Mailing-List: contact axis-user-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: axis-user@ws.apache.org
Received-SPF: pass (herse.apache.org: local policy)
Message-ID: <454B2F96.1070107@web.de>
Date: Fri, 03 Nov 2006 13:01:26 +0100
From: Christian Keiler <christian_1979@web.de>
User-Agent: Thunderbird 1.5.0.7 (Windows/20060909)
MIME-Version: 1.0
To: axis-user@ws.apache.org
Subject: WSS4J and UsernameToken replay
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit
Sender: christian_1979@web.de

Hi,

I'm using Axis2 in connection with the rampart module. I want to 
authenticate users by an UsernameToken using digests. Considering 
possible replay attacks I want to save some nonce values within my 
service implementation and do not want to accept twice used "nonce" in a 
given time. Does one of you know, how to do this with the mentioned 
frameworks? The WSPasswordCallback is missing a getNonce() and a 
getCreated() method as well...is this "just" a bug or are there other 
possibilities to manage my problem?

Thanks in advance,
Christian

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org