[Xml-compile] wsse:Security SOAP-ENV:mustUnderstand is set to 1 despite no WSS security enabled

[Robert Woodard]

Resending now that I've registered on the list.

On Mon, Dec 1, 2014 at 5:48 PM, Robert Woodard <robt.woodard at gmail.com>
wrote:

> I’m having a terrible time trying to figure out how to get the WSS SOAP
> header out of my compiled client.  For some reason, doing this:
>
>
>
> use XML::Compile::WSDL11;
>
> use XML::Compile::SOAP11;
>
> use XML::Compile::Transport::SOAPHTTP;
>
> use XML::Compile::C14N::Util qw/C14N_EXC_NO_COMM/;
>
> use XML::Compile::Util qw/pack_type/;
>
>
>
> my $wsdl = XML::Compile::WSDL11->new(“TicketManagement.wsdl");
>
>
>
> my $createTroubleTicket = $wsdl->compileClient( 'createTroubleTicket' );
>
>
>
> my @ticket_params = (
>
>     parameters => {
>
>         TroubleTicket => $ticket_xml,
>
>     }
>
> );
>
>
>
> my ($response, $trace) = $createTroubleTicket->( @ticket_params );
>
>
>
> Yields this SOAP object:
>
>
>
> <?xml version="1.0" encoding="UTF-8"?>
>
> <SOAP-ENV:Envelope xmlns:SOAP-ENV="
> http://schemas.xmlsoap.org/soap/envelope/">
>
>     <SOAP-ENV:Header>
>
>         <wsse:Security xmlns:wsse="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
> SOAP-ENV:mustUnderstand="1"/>
>
>     </SOAP-ENV:Header>
>
>     <SOAP-ENV:Body>
>
> […]
>
>
>
> And the web service responds (using Dumper($response) to dump the response
> object):
>
>
>
> Fault => {
>
>     faultstring => 'MustUnderstand headers: [{
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security]
> are not understood.',
>
>     faultcode => '{
> http://schemas.xmlsoap.org/soap/envelope/}MustUnderstand',
>
>     _NAME => 'error'
>
>   },
>
>   wsse_Security => {},
>
>   error => {
>
>     reason => 'MustUnderstand headers: [{
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security]
> are not understood.',
>
>     class => [
>
>       'http://schemas.xmlsoap.org/soap/envelope/',
>
>       'MustUnderstand'
>
>     ],
>
>     code => '{http://schemas.xmlsoap.org/soap/envelope/}MustUnderstand'
>
>   }
>
>
>
> I am at my wits’ end trying to figure out how to get rid of that SOAP
> header…or to get mustUnderstand set to zero.  Turning on WSS security on
> the service is not an option, unfortunately.
>
>
> Any suggestions?
>
>
> Sincerely,
>
>
> Rob Woodard
>
> robt.woodard at gmail.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.scsys.co.uk/pipermail/xml-compile/attachments/20141202/392f2f63/attachment.htm>