Problem using WS-Policy on JAX-WS service on WL... result: stacktrace

Question

I'm facing an issue with securing some JAX-WS webservices on weblogic 10.3.0.
The webservices are created in Workshop using the top down approach (generate java from WSDL using wsdlc). No security policy annotations are used in code!
When the service is deployed, it functions correctly. When a security policy (in this case policy:Wssp1.2-2007-Https-UsernameToken-Plain.xml) is attached via WL console, I need to activate changes and restart the webservice. So far so good.
However the WSDL is not changed after adding the policy (as it does in Aqualogic). No additional information is included concerning security requirements.
When I test the service from the weblogic test client or SoapUI, I get the following stacktrace:
]] Root cause of ServletException.
java.lang.AssertionError: the tube must call the add(...) method to register itself before start copying other pipes, but weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$ServerJAXRPCTube@10a226e hasn't done so
     at com.sun.xml.ws.api.pipe.TubeCloner.copy(TubeCloner.java:104)
     at com.sun.xml.ws.api.pipe.helper.AbstractFilterTubeImpl.<init>(AbstractFilterTubeImpl.java:65)
     at com.sun.xml.ws.protocol.soap.MUTube.<init>(MUTube.java:93)
     at com.sun.xml.ws.protocol.soap.ServerMUTube.<init>(ServerMUTube.java:68)
     at com.sun.xml.ws.protocol.soap.ServerMUTube.copy(ServerMUTube.java:92)
     at com.sun.xml.ws.protocol.soap.ServerMUTube.copy(ServerMUTube.java:52)
     at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.copy(TubeFactory.java:235)
     at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.copy(TubeFactory.java:88)
     at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.copy(TubeFactory.java:235)
     at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.copy(TubeFactory.java:88)
     at com.sun.xml.ws.api.pipe.TubeCloner.copy(TubeCloner.java:102)
     at weblogic.wsee.jaxws.tubeline.FlowControlTube.<init>(FlowControlTube.java:26)
     at weblogic.wsee.jaxws.tubeline.FlowControlTube.copy(FlowControlTube.java:45)
     at weblogic.wsee.jaxws.tubeline.FlowControlTube.copy(FlowControlTube.java:9)
     at com.sun.xml.ws.api.pipe.TubeCloner.copy(TubeCloner.java:102)
     at com.sun.xml.ws.api.pipe.TubeCloner.clone(TubeCloner.java:74)
     at com.sun.xml.ws.server.WSEndpointImpl$2.<init>(WSEndpointImpl.java:231)
     at com.sun.xml.ws.server.WSEndpointImpl.createPipeHead(WSEndpointImpl.java:230)
     at com.sun.xml.ws.api.server.Adapter$Toolkit.<init>(Adapter.java:103)
     at com.sun.xml.ws.transport.http.HttpAdapter$HttpToolkit.<init>(HttpAdapter.java:427)
     at com.sun.xml.ws.transport.http.HttpAdapter.createToolkit(HttpAdapter.java:197)
     at com.sun.xml.ws.transport.http.HttpAdapter.createToolkit(HttpAdapter.java:93)
     at com.sun.xml.ws.api.server.Adapter$1.create(Adapter.java:112)
     at com.sun.xml.ws.api.server.Adapter$1.create(Adapter.java:110)
     at com.sun.xml.ws.util.Pool.take(Pool.java:75)
     at com.sun.xml.ws.transport.http.HttpAdapter.handle(HttpAdapter.java:242)
     at com.sun.xml.ws.transport.http.servlet.ServletAdapter.handle(ServletAdapter.java:134)
     at weblogic.wsee.jaxws.HttpServletAdapter$AuthorizedInvoke.run(HttpServletAdapter.java:272)
     at weblogic.wsee.jaxws.HttpServletAdapter.post(HttpServletAdapter.java:185)
     at weblogic.wsee.jaxws.JAXWSServlet.doPost(JAXWSServlet.java:180)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
     at weblogic.wsee.jaxws.JAXWSServlet.service(JAXWSServlet.java:64)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3498)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(Unknown Source)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>
First that came in to mind was the keystore/SSL configuration in Weblogic. This however functions correctly as I've also used the keystore/SSL config for the Aqualogic (deployed on same
WL instance) security configuration.
Can anyone help me out?
Edited by: Chris Everett NL on Jan 18, 2010 1:45 PM

Answer 1

Hi Chris,
I tried the WebService (*JAXWS*) on WLS10.3 with Policy "*policy:Wssp1.2-2007-Https-UsernameToken-Plain.xml*"...it worked for me ...Right now i am not sure exactly why it is giving exception to you...I tried with SOAP-UI as well ...but it is working fine...Please have a look on the following sample...
http://jaysensharma.wordpress.com/2010/01/19/jaxws-with-wssp1-2-2007-https-usernametoken-plain-xml-policy/
I am not sure that the sample will be useful for you or not...(if you want then i can even E-Mail you the complete testcase...if you can provide me your E-Mail Address).
Even i can see that the Policy is added in the WSDL ...
<?xml version="1.0" encoding="UTF-8"?>
<!-- Published by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is Oracle JAX-WS 2.1.3-07/10/2008 08:41 PM(bt). -->
<!-- Generated by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is Oracle JAX-WS 2.1.3-07/10/2008 08:41 PM(bt). -->
<definitions xmlns:ns1="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:tns="http://ws/Bank/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.xmlsoap.org/wsdl/" targetNamespace="http://ws/Bank/" name="Bank">
<wsp:UsingPolicy ns1:Required="true"/>
<wsp:Policy ns1:Id="Wssp1.2-2007-Https-UsernameToken-Plain.xml">
<ns2:TransportBinding xmlns:ns2="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
<wsp:Policy>
<ns2:TransportToken>
<wsp:Policy>
<ns2:HttpsToken/>
</wsp:Policy>
</ns2:TransportToken>
<ns2:AlgorithmSuite>
<wsp:Policy>
<ns2:Basic256/>
</wsp:Policy>
</ns2:AlgorithmSuite>
<ns2:Layout>
<wsp:Policy>
<ns2:Lax/>
</wsp:Policy>
</ns2:Layout>
<ns2:IncludeTimestamp/>
</wsp:Policy>
</ns2:TransportBinding>
<ns3:SupportingTokens xmlns:ns3="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
<wsp:Policy>
<ns3:UsernameToken ns3:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
<wsp:Policy>
<ns3:WssUsernameToken10/>
</wsp:Policy>
</ns3:UsernameToken>
</wsp:Policy>
</ns3:SupportingTokens>
</wsp:Policy>
<types>
<xsd:schema>
<xsd:import namespace="http://ws/Bank/" schemaLocation="https://localhost:7002/Bank_BankSOAPImpl/Bank?xsd=1"/>
</xsd:schema>
</types>
<message name="getBalance">
<part name="parameters" element="tns:getBalance"/>
</message>
<message name="getBalanceResponse">
<part name="parameters" element="tns:getBalanceResponse"/>
</message>
<portType name="Bank_BankSOAPImpl" wsp:PolicyURIs="#Wssp1.2-2007-Https-UsernameToken-Plain.xml">
<operation name="getBalance">
<input message="tns:getBalance"/>
<output message="tns:getBalanceResponse"/>
</operation>
</portType>
<binding name="BankSOAPBinding" type="tns:Bank_BankSOAPImpl">
<soap:binding transport="http://schemas.xmlsoap.org/soap/http" style="document"/>
<operation name="getBalance">
<soap:operation soapAction=""/>
<input>
<soap:body use="literal"/>
</input>
<output>
<soap:body use="literal"/>
</output>
</operation>
</binding>
<service name="Bank">
<port name="BankSOAP" binding="tns:BankSOAPBinding">
<soap:address location="https://localhost:7002/Bank_BankSOAPImpl/Bank"/>
</port>
</service>
</definitions>
Thanks
Jay SenSharma
Edited by: Jay SenSharma on Jan 19, 2010 11:42 PM