Web service : timezone problem

Question

Dear All,
i have create a webservice that required user name, password, nonce and create datetime
(i.e. in soap header, add <wsu:Created ValueType="http://www.w3.org/2001/XMLSchema/dateTime">2007-05-16T16:38:03Z</wsu:Created>)
**where xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">)
i deploy the web service to OC4J, running in a window 2003 server. (timezone set to GMT+8 --> Hong Kong)
when i run a web service client, in AIX (env. variable :TZ=CUT0), to call the web service,
an error occur:
javax.xml.rpc.soap.SOAPFaultException: Clock skew too great
so i write a simple java program to check the time zone / date time setting:
sample code:
============================================================
Date d = new Date();
System.out.println("Time zone offset: " + (d.getTimezoneOffset()) / 60);
System.out.println("GMT String: " + d.toGMTString());
System.out.println("Locale String: " + d.toLocaleString());
TimeZone tz = TimeZone.getDefault();
System.out.println("TZ display Name: "+ tz.getDisplayName());
System.out.println("TZ raw offset: " + (tz.getRawOffset() / 36000 / 60));
============================================================
in the window server, the following message is printed:
Time zone offset: -8
GMT String: 16 May 2007 09:25:56 GMT
Locale String: May 16, 2007 5:25:56 PM
TZ display Name: China Standard Time
TZ raw offset: 13
in the AIX server (env. variable TZ=CUT0), the following message is printed:
Time zone offset: 0
GMT String: 16 May 2007 17:25:49 GMT
Locale String: May 16, 2007 5:25:49 PM
TZ display Name: Coordinated Universal Time
TZ raw offset: 0
as Hong Kong 's time zone is GMT+8 (= CUT +8????), it seems that the AIX
machine produce the wrong GMT time: GMT String: 16 May 2007 17:25:49 GMT
8 hours are added???
time now in Hong Kong is ~17:25, convert to GMT or CUT = 09:25 GMT, am i right?
could anyone tell me whether i am right or wrong?
what should i do to solve the problem??
(PS: i am not the root user of the AIX machine)
thanks
in the window 2003 server, in which the OC4J runs on, the timezone is GMT+8 (Hong Kong)
but in the IBM AIX client, the TZ env. environment is set to "CUT0"
Message was edited by:
lsp

Answer 1

Dear Viru,
I have captured the soap message on the server side using tcpmon.
the tcpmon show the capture time = Thu May 17 11:33:35 CST 2007
POST /XXXXXXXXXXxx HTTP/1.1
Host: hocd4sv06d:8111
Connection: Keep-Alive, TE
TE: trailers, deflate, gzip, compress
User-Agent: Oracle HTTPClient Version 10h
SOAPAction: "XXXXXXXXXX"
Accept-Encoding: gzip, x-gzip, compress, x-compress
Content-type: text/xml; charset=UTF-8
Content-length: 1244
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="XXXXXXXX" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><env:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" env:mustUnderstand="1"><wsse:UsernameToken xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><wsse:Username>username</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">password</wsse:Password><wsse:Nonce>lRl/cmyvlsL20rzxSQy07Q==</wsse:Nonce><wsu:Created ValueType="http://www.w3.org/2001/XMLSchema/dateTime">2007-05-17T11:33:38Z</wsu:Created></wsse:UsernameToken></wsse:Security></env:Header><env:Body><ns0:YYYYYY/></env:Body></env:Envelope>
HTTP/1.1 200 OK
Date: Thu, 17 May 2007 03:28:06 GMT
Server: Oracle Containers for J2EE
Content-Length: 588
Connection: Keep-Alive
Keep-Alive: timeout=15, max=100
Content-Type: text/xml; charset=UTF-8
SOAPAction: ""
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="XXXXXX"><env:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" env:mustUnderstand="1"/></env:Header><env:Body><ns0:XXXXXXXXXXXX/></env:Body></env:Envelope>
after searching the oracle document (oracle ws security guide), i find that there is
an element called <nonce-config clock-skew = "XX seconds" ..../>, that control how
many seconds in the create time is acceptable.
after i add that element <nonce-config clock-skew = "288100" ..../> (approx = 8 hours),
everything work fine now...but for security, of course, i can't set the value to so large
in production env.
anyone have idea to solve this problem.?