Generation using UserName token?

So far, using Axis2 I used to do the following Steps. 1. Create a Java Project and import the required WSDLs into it. 2. Using the WSDLs, I create the WebServiceClient and the following types of files get generated a. A java Interface file b. A Java Proxy file which implements the interface mentioned in a. c. A java stub file which extends org.apache.axis.client.Stub and implements the interface mentioned in a. d. A java Service file which is again an interface e. A java ServiceLocator file which implements the above interface.

So, I also need to know how I can use these files for testing the Username Token Web Service.

When I do the above using a Dynamic Web project and right click on the WSDLs and click on generate client, a ServiceCallBackHandler.java and HttpSrviceStub files are created. How do i use these to achieve the testing?

Thanks.

Aditya
  • 103
  • 1
  • 5

2 Answers2

2

I haven't used rampart for Username Tokens, but for my services (signing and encrypting) IBM documentation was really helpful. Have a look at: http://www.ibm.com/developerworks/java/library/j-jws4/ Java Web services: Axis2 WS-Security basics; See how to install Rampart into Axis2 and implement UsernameToken handling

For my project Java source is the same when I use WS-Security (working environment) and without WS-Security (test environment). All I have to do on client side it to enable/disable rampart configuration from my_client/axis-repo/conf/axis2.xml. Have a look at: http://wso2.org/library/240 where you will find example configuration that may be useful to you:

<parameter name="OutflowSecurity">
        <action>
                <items>UsernameToken</items>
                <user>bob</user>
                <passwordCallbackClass>org.apache.rampart.
                samples.sample02.PWCBHandler</passwordCallbackClass>
        </action>
</parameter>
Michał Niklas
  • 53,067
  • 18
  • 70
  • 114
  • Hi, thanks for the info. will go through the links and get back to you. – Aditya Dec 10 '10 at 11:48
  • Hi Michael, your suggestion is what I used in my axis2.xml and it worked!! the only change that I have made is that since I don't use a password Handler Class, I replaced that tag with the tag and enterd the password directly. Worked for me. Thanks a million for your suggestion. :) – Aditya Dec 14 '10 at 06:32
  • No problem! You can accept my answer so it will not be listed as unanswered and we score more "points". – Michał Niklas Dec 14 '10 at 06:39
  • Just wanted to second @MichałNiklas's recommendation of this article: http://www.ibm.com/developerworks/java/library/j-jws4/ I don't know why it didn't come up in my Googling, I must have been using the wrong search terms. SUPER helpful--thanks! – Stew Dec 09 '11 at 20:21
1

first of all u have to load rampart modules files in axis2 modules files. Then load the library required for rampart in lib folder. and then use a callback handler class in which u have define the logic for user name and password. All the above things in vailable in ramart source code and rampart folder.u have to download it from rampart web site After then in axis2.xml u have to define tag 

<parameter name="InflowSecurity">
  <action>
    <items>UsernameToken</items>
    <user>jaideep</user>
    <passwordCallbackClass>com.mltvacations.externalapi.callbackhandler.PasswordCallbackHandler</passwordCallbackClass>
    <passwordType>PasswordText</passwordType>


  </action>
</parameter>

with in tag. then run the web service and copy the address of wsdl and put into soapUi and then add the authentication header. and check it.

If any problem then tell me.I will give u satisfactory answer beacuse i have used the rampart security.

jaideep singh
  • 11
  • 1