Web Services

Web Services

Apache Axis2 WS-Security message signing vulnerability (Version 1.5.1)

Submitted by Kamal Wickramanayake on July 18, 2010 - 12:32

Note: See the bottom of this page to download the sample code used.

Rampart is the Apache Axis2 module that implements the WS-Security features. To add such features to your Web service, Axis2 provides two different configuration mechanisms. One depends on WS-SecurityPolicy and is the approach that is preferred. The other approach is known as the “parameter based configuration”.

JAX-WS Web services in JBoss 5 do not work (JDK 1.6, Eclipse IDE)?

Submitted by Kamal Wickramanayake on June 12, 2010 - 07:19

Environment: JDK 1.6, JBoss 5.1, Eclipse 3.5 (Galileo)

I came across the following JBoss error when a JAX-WS Web service was accessed:

11:15:18,008 ERROR [SOAPFaultHelperJAXWS] SOAP request exception
java.lang.UnsupportedOperationException: setProperty must be overridden by all subclasses of SOAPMessage
    at javax.xml.soap.SOAPMessage.setProperty(SOAPMessage.java:441)
    at org.jboss.ws.core.soap.SOAPMessageImpl.<init>(SOAPMessageImpl.java:87)

Enabling Apache Axis2 Clustering

Submitted by Kamal Wickramanayake on May 21, 2008 - 09:03

I tried enabling clustering support in both standard and war distributions of Apache Axis2 version 1.4. It was not as simple as said. I could see possibly a bug related with coding in war distribution. And in both distributions, I could see improper axis2.xml files and several mistakes in packaging jars. Here's how you go about enabling clustering support: