Forum Discussion

lcumpsto's avatar
lcumpsto
Occasional Visitor
10 years ago

Unable to access service due to WSS-Password Type

Hi all,

 

I am fairly novice with web services, and have a come across a problem with security. 

 

I am trying to access a 3rd party web service, which I can do fine when using SOAP. I have to set up 'Basic Security' and add a Username and Password, and then finally set the WSS-Password Type = PasswordText.

 

This resolves perfectly in SOAP, and I can call and interact with the web service with no issues. 

 

However, when we try to do this externally (I am working with a web developer) we are coming across an issue with WSS-Password Type. I am posting the following - 

 

POST /serviceadress.svc HTTP/1.1
Host: Hostname
Connection: Keep-Alive
User-Agent: PHP-SOAP/5.5.23
Content-Type: text/xml; charset=utf-8
SOAPAction: "http://servicehost/method"
Content-Length: 678
Authorization: Basic R0lGVFZPVUNIRVI6R0lGVFZPVUNIRVI=
WSS-PasswordType: PasswordText
Username: xxxxxx
Password: xxxxxx
 
Every time I add the “WSS-Password Type”, the server rejects the request:
failed to open stream: HTTP request failed! HTTP/1.1 400 Bad Request
 
I have tried different parameters in the WSS-PasswordType field but all give the same error. If I remove this parameter altogether I get a security verification message, the same as in SOAP which is correct.
 
I think its something simple but I have been unable to resolve. Any ideas? 
  • nmrao's avatar
    nmrao
    Champion Level 3
    So, this question does not seem to be related with soapUI.
    Suggest that you should look at the appropriate forum.