We are trying to invoke Winchill secured webservices from middleware BPEL service. We are unable to do so even after importing the security certificates
After many trials,we found all parameters from tcpmon soap message of webservice client and our own soap message to be same.The only parameter we couldn't verify was the User security token as it was encrypted.We now decided to try with server keystore(as its symmetric encryption).
We still received the same "Invalid Security Header" in response.Windchill log though had a different error.
2012-06-28 08:37:51,153 INFO [ajp-bio-8010-exec-4] wt.system.out - at org.apache.tomcat.util.threads.TaskThread.run(TaskThread.java:77)
2012-06-28 08:37:51,154 INFO [ajp-bio-8010-exec-4] wt.system.out - Jun 28, 2012 12:37:51 PM com.sun.xml.wss.jaxws.impl.SecurityServerTube processRequest
2012-06-28 08:37:51,154 INFO [ajp-bio-8010-exec-4] wt.system.out - SEVERE: WSSTUBE0025: Error in Verifying Security in the Inbound Message.
2012-06-28 08:37:51,154 INFO [ajp-bio-8010-exec-4] wt.system.out - com.sun.xml.wss.XWSSecurityException: com.sun.xml.wss.XWSSecurityException: Error: No PasswordValidator Configured for UsernameToken Validation
2012-06-28 08:37:51,154 INFO [ajp-bio-8010-exec-4] wt.system.out - at
Can you please throw some light on what we are missing here ?
Thanks,
SJ
