Return-Path: 
 <users-return-32559-apmail-cxf-users-archive=cxf.apache.org@cxf.apache.org>
X-Original-To: apmail-cxf-users-archive@www.apache.org
Delivered-To: apmail-cxf-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id D3E73990C
	for <apmail-cxf-users-archive@www.apache.org>;
 Thu,  1 Mar 2012 08:15:50 +0000 (UTC)
Received: (qmail 62938 invoked by uid 500); 1 Mar 2012 08:15:50 -0000
Delivered-To: apmail-cxf-users-archive@cxf.apache.org
Received: (qmail 62834 invoked by uid 500); 1 Mar 2012 08:15:49 -0000
Mailing-List: contact users-help@cxf.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@cxf.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@cxf.apache.org>
List-Post: <mailto:users@cxf.apache.org>
List-Id: <users.cxf.apache.org>
Reply-To: users@cxf.apache.org
Delivered-To: mailing list users@cxf.apache.org
Received: (qmail 62820 invoked by uid 99); 1 Mar 2012 08:15:49 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Mar 2012 08:15:49 +0000
X-ASF-Spam-Status: No, hits=2.9 required=5.0
	tests=HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_NEUTRAL
X-Spam-Check-By: apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Received: from [64.95.72.244] (HELO mxout.myoutlookonline.com) (64.95.72.244)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Mar 2012 08:15:43 +0000
Received: from mxout.myoutlookonline.com (localhost [127.0.0.1])
	by mxout.myoutlookonline.com (Postfix) with ESMTP id 475FE554751
	for <users@cxf.apache.org>; Thu,  1 Mar 2012 03:15:21 -0500 (EST)
X-Virus-Scanned: by SpamTitan at mail.lan
Received: from S10HUB001.SH10.lan (unknown [10.110.2.1])
	by mxout.myoutlookonline.com (Postfix) with ESMTP id 4CF0A553D9C
	for <users@cxf.apache.org>; Thu,  1 Mar 2012 03:15:20 -0500 (EST)
Received: from S10BE002.SH10.lan ([::1]) by S10HUB001.SH10.lan ([::1]) with
 mapi id 14.01.0289.001; Thu, 1 Mar 2012 03:15:20 -0500
From: Oliver Wulff <owulff@talend.com>
To: "users@cxf.apache.org" <users@cxf.apache.org>
Subject: TransformOutInterceptor removes WS-Addressing prefix
Thread-Topic: TransformOutInterceptor removes WS-Addressing prefix
Thread-Index: Acz3f+hMkA4RH485T7a18IuPAFq3/g==
Date: Thu, 1 Mar 2012 08:15:19 +0000
Message-ID: <79AB4452999C844D9920E03635332731116111@S10BE002.SH10.lan>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [195.28.224.59]
Content-Type: multipart/alternative;
	boundary="_000_79AB4452999C844D9920E03635332731116111S10BE002SH10lan_"
MIME-Version: 1.0
X-Virus-Checked: Checked by ClamAV on apache.org

--_000_79AB4452999C844D9920E03635332731116111S10BE002SH10lan_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi there



I've configured the TransformOutInterceptor in the STS to support the old W=
S-Trust standard:



        <bean id=3D"transformerOut"
                class=3D"org.apache.cxf.interceptor.transform.TransformOutI=
nterceptor">
                <property name=3D"outTransformElements">
                        <map>
                               <entry key=3D"{http://docs.oasis-open.org/ws=
-sx/ws-trust/200512}*"  value=3D"{http://schemas.xmlsoap.org/ws/2005/02/tru=
st}*" />
                        </map>
                </property>
        </bean>

For some reason, the transform interceptor removed the wsa ns prefix in the=
 AppliesTo and thus becomes invalid xml.



I've tested this with soapUI. Here is the incoming request and the returned=
 response. Any ideas?



request:

<soap:Envelope xmlns:soap=3D"http://schemas.xmlsoap.org/soap/envelope/">
   <soap:Header>
      <wsse:Security soap:mustUnderstand=3D"1" xmlns:wsse=3D"http://docs.oa=
sis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:=
wsu=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-u=
tility-1.0.xsd">
         <wsse:UsernameToken wsu:Id=3D"UsernameToken-1">
            <wsse:Username>alice</wsse:Username>
            <wsse:Password Type=3D"http://docs.oasis-open.org/wss/2004/01/o=
asis-200401-wss-username-token-profile-1.0#PasswordText">password</wsse:Pas=
sword>
         </wsse:UsernameToken>
      </wsse:Security>
   </soap:Header>
   <soap:Body>
      <wst:RequestSecurityToken xmlns:wst=3D"http://schemas.xmlsoap.org/ws/=
2005/02/trust" xmlns:wsp=3D"http://schemas.xmlsoap.org/ws/2004/09/policy">
         <wst:KeyType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/Bear=
er</wst:KeyType>
         <wst:TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token=
-profile-1.1#SAMLV1.1</wst:TokenType>
         <wst:RequestType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/=
Issue</wst:RequestType>
         <wsp:AppliesTo xmlns:wsa=3D"http://www.w3.org/2005/08/addressing">
            <wsa:EndpointReference>
               <wsa:Address>https://nssstg1.msvcs.example.com/FIM/sps/spwsf=
std/wsf</wsa:Address>
            </wsa:EndpointReference>
         </wsp:AppliesTo>
         <wst:Claims Dialect=3D"http://schemas.xmlsoap.org/ws/2005/05/ident=
ity" xmlns:ic=3D"http://schemas.xmlsoap.org/ws/2005/05/identity">
            <ic:ClaimType Optional=3D"false" Uri=3D"http://schemas.xmlsoap.=
org/ws/2005/05/identity/claims/givenname"/>
            <ic:ClaimType Optional=3D"false" Uri=3D"http://schemas.xmlsoap.=
org/ws/2005/05/identity/claims/surname"/>
            <ic:ClaimType Optional=3D"false" Uri=3D"http://schemas.xmlsoap.=
org/ws/2005/05/identity/claims/emailaddress"/>
         </wst:Claims>
      </wst:RequestSecurityToken>
   </soap:Body>
</soap:Envelope>





response:

<soap:Envelope xmlns:soap=3D"http://schemas.xmlsoap.org/soap/envelope/"><so=
ap:Header/><soap:Body><ns2:RequestSecurityTokenResponseCollection xmlns=3D"=
http://docs.oasis-open.org/ws-sx/ws-trust/200802" xmlns:ns2=3D"http://docs.=
oasis-open.org/ws-sx/ws-trust/200512" xmlns:ns3=3D"http://docs.oasis-open.o=
rg/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:ns4=3D"ht=
tp://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0=
.xsd" xmlns:ns5=3D"http://schemas.xmlsoap.org/ws/2004/08/addressing"><ns2:R=
equestSecurityTokenResponse><ns2:TokenType>http://docs.oasis-open.org/wss/o=
asis-wss-saml-token-profile-1.1#SAMLV1.1</ns2:TokenType><ns2:RequestedSecur=
ityToken><saml1:Assertion xmlns:saml1=3D"urn:oasis:names:tc:SAML:1.0:assert=
ion" xmlns:xs=3D"http://www.w3.org/2001/XMLSchema" xmlns:xsi=3D"http://www.=
w3.org/2001/XMLSchema-instance" AssertionID=3D"_B89DBAA8B9BDD63994133058781=
32971" IssueInstant=3D"2012-03-01T07:43:33.229Z" Issuer=3D"STS SOA LAB" Maj=
orVersion=3D"1" MinorVersion=3D"1" xsi:type=3D"saml1:AssertionType"><saml1:=
Conditions NotBefore=3D"2012-03-01T07:43:33.308Z" NotOnOrAfter=3D"2012-03-0=
1T07:48:33.308Z"><saml1:AudienceRestrictionCondition><saml1:Audience>https:=
//nssstg1.msvcs.example.com/FIM/sps/spwsfstd/wsf</saml1:Audience></saml1:Au=
dienceRestrictionCondition></saml1:Conditions><saml1:AttributeStatement><sa=
ml1:Subject><saml1:NameIdentifier Format=3D"urn:oasis:names:tc:SAML:1.1:nam=
eid-format:unspecified" NameQualifier=3D"http://cxf.apache.org/sts">alice</=
saml1:NameIdentifier><saml1:SubjectConfirmation><saml1:ConfirmationMethod>u=
rn:oasis:names:tc:SAML:1.0:cm:bearer</saml1:ConfirmationMethod></saml1:Subj=
ectConfirmation></saml1:Subject><saml1:Attribute AttributeName=3D"givenname=
" AttributeNamespace=3D"http://schemas.xmlsoap.org/ws/2005/05/identity/clai=
ms"><saml1:AttributeValue xsi:type=3D"xs:string">Oliver</saml1:AttributeVal=
ue></saml1:Attribute><saml1:Attribute AttributeName=3D"surname" AttributeNa=
mespace=3D"http://schemas.xmlsoap.org/ws/2005/05/identity/claims"><saml1:At=
tributeValue xsi:type=3D"xs:string">Wulff</saml1:AttributeValue></saml1:Att=
ribute><saml1:Attribute AttributeName=3D"emailaddress" AttributeNamespace=
=3D"http://schemas.xmlsoap.org/ws/2005/05/identity/claims"><saml1:Attribute=
Value xsi:type=3D"xs:string">oliver.wulff@example.com</saml1:AttributeValue=
></saml1:Attribute></saml1:AttributeStatement><ds:Signature xmlns:ds=3D"htt=
p://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod =
Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod =
Algorithm=3D"http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference URI=
=3D"#_B89DBAA8B9BDD6399413305878132971"><ds:Transforms><ds:Transform Algori=
thm=3D"http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transfor=
m Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamesp=
aces xmlns:ec=3D"http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList=3D"xs"=
/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm=3D"http://www.w=
3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>8dPFtAoJ5fLMAfm4YN4Ifh3fhmE=3D=
</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>nCTcCczl=
bcJgDU5MTicRQnVv1xHVW7X6pYepQE54MNRFSBzF1aSvHp9+1IfJbBaQnOT1yn1WtQ4eJdyld8P=
XSF6PDjSVsftx5/ADBPYyndRx4JX64z5bu5ih9jiURLCDLoEn9G3gJJgN7DH56XzFxb9FHAXo3m=
DqSAOKuxM5/zc=3D</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certif=
icate>MIIHHDCCBQSgAwIBAgIKbaKC4wABAADlMjANBgkqhkiG9w0BAQUFADBlMRQwEgYKCZImi=
ZPyLGQB
GRYEY29ycDEWMBQGCgmSJomT8ixkARkWBnp1cmljaDEUMBIGCgmSJomT8ixkARkWBGVtZWExHzA=
d
BgNVBAMTFlp1cmljaCBJc3N1aW5nIENBIE5vIDEwHhcNMTEwOTEzMTQxNTIyWhcNMTMwOTAyMTQ=
x
NTIyWjB5MQswCQYDVQQGEwJDSDEiMCAGA1UEChMZWnVyaWNoIEZpbmFuY2lhbCBTZXJ2aWNlczE=
M
MAoGA1UECxMDTEFCMRAwDgYDVQQDEwdTVFMgR0FEMSYwJAYJKoZIhvcNAQkBFhdtYXJnby5jcm9=
u
aW5AenVyaWNoLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwFKcP+zd9SG/xsrhV8F=
4
WzE+DC3VXB8c2litGplYg67WzHbGvleJltii1Vm6NHKfQG5Aet+UvePe4P+YsmvsnzpoJ/grsst=
+
+b4qkzMaxPFwhDG2kg+XY9j3UGF2J99gi8lIx6r2q7muUcimNy8TOLMjwUI7nrvclQrpqSKpEa0=
C
AwEAAaOCAzwwggM4MAsGA1UdDwQEAwIFoDAdBgNVHQ4EFgQUmNwtKqKWcJ/Rk3H+xkubksvejAc=
w
HwYDVR0jBBgwFoAUYsbQkZrdQYEgA79rNBwTKCp12FowggEiBgNVHR8EggEZMIIBFTCCARGgggE=
N
oIIBCYaBx2xkYXA6Ly8vQ049WnVyaWNoJTIwSXNzdWluZyUyMENBJTIwTm8lMjAxLENOPWNlcGt=
p
MDAwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29=
u
ZmlndXJhdGlvbixEQz16dXJpY2gsREM9Y29ycD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2J=
h
c2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnSGPWh0dHA6Ly9wa2kuenVyaWNoLmN=
v
bS9aSUNBL1p1cmljaCUyMElzc3VpbmclMjBDQSUyME5vJTIwMS5jcmwwggE7BggrBgEFBQcBAQS=
C
AS0wggEpMIG9BggrBgEFBQcwAoaBsGxkYXA6Ly8vQ049WnVyaWNoJTIwSXNzdWluZyUyMENBJTI=
w
Tm8lMjAxLENOPUFJQSxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2aWNlcyxDTj1=
D
b25maWd1cmF0aW9uLERDPXp1cmljaCxEQz1jb3JwP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmplY3R=
D
bGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MGcGCCsGAQUFBzAChltodHRwOi8vcGtpLnp1cml=
j
aC5jb20vWklDQS9jZXBraTAwMDEuZW1lYS56dXJpY2guY29ycF9adXJpY2glMjBJc3N1aW5nJTI=
w
Q0ElMjBObyUyMDEoMSkuY3J0MDwGCSsGAQQBgjcVBwQvMC0GJSsGAQQBgjcVCIaqzXqHyZwAgf2=
J
LYH05mWH9M5IYoTSkQDyr2gCAWQCAQ8wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCc=
G
CSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQEFBQADggI=
B
AIKfuo0p023qrM6n4+fNihfJ1xnZO1zes4uomPkj4OK97JQc3RDP/oymC4bPwN+20dmF+N7ng+E=
r
3yZQ6Wwgr9UvGJuEBU8GtU3QU57X/TAsmVK9fvw0pkcrbqJo8/UVRfMB/Q16+xTdRB65ROmbCqh=
E
fZgv7xLjJjcjBwUMP7ZvxNr3cibvDrNDHu/r5sUwlUZZemmg0e/Z8ytBDS1cMiE8z7aVzFMTzzH=
C
vNS+czY11yMXsh0TqZEzIfESCGx71xnMgTekvo+0vx5z7BFAfD8J5svVdcEAuD/h5pjyQJWssrv=
m
mdudn6VDl00mP24DvU5H2g2P5LoMSLp2JpgXUNd155nd3c+RwaKCYpUtIabkth0/bpueIg8P8bG=
/
A1rTp/KQ0QwKe6ZUK44aWBeNcxoXsvedyxUqSInO2uwKHbN/K8qXwMCRDnvPCuCkP0TyOzn4xhm=
C
amnBdGPKbX61B3wmJWehxrhLPmvg00LvY+LHHJ7WxQ4G5cQv+11flYrqpF21aC9gNqNTqd/Lf9Z=
0
dZ3Jj6G7IkBmT/dIXBofi+XKq6xn4CiK/OUsR89T62tHdUu113+wCQKdd58AxKHYm48L58+LWnm=
Q
SWDspTToK2g0B8/EPDfMhiuRfchgViWpp4zvAvZPUzPJSzxkvkTD3zBeaBZFYDq6cgIbGe5g3H5=
j</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature></saml1:Ass=
ertion></ns2:RequestedSecurityToken><ns2:RequestedAttachedReference><ns4:Se=
curityTokenReference xmlns:wsse11=3D"http://docs.oasis-open.org/wss/oasis-w=
ss-wssecurity-secext-1.1.xsd" wsse11:TokenType=3D"http://docs.oasis-open.or=
g/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1"><ns4:KeyIdentifier ValueTy=
pe=3D"http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLA=
ssertionID">#_B89DBAA8B9BDD6399413305878132971</ns4:KeyIdentifier></ns4:Sec=
urityTokenReference></ns2:RequestedAttachedReference><ns2:RequestedUnattach=
edReference><ns4:SecurityTokenReference xmlns:wsse11=3D"http://docs.oasis-o=
pen.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" wsse11:TokenType=3D"http:/=
/docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1"><ns4:Ke=
yIdentifier ValueType=3D"http://docs.oasis-open.org/wss/oasis-wss-saml-toke=
n-profile-1.0#SAMLAssertionID">_B89DBAA8B9BDD6399413305878132971</ns4:KeyId=
entifier></ns4:SecurityTokenReference></ns2:RequestedUnattachedReference><w=
sp:AppliesTo xmlns:wsp=3D"http://schemas.xmlsoap.org/ws/2004/09/policy"><ws=
a:EndpointReference><wsa:Address>https://nssstg1.msvcs.example.com/FIM/sps/=
spwsfstd/wsf</wsa:Address>
            </wsa:EndpointReference>
         </wsp:AppliesTo><ns2:Lifetime><ns3:Created>2012-03-01T07:43:33.435=
Z</ns3:Created><ns3:Expires>2012-03-01T07:48:33.435Z</ns3:Expires></ns2:Lif=
etime></ns2:RequestSecurityTokenResponse></ns2:RequestSecurityTokenResponse=
Collection></soap:Body></soap:Envelope>





------

Oliver Wulff

http://owulff.blogspot.com<http://owulff.blogspot.com/>
Solution Architect
Talend Application Integration Division http://www.talend.com

--_000_79AB4452999C844D9920E03635332731116111S10BE002SH10lan_--