Why is the security header empty in the response when mustUnderstand="1"?

Question

Hi
In the response the value of mustUnderstand is equal to "1", but the UsernameToken data is not echoed, the security header is empty.
It seems that either the credentials should be echoed or mustUnderstand should be equal to "0"
An Axis 1.4 client threw an Exception because they interpreted the spec as such, and we've dealt with that but now
I have an external party using some Microsoft stuff and they're having to intercept the response and set it to 0
before processing the response.
How should it be dealt with?
I'm happy to write a handler that does this, and I tested some Oracle sample code but the header is always null.
Source Code: AuthenticateHandler.java
This is my test request...
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<soap:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:env="http://www.w3.org/2003/05/soap-envelope" soap:mustUnderstand="1">
<wsse:UsernameToken xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:Username>TestUser</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">password</wsse:Password>
</wsse:UsernameToken>
</wsse:Security></soap:Header>
    <soap:Body xmlns:ns1="http://webservicehandler/">
        <ns1:echoElement>DSF</ns1:echoElement>
    </soap:Body>
</soap:Envelope>and my test response
<env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope" xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<env:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:env="http://www.w3.org/2003/05/soap-envelope" env:mustUnderstand="1"/>
</env:Header><env:Body><ans1:echoResponseElement xmlns:ans1="http://webservicehandler/">DSF</ans1:echoResponseElement>
</env:Body></env:Envelope>

Answer 1

You aren't addressing Apple here; we are all users like you.
Please submit to apple.com/feedback