Invoke a business service base in a WSDL with customer WS-Security Policy

Customer write a Web service (Refer to the attachment file “HTTPS_PartyServicePortType.WSDL”)which declare a WS-Security Policy and apply this it to WS binding ,How can I generate a business service base in this WSDL and invoke it successfully?
When create a business service in OSB, we get a error with below messages
[[OSB Kernel:398133]The service is based on WSDL with Web Services Security Policies that are not natively supported by Oracle Service Bus. Please select OWSM Policies - From OWSM Policy Store option and attach equivalent OWSM security policy. For the Business Service, either you can add the necessary client policies manually by clicking Add button or you can let Oracle Service Bus automatically pick and add compatible client policies by clicking Add Compatible button.
After enhanced the OSB domain with OWSM extension, we found the OOTB OWSM defined cannot support the HttpsToken and OSB cannot support below WS-Policy defined in OWSM, refer to http://docs.oracle.com/cd/E21764_01/doc.1111/e15866/owsm.htm#OSBDV1681
51.2.8.1 Unsupported Assertion
•     binding-permission-authorization
•     http-security
•     OptimizedMimeSerialization (MTOM)
•     RMAssertion (Reliable Messaging)
•     sca-component-authorization
•     sca-component-permission-authorization
•     UsingAddressing
•     wss-saml-token-bearer-over-ssl (Authentication)
it means that we cannot generate a web service with customer WS-security Policy
The WS-Security Policy is shown as below:
<wsp:Policy wsu:Id="WSHttpBinding_IPartyServicePortType_policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:TransportBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:TransportToken>
<wsp:Policy>
<sp:HttpsToken RequireClientCertificate="false"/>
</wsp:Policy>
</sp:TransportToken>
<sp:AlgorithmSuite>
<wsp:Policy><sp:Basic256/></wsp:Policy>
</sp:AlgorithmSuite>
<sp:Layout><wsp:Policy><sp:Strict/></wsp:Policy></sp:Layout>
</wsp:Policy>
</sp:TransportBinding>
<wsaw:UsingAddressing/>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
BestRegards!
Simon

Hi
According to
http://e-docs.bea.com/wls/docs90/webserv/annotations.html#1050414
If you are going to publish the policy file in the Web Service archive, the policy XML file must be located in either the META-INF/policies or WEB-INF/policies directory of the EJB JAR file (for EJB implemented Web Services) or WAR file (for Java class implemented Web Services), respectively.
Can you make sure the policy file is in there?
Also there is a sample from the developer at http://dev2dev.bea.com/blog/jlee/archive/2005/09/how_to_use_anno.html
Vimala-

Similar Messages

  • [OSB Kernel:398133]The service is based on WSDL with Web Services Security

    Team,
    I need to use the wsdl given by external client. When I create a osb business service, I am receiving the below error.
    OSB Kernel:398133]The service is based on WSDL with Web Services Security Policies that are not natively supported by Oracle Service Bus. Please select OWSM Policies - From OWSM Policy Store option and attach equivalent OWSM security policy. For the Business Service, either you can add the necessary client policies manually by clicking Add button or you can let Oracle Service Bus automatically pick and add compatible client policies by clicking Add Compatible button.     ...
    WSDL:
    http://personator.melissadata.net/v3/SOAP/ContactVerify
    We don't have OWSM set up. Is there any workaround that I can use to connect to this service for OSB?

    As a workaround, you can try to remove the Policy definition and reference from the copy you will import in OSB.
    I would recommend to add OWSM to your domain. It's a straight forward process.
    Regards,
    Fabio.

  • Business Service Baser on webpage

    Hi
    i am creating a business service based on webpage (http://example.com/test.jsp). this is http sms gateway business service
    i am invoking business service in proxy service call out
    passing parameters userid, password, mobile, mess etc using "insert" tag in service "callout"
    But the problem is i am sending sms succesfully but page response is not captured in service call out response variable
    please help me
    Thanks
    Srinivas

    Did you try using the Operational branching node of OSB?
    You have copy the operation name from the inbound variable and populate the SOAP Header with that value into the SOAPAction tag.I think this will work.
    Thanks,
    Prabu

  • Generating Web Services bases on the WSDL interface

    Hello everybody.
    my question is.
    How can i generated all the java classes of a web services basen on a wsdl definition.
    how can i generate a simple java classe or how can i generate a ejb session, thet serve as a end point for my services
    any sugestion could be so helpfull

    The tool used to generate java class from WSDL is vender dependent, because each JAX-RPC engine is implemented differently (even they have to implement all JAX-RPC API, but low level stub call is engine dependent).
    So to generate you class from WSDL, you have to have tool first. Since all J2EE 1.4 app servers are required to have implementation of JAX-RPC API and its run time engine (but many J2EE 1.3 app servers also included JAX-RPC API and engine) , what you want to do could be to find any J2EE 1.4 app server, such as WAS or WSAD, or Sun's Application Server PE 8.1, read their examples carefull and you will find the way how to generate classes from WSDL.

  • Connect Azure Pack to Service Bus for Windows Server with Custom DNS

    Hello! I'm trying to configure Azure Pack to use Service Bus for Windows Server 1.1 with Custom DNS.
    All runs on one virtual machine (Windows Server 2012 R2) in Windows Azure.
    I following this post:
    roysvork.wordpress.com/2014/06/14/developing-against-service-bus-for-windows-1-1
    Replace FramDNS "servicebus" to "mymachine.cloudapp.net", and create certificate:
    SelfSSL /N:CN=mymachine.cloudapp.net /V:1000 /T
    On Windows Azure Virtual Machine:
    1.I'll set publuc DNS: mymachine.cloudapp.net
    2.Open ports: 10354,10355,10356,10359,10000-10004
    3.In hosts file: 127.0.0.1 mymachine.cloudapp.net
    4.Create certificate:
    SelfSSL /N:CN=mymachine.cloudapp.net /V:1000 /T
    PowerShell:
    Stop-SBFarm –Verbose
    Set-SBFarm -FarmDns 'mymachine.cloudapp.net'
    Update-SBHost –Verbose
    Start-SBFarm –Verbose
    New-SBAuthorizationRule -NamespaceName ServiceBusDefaultNamespace -Name MainRule -Rights Manage, Send, Listen
    Afther that i can connect to my ServiceBusDefaultNamespace with SAS.
    It's work perfect. But, When I try to create Service Bus Namespace from Azure Pack Tenant portal - in Log an Exception:
    Namespace Provisioning Exception. TrackingId: . SystemId: . Namespace: SomeNamespace.
    Method: Activating. Exception: System.Net.Http.HttpRequestException: An error occurred while
    sending the request. ---> System.Net.WebException: The underlying connection was closed:
    Could not establish trust relationship for the SSL/TLS secure channel. --->
    System.Security.Authentication.AuthenticationException: The remote certificate is invalid according
    to the validation procedure.
    And status of namespace - Activating.
    Please help!

    Hi Alexander,
    According to the log, it seems that the validation process of the certificate failed.
    Please make sure that the certificate is installed in the client properly.
    Usually, self-signed certificate should be installed in the Computer Account-->Trusted Root Certificate Authorities.
    Best Regards.
    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Business partner creation - Not in sync with customer numbers -

    Hi All
    I am trying to do the BP conversion in collections management.
    The customer number range for account group ZXXX  is (80000 to 89999) and the external number range flag is not selected.
    I have created created a number range Y2 through BUCF, with numbers from (80000 to 89999), I did not choose external flag, thinking it should be same as customer number range. I have created a BP group ZXXX and assigned this number range Y2.
    Later when I did the BP conversion through MDS_LOAD_COCKPIT, I observed that the BPs are not in sync with the customer numbers.
    So my question, should I have choosen external number range flag in BUCF, even though its not selected in the customer number range? Has this caused the issue?
    Please help me understand this and rectify this issue.
    thanks in advance.
    Krishna

    Hi Christobal,
    Thank you so much for you response. 
    As suggested, I have checked BP number range as external. Later when I ran MDS_LOAD_COCKPIT, I get the below messages
    Grouping ZXXX has external number assignment, enter a number
    Partner data processed with key PartnerGUID 4E1BD7375F080AE0E10080000A5B030E
    Grouping ZXXX has external number assignment, enter a number
    So is there any other setting which I might be missing?
    Please advise.
    Thanks
    Krishna

  • Block and Unblock the .zip and .rar files based on doamin or user account base on incoming mails with ironport email security.

    Hi All,
    Request you all to help me out in blocking/dropping only the attachments with the extension .rar and .zip in incoming mails for particular users or domains.
    as of now I have did for all the domains or users.However, I want to unblock it only for some particular/specific users and for rest it should block.
    kindly help me with the steps to do the configuration.
    Thanks a ton in advance
    Regards,
    LRN

    It sounds like you just need to use different incoming mail policies per group of individuals you want to block/drop .rar and .zip and those which you don't want this to happen.
    The fact that you want a specific group to be allowed receipt of these and everyone else should have these blocked I would recommend creating an additional incoming mail policy that does NOT have a content filter that performs this blocking.  Add the appropriate users to this incoming mail policy.  Then create a incoming content filter that does this dropping of .rar and .zip files and apply this to the Default Incoming Mail Policy.
    The content filter in this situation would not need a condition, just a action of strip attachments by file info , filename contains  .rar or .zip
    Here is a useful regex for the content filter action:  (?i)\.(zip|rar)
    Hope this helps!
    Steve

  • Service level accounts and security policy

    Hello Experts,
    We would like to roll out production environment at a customer. The documentation does not provide very good solution for the scenario when service level accounts are changing.
    Customer's security policy requires all administrative accounts to be named e.g. firstname.lastname@domain. Generic productadmin@domain which are not identifiable can not be used on production servers.
    It is understood that the BPC application server runs using the permissions granted to the user ID which was used during installation (access to the Windows AD, SQL Server &c.
    If specific domain user is also member of local administrators group, he/she can indstall the product. However, if this particular account is made redundant and the administrator's role is appointed to another employee, the latter can not access the system with administrative rights.
    Moreover, if the BPC administrator's account is disabled for whatever reasons, the system fails.
    Is there any good suggestions for this kind of scenario?
    Thanks

    Thanks Scott,
    This is what I have suggested but the problem is that the customer's policy does not allow anonymous accounts controlling their production systems, the administrative accounts can only be personal accounts like firstname.lastname@domain.
    It seems that the only solution is to use administrator's personal credentials and in case those change, they need to go through the Ops guide and change everything manually.
    Lucikly there is a bit simpler way to do this. Instead of manually changing credentials for every COM+ app as Ops Guide suggests, you can olny change three of those:
    OsoftDatabaseADMIN
    OsoftDatabaseSYSADMIN
    OsoftDatabaseUSER
    Then use Service Manager password reset function and it will update all COM+ apps in one go.

  • Need some clarification in WSDL based Proxy & Business Services

    Hi,
    Whenever we configure a Proxy service or Business service based on a WSDL, we use to select Port option instead of Binding when selecting our WSDL for the proxy/business service. Now my ques is why we go for a port instead of binding? what is the difference between them?
    My ques may seem very basic but i have this doubt for long time so i am postin this.
    Thanks,
    Arun

    Hi Arun,
    In my opinion that is not such a big deal, and in most of the cases you can choose any of the options...
    I usually prefer port because it keeps the service name... If you are proxying someone else's service it is better to keep it in a way that the service consumer doesn't notice the difference...
    I'm guessing there are cases out there where the service consumer client requires that the binding operations be unchanged... But I've never came across with one of them...
    Hope that clarifies...
    Cheers,
    Vlad

  • Urgent:Assigning Payload to business service based on WSDL

    Hi,
    I have a business service, wrapped on a wsdl, whose message tag has multiple part tags of type string, now I am not sure as how to pass values to my business service as payload when I am trying to route to this business service, as there is no XSD to comply with, and since the wsdl is a client wsdl so I cannot change it.
    regards,
    rahul

    Hi Anuj,
    This is my wsdl, I have changes namespaces etc for security and compliance issues.
    <?xml version="1.0"?>
    <wsdl:definitions xmlns="http://schemas.xmlsoap.org/wsdl/"
         xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/"
         xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" xmlns:xsd="http://www.w3.org/2001/XMLSchema"
         xmlns:tns="https://ws.local.co.in/soap/fix/1.3/" targetNamespace="https://ws.local.co.in/soap/fix/1.3/">
         <wsdl:types>
              <xsd:schema targetNamespace="https://ws.local.co.in/soap/fix/1.3/">
                   <xsd:complexType name="vAuthHeader">
                        <xsd:all>
                             <xsd:element name="userName" type="xsd:string" />
                             <xsd:element name="password" type="xsd:string" />
                        </xsd:all>
                   </xsd:complexType>
              </xsd:schema>
         </wsdl:types>
         <message name="AuthHeaderMessage">
              <part name="AuthHeader" type="tns:vAuthHeader" />
         </message>
         <message name="cancellationRequest">
              <part name="valuationMessage" type="xsd:string" />
              <part name="reason_id" type="xsd:int" />
              <part name="comments" type="xsd:string" />
         </message>
         <message name="cancellationRequestResponse">
              <part name="result" type="xsd:int" />
         </message>     
         <wsdl:portType name="CheckThirdpartyPortType">
              <wsdl:operation name="cancellationRequest">
                   <wsdl:input message="tns:cancellationRequest" />
                   <wsdl:output message="tns:cancellationRequestResponse" />
              </wsdl:operation>          
         </wsdl:portType>
         <binding name="CheckThirdpartyBinding" type="tns:CheckThirdpartyPortType">
              <soap:binding style="rpc"
                   transport="http://schemas.xmlsoap.org/soap/http" />
              <wsdl:operation name="cancellationRequest">
                   <soap:operation
                        soapAction="https://mythirdparty.local.co.in/soap/fix/1.3.1/index.php?n=localHunt&amp;method=cancellationRequest"
                        style="rpc" />
                   <wsdl:input>
                        <soap:header use="encoded"
                             namespace="https://ws.local.co.in/soap/fix/1.3/" message="tns:AuthHeaderMessage"
                             part="AuthHeader" encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" />
                        <soap:body use="encoded" namespace="https://ws.local.co.in/soap/fix/1.3/"
                             encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" />
                   </wsdl:input>
                   <wsdl:output>
                        <soap:header use="encoded"
                             namespace="https://ws.local.co.in/soap/fix/1.3/" message="tns:AuthHeaderMessage"
                             part="AuthHeader" encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" />
                        <soap:body use="encoded" namespace="https://ws.local.co.in/soap/fix/1.3/"
                             encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" />
                   </wsdl:output>
              </wsdl:operation>          
         </binding>
         <wsdl:service name="CheckThirdparty">
              <wsdl:port name="CheckThirdpartyPort" binding="tns:CheckThirdpartyBinding">
                   <soap:address
                        location="https://mythirdparty.local.co.in/soap/fix/1.3.1/index.php?n=localHunt&amp;handle" />
              </wsdl:port>
         </wsdl:service>
    </wsdl:definitions>

  • Invoke a Web Service - 401 Error - Authentication?

    I've been through the Integrator's Guide for Oracle Business Intelligence Enterprise Edition, attempting to setup Action Framework so we can use OBIEE to push data to Sharepoint 2011.
    I came across the article below and found it to be helpful in getting past the first hurdle which was identifying why the actionframeworkconfig.xml file was not being read properly.
    ActionFrameworkConfig.xml structure changed from 11.1.1.5 to 11.1.1.6
    I am working in 11.1.1.6.
    The concern or question I have is I am attempting to access a WSDL from Sharepoint that does not allow annonymous access. I take the steps below and get the error 'HTTP connection error code is 401'.
    1) Choose under Create... 'Action' from within OBIEE 11g
    2) Pick 'Invoke a Web Service'
    3) In the WSDL URL field, populate it with the path for the Sharepoint WSDL.
    a. https://sharepointhost/_vti_bin/Lists.asmx?WSDL
    4) Choose 'Open'
    5) Receive error.
    So my question is, is there a way to control the authentication here?
    Thank you in advance.

    First you map your service .wsdl file in the external resources as a WebService.
    Create a module in your Catalog and right click >> Catalogue Component >> Web Service
    Then you call it like it was an object in your code...
    String result = MyService.returnMeAString();
    logMessage(result);

  • Creating a Business Service for Start/Stop Application Service in CCB 2.3.1

    Hi,
    I'm in the process of creating a BPA script that invokes a Business Service to perform a Start/Stop for a given Account ID/Premise ID combination. The Business Service is using the base Application Service: Start Stop (CILCSSEP). I am moving the Account ID and Premise ID, along with the start date and requested by fields to the data area of the Business Service, prior to invoking it. When I invoke the Business Service via the BPA script, it throws the below error message... I'm at a loss because the BILL_ADDR_SRCE_FLG is being set to a default of "PREM" on the Business Service Schema:
    A Bill Address Source is required on the address override record. Please enter a valid value.
    One of these two is true:
    1) The Bill Route Type on this record has a Bill Routing Method of 'Postall', or
    2) The main customer on the Account has a Quote Route Type with a Quote Routing Method of 'Postal'.
    In either case, the Bill Address Source must be populated with a valid value.
    If you need support please supply the following info to system support:
    Message number: 3, 59204
    Business Service: CMSTARTSERVICE
    Application Service: CILCSSEP
    Schema:
    <schema pageAction="fastChange">
    <accountId mapField="ACCT_ID"/>
    <df mapField="DEFAULT_FOR_FLG"/>
    <startDate mapField="STRT_START_DT"/>
    <startOption mapField="STRT_TYPE_FLG"/>
    <premiseId mapField="STRT_PREM_ID"/>
    <premAddress mapField="ADDRESS1"/>
    <premCity mapField="CITY"/>
    <startCisDiv mapField="STRT_CIS_DIVISION"/>
    <startReqBy mapField="STRT_STRT_REQ_BY"/>
    <bldStrtSaSw mapField="BUILD_START_SA_SW" default="true"/>
    <accountIdtwo mapField="ACCT_ID2"/>
    <mainCustPerId mapField="MAIN_CUST_PER_ID"/>
    <billFrmtFlg mapField="BILL_RTE_TYPE_CD" default="POSTAL" private="true"/>
    <billAddrSrcFlg mapField="BILL_ADDR_SRCE_FLG" default="PREM"/>
    <billAddrSrcFlg2 mapField="BILL_ADDR_SRCE_FLG2" default="PREM"/>
    <startStopTelephoneOverride type="list" mapList="OVRD_PHONE">
    <accountId mapField="ACCT_ID"/>
    <sequence mapField="SEQ_NUM"/>
    <phoneType mapField="PHONE_TYPE_CD"/>
    <internationalPrefix mapField="COUNTRY_CODE"/>
    <phone mapField="PHONE"/>
    <extension mapField="EXTENSION"/>
    <version mapField="VERSION"/>
    </startStopTelephoneOverride>
    <startBtn mapField="ACTION_START_SW" default="true" private="true"/>
    </schema>
    I'm running CC&B 2.3.1 - Any help in pointing me in the right direction to get this working would be greatly appreciated, Thanks!
    Regards,
    Jack

    Hi,
    Can you try and do this transaction online and see if the error occurs as well? If so run it with traces on and check for the details just before the error is thrown. ( you can also switch on debug via the service call, but it may be easier to debug when doing this online. ) I am predicting this error will occur also when you do it online.
    When you are using an Account with its main Person set up with BILL_ADDR_SRC_FLG as PREM you will need a valide PREM_ID on the CI_ACCT record for MAILING_PREM_ID and the premise needs to have a switch set to YES indicating it is a Mailing Address type Premise.
    Good luck
    Arjen

  • JDE business services

    Hi,
    1.BPEL can invoke JDE Business Services(wsdl) but similarly, can JDE Business Services invoke BPEL web service(wsdl) ?
    Thanks
    Edited by: soauser on Aug 20, 2010 11:58 AM
    Edited by: soauser on Aug 20, 2010 11:59 AM
    Edited by: soauser on Aug 20, 2010 2:48 PM
    Edited by: soauser on Sep 2, 2010 7:57 AM

    Demo E900 is a big mess, perhaps "Oracle Lab" packaged it this way.
    Do this:
    1- Create a project "Temp"
    2- Check out F986020 & F986030 (only specs available, no table exists in the data source) - if you try to see by UTB or databrowser
    3- Generate table & index in design (take every thing as default)
    4- Now try check-in your BSSVs.
    5 Goodluck

  • Can Service Script catch/process Business Service error?

    We have a Service Script invoked by XAI Inbound Service that is invoking a Business Service. If an error occurs in the BS, we would like to be able to capture/process it within the SS, rather than the process "failing"...
    As an example, the CC&B Demo database includes SS CI_MRInput and BS CI_RegisterReadHighLowLimits (see CI_MRInput script below).
    In the Demo environment, the CI_MRInput is invoked by a BPA Script CI_MRRouteA, in which case "with warn" may be specified to effect processing of the error.
    However, when invoked via the XAI Inbound Service, an error from the BS (ex: 8:11024) causes the CC&B process to "fail" and a SOAP Fault and/or CC&B error details to be sent to the external process. This is not desired.
    Ideally, we'd like the SS to catch the error and send an agreed upon error code to the external process.
    Any assistance in this matter will be greatly appreciated.
    CI_MRInput Service Script:
    10: move "parm/meterReadDetails/meterConfigurationId" to "MeterConfiguration/meterConfigurationId";
    20: invokeBO 'CI_MeterConfiguration' using "MeterConfiguration" for read;
    30: edit data
    // Reset register reads
    move null to "parm/meterReadDetails/register";
    // Reset Register remarks
    if ("parm/meterReadDetails/remark/readerRemark != $BLANK")
    move null to "parm/meterReadDetails/remark";
    end-if;
    // Using the meter configuration retrieved, setup the meter read elements
    move "MeterConfiguration/*" to "parm/meterReadDetails/*";
    // Default Read Type (60=Regular) and Use on Bill to 'Y'
    move '60' to "parm/meterReadSchedule/readType";
    move 'true' to "parm/meterReadDetails/useOnBill";
    move "concat(parm/meterReadSchedule/scheduledReadDate,'-12.00.00')" to "parm/meterReadDetails/readDateTime";
    // Get the High/Low Limit for each register
    move '0' to $registerIndex;
    move "parm/meterReadDetails/readDateTime" to "HighLowLimits/readDateTime";
    move "parm/meterReadSchedule/readType" to "HighLowLimits/readType";
    for ($REG in "parm/meterReadDetails/register")
    move "$REG/registerId" to "HighLowLimits/registerId";
    move "parm/meterReadSchedule/spId" to "HighLowLimits/spId";
    invokeBS 'CI_RegisterReadHighLowLimits' using "HighLowLimits";
    move "HighLowLimits/highLimit" to "parm/meterReadDetails/register[$registerIndex]/highLimit";
    move "HighLowLimits/lowLimit" to "parm/meterReadDetails/register[$registerIndex]/lowLimit";
    move "1 + $registerIndex" to $registerIndex;
    end-for;
    end-edit;

    Use the following BS which will execute your SS(from this SS call your BS) and rollback the transaction and return the error code as a Output.
    BS Name: F1-SavePointDispatcher
    So you through back agreed error according to error code you have received by BS.

  • Error when calling the business services with Encryption - MustUnderstand h

    I was getting this error when i invoke my business service through Oracle Service Bus Console:
    *<faultstring>*
    *MustUnderstand headers:[{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] are not understood*
    *</faultstring>*
    *<faultcode>SOAP-ENV:MustUnderstand</faultcode>*
    <soapenv:Envelope      xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
         <soap:Header      xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
         </soap:Header>
         <soapenv:Body>
         <ger:gerarHashSenha      xmlns:ger="http://www.abc.com.br/SomeService">
         <!--Optional:-->
         <arg0>string</arg0>
         </ger:gerarHashSenha>
         </soapenv:Body>
         </soapenv:Envelope>
         <soapenv:Envelope      xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
         <soap:Header      xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
         <wsse:Security      soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
         <ns1:EncryptedKey      Id="FLTGqSbFbsmt2Q2l" xmlns:ns1="http://www.w3.org/2001/04/xmlenc#">
         <ns1:EncryptionMethod      Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
         <ns2:KeyInfo      xmlns:ns2="http://www.w3.org/2000/09/xmldsig#">
         <wsse:SecurityTokenReference      wsu:Id="str_a6QZHoS8oRqxbtgS" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
         <ns2:X509Data>
         <ns2:X509IssuerSerial>
         <ns2:X509IssuerName>
         CN=SerasaACGlobal,OU=Serasa Autoridade Certificadora Global,O=Serasa,C=BR
         </ns2:X509IssuerName>
         <ns2:X509SerialNumber>5023300869337873804</ns2:X509SerialNumber>
         </ns2:X509IssuerSerial>
         </ns2:X509Data>
         </wsse:SecurityTokenReference>
         </ns2:KeyInfo>
         <ns1:CipherData>
         <ns1:CipherValue>
         l3um2rVftq5ddA24DPNpZpofHEcmCha9ZBraglFKKzTpL+PhKmRmAyaJC2V5xWqBssxQGRDWhN9z+eHP8ENLMDP/mlHRw89WWQ7VkATSAd+k8ny/lesTLO7RUuLAiPlueOYUN8vpD4BJcI/lL/8jL0utMrQ7k+fhELDnBMB0lIY=
         </ns1:CipherValue>
         </ns1:CipherData>
         <ns1:ReferenceList>
         <ns1:DataReference      URI="#Ak1K01RK8B6RKDn3"/>
         </ns1:ReferenceList>
         </ns1:EncryptedKey>
         </wsse:Security>
         </soap:Header>
         <soapenv:Body>
         <ns1:EncryptedData      Id="Ak1K01RK8B6RKDn3" Type="http://www.w3.org/2001/04/xmlenc#Content" MimeType="text/xml" Encoding="UTF-8" xmlns:ns1="http://www.w3.org/2001/04/xmlenc#">
         <ns1:EncryptionMethod      Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
         <ns1:CipherData>
         <ns1:CipherValue>
         RMu5vmRk3KczXzx57Wc8sIcdBDySyGOL4P0VrN+rwOjOcqc3ALCGbxu9VlRB4nJJTDb/1wxuh+lJlnBEgwS+7q1JVDuA81HDSqq4oPtqhQ2wYVMyxOY0YVm2Tj8ntUdTYh0OQrPg0TwmSsi3UUnuKDPR9tQqmZvHc+DF+j8yI71nSN4WPp1MVBr8E7Z7B9sPBDlI7Bp9n68=
         </ns1:CipherValue>
         </ns1:CipherData>
         </ns1:EncryptedData>
         </soapenv:Body>
         </soapenv:Envelope>
         Response Document      
    The invocation resulted in an error: Internal Server Error.
         <S:Envelope      xmlns:S="http://schemas.xmlsoap.org/soap/envelope/">
         <S:Body>
         <SOAP-ENV:Fault      xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
         <faultstring>
         MustUnderstand headers:[{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] are not understood
         </faultstring>
         <faultcode>SOAP-ENV:MustUnderstand</faultcode>
         </SOAP-ENV:Fault>
         </S:Body>
         </S:Envelope>
         Response Metadata      
         <con:metadata      xmlns:con="http://www.bea.com/wli/sb/test/config">
         <tran:headers      xsi:type="http:HttpResponseHeaders" xmlns:http="http://www.bea.com/wli/sb/transports/http" xmlns:tran="http://www.bea.com/wli/sb/transports" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
         <tran:user-header      name="Set-Cookie" value="JSESSIONID=YypvL1RGdHs3fRGs3RSwvGrdQpzhTyY6FJ0z6VK1tRtLhR5L9V7S!-778340443; path=/"/>
         <tran:user-header      name="X-Powered-By" value="Servlet/2.5 JSP/2.1"/>
         <http:Cache-Control>no-cache="Set-Cookie"</http:Cache-Control>
         <http:Content-Type>text/xml;charset="utf-8"</http:Content-Type>
         <http:Date>Fri, 28 May 2010 00:41:40 GMT</http:Date>
         <http:Transfer-Encoding>chunked</http:Transfer-Encoding>
         </tran:headers>
         <tran:response-code      xmlns:tran="http://www.bea.com/wli/sb/transports">2</tran:response-code>
         <tran:response-message      xmlns:tran="http://www.bea.com/wli/sb/transports">Internal Server Error</tran:response-message>
         <tran:encoding      xmlns:tran="http://www.bea.com/wli/sb/transports">utf-8</tran:encoding>
         <http:http-response-code      xmlns:http="http://www.bea.com/wli/sb/transports/http">500</http:http-response-code>
         </con:metadata>
    Edited by: victorjabur on May 27, 2010 5:48 PM

    I've the same issue... did someone come across. OTN moderators please answer to this.

Maybe you are looking for