Integration with Rampart

I have also been trying to engage Rampart for web service exposed using wsf-spring. Since i could not find any concrete documentation for Rampart integration, I tried adding rampart module and security phase to axis2Confog.xml (abstract below..).

- added rampart module

<property name="modules">
    <list>
         <value>addressing</value>
         <value>rampart</value>
    </list>
</property>

- added handlers for the security phase

<!-- Security phase definition -->
    <bean id="axis2SecurityPhase" class="org.wso2.spring.ws.beans.PhaseBean">
        <property name="name" value="Security"/>
        <property name="handlers">
             <list>
                <ref bean="securityInHandler"/>
                <ref bean="securityOutHandler"/>
            </list>
        </property>
    </bean>
<!-- Security In handler -->
    <bean id="securityInHandler" class="org.wso2.spring.ws.beans.HandlerBean">
        <property name="name" value="SecurityInHandler"/>
        <property name="clazz" value="org.apache.rampart.handler.WSDoAllReceiver"/>
        <property name="orderPhase" value="Security"/>
    </bean>
<!-- Security Out handler -->
    <bean id="securityOutHandler" class="org.wso2.spring.ws.beans.HandlerBean">
        <property name="name" value="SecurityOutHandler"/>
        <property name="clazz" value="org.apache.rampart.handler.WSDoAllSender"/>
        <property name="orderPhase" value="Security"/>
    </bean>

- added the following bean ref to axis2InPhaseOrder, axis2InFaultPhaseOrder, axis2OutPhaseOrder and axis2OutFaultPhaseOrder

<ref bean="axis2SecurityPhase"/>

My spring context  had the following configuration:

<beans>
    <import resource="axis2Config.xml"/>
    <bean id="pmsDatabaseService" class="com.service.PMSDatabaseServiceImpl">
        <property name="pmsDao" ref="pmsDao"/>
    </bean>
    <bean id="services" class="org.wso2.spring.ws.WebServices">
         <property name="services">
             <list>
                 <bean id="PMSDatabase" class="org.wso2.spring.ws.SpringWebService">
                      <property name="serviceBean" ref="pmsDatabaseService"/>
                      <property name="serviceName" value="PMSDatabase"/>
                      <property name="serviceDescription" value="Service for PMS database update"/>
                      <property name="modules">
                          <list>
                               <value>addressing</value>
                               <value>rampart</value>
                         </list>
                     </property>
                     <property name="parameters">
                           <map>
                                    <entry key="InflowSecurity" value-ref="inflowConfiguration"/>
                                    <entry key="OutflowSecurity" value-ref="outflowConfiguration"/>
                           </map>
                    </property>
               </bean>
            </list>
        </property>
    </bean>

    <bean id="inflowConfiguration" class="org.apache.rampart.handler.config.InflowConfiguration">
          <property name="actionItems" value="UsernameToken"/>
          <property name="passwordCallbackClass" value="com.security.PWCBHandler"/>
    </bean>

    <bean id="outflowConfiguration" class="org.apache.rampart.handler.config.OutflowConfiguration">
         <property name="actionItems" value="UsernameToken"/>
         <property name="user" value="pmsUser"/>
         <property name="passwordCallbackClass" value="com.security.PWCBHandler"/>
    </bean>
</beans>

I also enagaged Rampart and addressing module at the client side (stub generated by axis2) following sample 11 from the Rampart distribution.

When the web service was invoked, the SOAP request had all the relevant security headers but the SOAP response had 'Configuration error' returned as axis fault.

After further investigation, I found that the error was coming from rampart code while reading the parameters from service configuration (ParameterElement was null).

So I was not sure if the security configuration I did for the web service in spring context was right. Any help will be greatly appreciated.

Thanks, Benu