A vendor we're integrating with provides some web-service functions... They developed it in Java, and also gave us an example client project (in Java) that shows the consumption of those web-services. We actually want to implement the consumption/interface of the web-services with .NET, but we're not able to figure out how the security should work.
In their Java client example, they appear to be using something called "Apache Rampart". They have code within that looks like this:
public static void initSecurityPolicy(ServiceClient client) throws Exception
{
Options options = client.getOptions();
options.setProperty(RampartMessageData.KEY_RAMPART_POLICY,
loadPolicy("policy.xml"));
options.setUserName(USERID);
options.setPassword(PASSWD);
options.setTimeOutInMilliSeconds(READTIMEOUT);
client.engageModule("rampart");
}
Could someone help me in what I should be looking for, in the .NET world, to do the equivalent of this? Currently, in my .NET project.. I can consume their WSDL fine, and it generates the proxy objects perfectly fine, but if I try to run/invoke any function, it tells me "missing SOAP header" and I believe it's security-related.
They also provide me the policy.xml file. I'm a novice .NET programmer and I usually rely on the proxies that VStudio generates to handle any WS-related programming, so I'm not sure what to do with that policy.xml file, nor do the equivalent of what they do in the code above in the .NET world.
