Find your people. Pick a challenge. Ship something real. The CreatorCon Hackathon is coming to the Community Pavilion for one epic night. Every skill level, every role welcome. Join us on May 5th and learn more here.

WSDL Help - "MustUnderstand headers" Error

paul971
Mega Expert

Hi All -

I am receiving a failure response message on my WSDL. I really have no idea, there seems to be nothing in the community or anywhere else about it. I have updated the wsse but to no avail.

Message Response:

<?xml version='1.0' encoding='UTF-8'?><S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"><S:Body><ns0:Fault xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="http://www.w3.org/2003/05/soap-envelope"><faultcode>ns0:MustUnderstand</faultcode><faultstring>MustUnderstand headers:[{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] are not understood</faultstring></ns0:Fault></S:Body></S:Envelope>

Header XML:

<soapenv:Header>

            <wsse:Security soap:mustUnderstand="1" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">

          <wsse:UsernameToken>

              <wsse:Username>username</wsse:Username>

              <wsse:Password>password</wsse:Password>

          </wsse:UsernameToken>

      </wsse:Security>

</soapenv:Header>

Request Header:

<soapenv:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" soap:mustUnderstand="1" soapenv:mustUnderstand="1"><wsse:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="CertId-XXXXXXXXXXXXXXXXX" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd

Any idea?

4 REPLIES 4

paul971
Mega Expert

tony_barratt
ServiceNow Employee

Hi   Paul,



There are a few posts on   Stack Overflow which refer to MustUnderstand headers   - including these two:



web services - 'Did not understand "MustUnderstand" header(s)' Error in SoapUI Response - Stack Over...



java - SOAPFaultException "MustUnderstand headers (oasis-200401-wss-wssecurity-secext-1.0.xsd) are n...



Maybe these posts are helpful?



Best Regards



Tony


I did see those and have looked extensively for this issue but nothing seems to be fixing it. Thanks tony.barratt


tony_barratt
ServiceNow Employee

Hi Paul,



The issue appears to relate to WSS


Example WS-Security SOAP envelope header


WS-Security



Could you review the config on your side and reach out to the far end for their input?



Best Regards



Tony