glassfish
  1. glassfish
  2. GLASSFISH-18653

"The reference type is not supported" exception under Metro 2.2

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Cannot Reproduce
    • Affects Version/s: 3.1.2
    • Fix Version/s: None
    • Component/s: web_services
    • Labels:
      None
    • Environment:

      ubuntu server 11.10 and java 1.6

      Description

      Hello,
      could you help me please with an issue that I get when I try to connect client with my WSIT web-service under Oracle glassfish 3.1.2 using Kerberos 5?

      The exception that I get:
      apr 04, 2012 5:32:01 PM com.sun.xml.ws.security.opt.impl.keyinfo.KerberosTokenBuilder process
      SEVERE: WSS1803: The reference type is not supported
      apr 04, 2012 5:32:01 PM com.sun.xml.ws.security.opt.impl.dsig.SignatureProcessor sign
      SEVERE: WSS1701: Sign operation failed.
      com.sun.xml.wss.XWSSecurityException: WSS1803: The reference type is not supported
      at com.sun.xml.ws.security.opt.impl.keyinfo.KerberosTokenBuilder.process(KerberosTokenBuilder.java:100)
      at com.sun.xml.ws.security.opt.impl.keyinfo.SymmetricTokenBuilder.process(SymmetricTokenBuilder.java:290)
      at com.sun.xml.ws.security.opt.impl.dsig.TokenProcessor.process(TokenProcessor.java:190)
      at com.sun.xml.ws.security.opt.impl.dsig.SignatureProcessor.sign(SignatureProcessor.java:109)
      at com.sun.xml.wss.impl.filter.SignatureFilter.sign(SignatureFilter.java:631)
      at com.sun.xml.wss.impl.filter.SignatureFilter.process(SignatureFilter.java:589)
      at com.sun.xml.wss.impl.HarnessUtil.processWSSPolicy(HarnessUtil.java:93)
      at com.sun.xml.wss.impl.HarnessUtil.processDeep(HarnessUtil.java:272)
      at com.sun.xml.wss.impl.SecurityAnnotator.processMessagePolicy(SecurityAnnotator.java:189)
      at com.sun.xml.wss.impl.SecurityAnnotator.secureMessage(SecurityAnnotator.java:150)
      at com.sun.xml.wss.jaxws.impl.SecurityTubeBase.secureOutboundMessage(SecurityTubeBase.java:397)
      at com.sun.xml.wss.jaxws.impl.SecurityClientTube.processClientRequestPacket(SecurityClientTube.java:311)
      at com.sun.xml.wss.jaxws.impl.SecurityClientTube.processRequest(SecurityClientTube.java:240)
      at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:629)
      at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:588)
      at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:573)
      at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:470)
      at com.sun.xml.ws.client.Stub.process(Stub.java:319)
      at com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:157)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:109)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:89)
      at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:140)
      at $Proxy44.hello(Unknown Source)
      at client.Client.doTest(Client.java:16)
      at client.Client.main(Client.java:7)

      apr 04, 2012 5:32:01 PM com.sun.xml.wss.jaxws.impl.SecurityTubeBase secureOutboundMessage
      SEVERE: WSSTUBE0024: Error in Securing Outbound Message.
      com.sun.xml.wss.XWSSecurityException: WSS1803: The reference type is not supported
      at com.sun.xml.ws.security.opt.impl.keyinfo.KerberosTokenBuilder.process(KerberosTokenBuilder.java:100)
      at com.sun.xml.ws.security.opt.impl.keyinfo.SymmetricTokenBuilder.process(SymmetricTokenBuilder.java:290)
      at com.sun.xml.ws.security.opt.impl.dsig.TokenProcessor.process(TokenProcessor.java:190)
      at com.sun.xml.ws.security.opt.impl.dsig.SignatureProcessor.sign(SignatureProcessor.java:109)
      at com.sun.xml.wss.impl.filter.SignatureFilter.sign(SignatureFilter.java:631)
      at com.sun.xml.wss.impl.filter.SignatureFilter.process(SignatureFilter.java:589)
      at com.sun.xml.wss.impl.HarnessUtil.processWSSPolicy(HarnessUtil.java:93)
      at com.sun.xml.wss.impl.HarnessUtil.processDeep(HarnessUtil.java:272)
      at com.sun.xml.wss.impl.SecurityAnnotator.processMessagePolicy(SecurityAnnotator.java:189)
      at com.sun.xml.wss.impl.SecurityAnnotator.secureMessage(SecurityAnnotator.java:150)
      at com.sun.xml.wss.jaxws.impl.SecurityTubeBase.secureOutboundMessage(SecurityTubeBase.java:397)
      at com.sun.xml.wss.jaxws.impl.SecurityClientTube.processClientRequestPacket(SecurityClientTube.java:311)
      at com.sun.xml.wss.jaxws.impl.SecurityClientTube.processRequest(SecurityClientTube.java:240)
      at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:629)
      at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:588)
      at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:573)
      at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:470)
      at com.sun.xml.ws.client.Stub.process(Stub.java:319)
      at com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:157)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:109)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:89)
      at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:140)
      at $Proxy44.hello(Unknown Source)
      at client.Client.doTest(Client.java:16)
      at client.Client.main(Client.java:7)

      apr 04, 2012 5:32:01 PM com.sun.xml.wss.jaxws.impl.SecurityClientTube processClientRequestPacket
      SEVERE: WSSTUBE0024: Error in Securing Outbound Message.
      com.sun.xml.wss.impl.WssSoapFaultException: WSS1803: The reference type is not supported
      at com.sun.xml.wss.impl.SecurableSoapMessage.newSOAPFaultException(SecurableSoapMessage.java:336)
      at com.sun.xml.wss.jaxws.impl.SecurityTubeBase.secureOutboundMessage(SecurityTubeBase.java:402)
      at com.sun.xml.wss.jaxws.impl.SecurityClientTube.processClientRequestPacket(SecurityClientTube.java:311)
      at com.sun.xml.wss.jaxws.impl.SecurityClientTube.processRequest(SecurityClientTube.java:240)
      at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:629)
      EXCEPTION: WSSTUBE0024: Error in Securing Outbound Message.
      at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:588)
      at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:573)
      at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:470)
      at com.sun.xml.ws.client.Stub.process(Stub.java:319)
      at com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:157)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:109)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:89)
      at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:140)
      at $Proxy44.hello(Unknown Source)
      at client.Client.doTest(Client.java:16)
      at client.Client.main(Client.java:7)
      Caused by: com.sun.xml.wss.XWSSecurityException: WSS1803: The reference type is not supported
      at com.sun.xml.ws.security.opt.impl.keyinfo.KerberosTokenBuilder.process(KerberosTokenBuilder.java:100)
      at com.sun.xml.ws.security.opt.impl.keyinfo.SymmetricTokenBuilder.process(SymmetricTokenBuilder.java:290)
      at com.sun.xml.ws.security.opt.impl.dsig.TokenProcessor.process(TokenProcessor.java:190)
      at com.sun.xml.ws.security.opt.impl.dsig.SignatureProcessor.sign(SignatureProcessor.java:109)
      at com.sun.xml.wss.impl.filter.SignatureFilter.sign(SignatureFilter.java:631)
      at com.sun.xml.wss.impl.filter.SignatureFilter.process(SignatureFilter.java:589)
      at com.sun.xml.wss.impl.HarnessUtil.processWSSPolicy(HarnessUtil.java:93)
      at com.sun.xml.wss.impl.HarnessUtil.processDeep(HarnessUtil.java:272)
      at com.sun.xml.wss.impl.SecurityAnnotator.processMessagePolicy(SecurityAnnotator.java:189)
      at com.sun.xml.wss.impl.SecurityAnnotator.secureMessage(SecurityAnnotator.java:150)
      at com.sun.xml.wss.jaxws.impl.SecurityTubeBase.secureOutboundMessage(SecurityTubeBase.java:397)
      ... 14 more

      Glassfish and KDC is running under ubuntu server 11.10 and java 1.6, client - under ubuntu desktop 11.10 and java 1.6.

      I used this page to configure kerberos: http://www.alittletooquiet.net/text/kerberos-on-ubuntu/
      and this page to configure glassfish and my application: https://blogs.oracle.com/ashutosh/entry/running_kerberos_token_profile_s....

      I watched topic http://www.java.net/node/695180 (Kerberos handling in 2.0) but it didn't help me.

      I see (in wireshark) that client gets TGS ticket from KDC but doesn't send it to service (the exception occurs).

        Activity

        Hide
        Nithya Ramakrishnan added a comment -

        We tried to run our Kerberos SQE test with a similar policy as in this issue and it passes.

        <sp:KerberosToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Once">
        <wsp:Policy>
        <sp:RequireDerivedKeys />
        <sp:WssGssKerberosV5ApReqToken11/>
        </wsp:Policy>
        </sp:KerberosToken>

        It appears to be a configuration issue. Closing it as not reproducible.

        Show
        Nithya Ramakrishnan added a comment - We tried to run our Kerberos SQE test with a similar policy as in this issue and it passes. <sp:KerberosToken sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Once"> <wsp:Policy> <sp:RequireDerivedKeys /> <sp:WssGssKerberosV5ApReqToken11/> </wsp:Policy> </sp:KerberosToken> It appears to be a configuration issue. Closing it as not reproducible.

          People

          • Assignee:
            Nithya Ramakrishnan
            Reporter:
            natashenko
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: