search

javaee / metro-wsit

https://javaee.github.io/metro-wsit/
Other
9 stars 24 forks source link

WSS1721: Validation of Reference with URI #_4 failed #1558

Open glassfishrobot opened 13 years ago

glassfishrobot commented 13 years ago

3 tests are failing in WS Security with the following error in AIX environment.

Exception:

javax.xml.ws.soap.SOAPFaultException: WSS1721: Validation of Reference with URI #_4 failed at com.sun.xml.ws.fault.SOAP11Fault.getProtocolException(SOAP11Fault.java:193) Error : SOAP request NOT sent at com.sun.xml.ws.fault.SOAPFaultBuilder.createException(SOAPFaultBuilder.java:134) at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:123) at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:93) at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:144) at $Proxy40.ping(Unknown Source) at simple.client.PingServiceClientjs65.main(Unknown Source) Caused by: javax.xml.ws.soap.SOAPFaultException: WSS1721: Validation of Reference with URI #_4 failed at com.sun.xml.ws.security.opt.impl.util.SOAPUtil.createSOAPFault(SOAPUtil.java:234) at com.sun.xml.ws.security.opt.impl.util.SOAPUtil.getSOAPFaultException(SOAPUtil.java:203) at com.sun.xml.wss.jaxws.impl.SecurityServerTube.processRequest(SecurityServerTube.java:300) at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:641) at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:600) at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:585) at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:482) at com.sun.xml.ws.server.WSEndpointImpl$2.process(WSEndpointImpl.java:314) at com.sun.xml.ws.transport.http.HttpAdapter$HttpToolkit.handle(HttpAdapter.java:608) at com.sun.xml.ws.transport.http.HttpAdapter.handle(HttpAdapter.java:259) at com.sun.xml.ws.transport.http.servlet.ServletAdapter.invokeAsync(ServletAdapter.java:207) at com.sun.xml.ws.transport.http.servlet.WSServletDelegate.doGet(WSServletDelegate.java:159) at com.sun.xml.ws.transport.http.servlet.WSServletDelegate.doPost(WSServletDelegate.java:194) at com.sun.xml.ws.transport.http.servlet.WSServlet.doPost(WSServlet.java:80) at javax.servlet.http.HttpServlet.service(HttpServlet.java:754) at javax.servlet.http.HttpServlet.service(HttpServlet.java:847) at org.apache.catalina.core.StandardWrapper.service(StandardWrapper.java:1539) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:281) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175) at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:655) at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:595) at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:98) at com.sun.enterprise.web.PESessionLockingStandardPipeline.invoke(PESessionLockingStandardPipeline.java:91) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:162) at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:330) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:231) at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:174) at com.sun.grizzly.http.ProcessorTask.invokeAdapter(ProcessorTask.java:822) at com.sun.grizzly.http.ProcessorTask.doProcess(ProcessorTask.java:719) at com.sun.grizzly.http.ProcessorTask.process(ProcessorTask.java:1013) at com.sun.grizzly.http.DefaultProtocolFilter.execute(DefaultProtocolFilter.java:225) at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137) at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104) at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90) at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:66) at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54) at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59) at com.sun.grizzly.ContextTask.run(ContextTask.java:71) at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532) at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513) at java.lang.Thread.run(Thread.java:736) Caused by: java.lang.Exception at com.sun.xml.ws.security.opt.impl.util.SOAPUtil.createSOAPFault(SOAPUtil.java:238) ... 40 more

Please find the attached SOAP log and policy file used.

Environment

AIX, GF3.1.1, Metro 2.1.1 promotion build

glassfishrobot commented 13 years ago

Reported by msreekanth

glassfishrobot commented 13 years ago

@vbkumarjayanti said: This bug is fixed on the Trunk of metro but we did not port it back to 2.1 branch. I am not inclined to port this change right now to 2.1.1 branch. I could port it for an next update release of GlassFish 3.1.1.

I just tested a standalone sample with Same Policy on GlassFish Trunk and i see it is passing.

--request---

<?xml version='1.0' encoding='UTF-8'?>

[http://localhost:8080/IncludeTokenNever/IncludeTokenNeverService](http://localhost:8080/IncludeTokenNever/IncludeTokenNeverService) [http://test/IncludeTokenNever/operationRequest](http://test/IncludeTokenNever/operationRequest)
[http://www.w3.org/2005/08/addressing/anonymous](http://www.w3.org/2005/08/addressing/anonymous)
 uuid:60b2065a-823e-493d-a636-df12effbf4f0 2011-06-16T11:04:21Z 2011-06-16T11:09:21Z CN=SUNCA, OU=JWS, O=SUN, ST=Some-State, C=AU 2 FnLuey/P8Ag3tGBLhVMUcHRtvw8kHZ8Mnoxeaz2Kj9hcpMSf3unGWoua8SxCDbMNDE30CxH2Gv9zdikhNV4KJEHi3SyPu6hUllr11gaZRqyVXU3BuyLAyyKuoelDS9gm+h1CG80FWaw9oNc6+vmQiHd6H+62z2Q8eFg3V11HYe4= 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 e7MrGZ3Jhu1f0Z1p3VaeXoGrv4c= 5Ab1ebo4/FraGgck/A8iDx1J9+I= 4TNSAyxjcGXcc6eDkBmDFNcJNpE= rHGqZDNC3VJGN7B4MJMIBzsktWU= a3vfD8u6Yv1Fj7rYrr1f4jbCO6s= pTvHOmK+XPC5JIWm+cU8a0Gh26M= Y1TmhUuLRTt9GCgy61x4MHhBJSo= 7Xj1Znv7wydm+xFrzIk7vPm5KAg= 1dI80CpTCr7CWFSkTEc0iXiJOog= Ic64hOJAUzN1Hjcc2+N88YS42MalNrMh1M31z9fCf7usJ4K7oAqPcgQ3Sne/cwvnRPMr1NIwTldk3y5FL80jBzpLdi0PGsOVpXk1ostnutA/U/Qh9J9zhYozz7ZwrYk+DI3cnP7Y9FIDsCM71aTCWw== ------------- Response ----------- [#|2011-06-16T16:34:21.994+0530|INFO|glassfish3.2|javax.enterprise.system.std.com.sun.enterprise.server.logging|_ThreadID=17;_ThreadName=Thread-3;|http://www.w3.org/2005/08/addressing/anonymoushttp://test/IncludeTokenNever/operationResponseuuid:e2a105e3-fe2b-4c4a-bf3a-7a34cd027e9auuid:60b2065a-823e-493d-a636-df12effbf4f02011-06-16T11:04:21Z2011-06-16T11:09:21ZyfFOpp+C2CDgw32U8ASMADMS6zI=pzHspzh6/DRN7AAUVSFPl7e1Ugs=nsaAS1HZzsg+jBPJeVNWE6Wva88=Nd/8wVmBdLowQKMblBRYK+6xcjA=RDGRRNYD9WZj8K1S+qSqQyC2g3o=pTvHOmK+XPC5JIWm+cU8a0Gh26M=0vL5fn8v8dPdJ6Lb0gYu+XXOmeY=O9p8jjx+P61pFg8ozbE6/Aa0s7g=O9p8jjx+P61pFg8ozbE6/Aa0s7g=7r+4P6vW90X9SRAi/Ju/fiDsdC/ol8mnmOsChe+SiStruHpR8igpusvvgQpvf0b6A9yINCOwlQvrt0iDa0DgaRXzUgrqBWW8fYaYJFwxeEwO7IXKKW8r8i+k4fGsuVai9AHAlzCcVfTfByTfyky+I4c7kVV0RhSZDdOV+J2ss58=|#] [#|2011-06-16T16:34:21.995+0530|INFO|glassfish3.2|javax.enterprise.system.std.com.sun.enterprise.server.logging|_ThreadID=17;_ThreadName=Thread-3;|--------------------|#]
glassfishrobot commented 13 years ago

@vbkumarjayanti said: I tried to run my testcase even on AIX with GF 3.1.1 and it passes there. So i am not sure why the SQE testcase is failing.

glassfishrobot commented 13 years ago

msreekanth said: Reopening and assigning it to my self.Since this test case fails in all QE environments and Kumar is not able to reproduce it.Kumar has a servlet client for the same policy file and QE tests are based on Stand alone java client.A slight chance of this being a real issue and Kumar mentioned it to be a not important use case

Extract from Kumars email:

"I see the bug is failing in the SQE tests but my own test created using Netbeans does not fail. The only difference is that my client is a Servlet Client whereas the SQE uses a Standalone client.

So again i can do more investigation and mark it as a candidate for release notes. This unlike the previous one is not a very important usecase (ProtectTokens with Token not in Message). Also i know it is working for me in my sample, so just needs some investigation on why the SQE test fails."

glassfishrobot commented 13 years ago

@vbkumarjayanti said: Attached are the client and service. just do asadmin deploy and after that try to access as :

http://localhost:8080/IncludeTokenNeverClient/ITNeverClient

glassfishrobot commented 12 years ago

snajper said: It should be clarified whether it is a test or code issue for next release.

glassfishrobot commented 13 years ago

File: IncludeTokenNever.war Attached By: @vbkumarjayanti

glassfishrobot commented 13 years ago

File: IncludeTokenNeverClient.war Attached By: @vbkumarjayanti

glassfishrobot commented 13 years ago

File: soap-log-js65.log Attached By: msreekanth

glassfishrobot commented 13 years ago

File: wsit-simple.server.IPingService.xml Attached By: msreekanth

glassfishrobot commented 13 years ago

Was assigned to msreekanth

glassfishrobot commented 7 years ago

This issue was imported from java.net JIRA WSIT-1558