WSDL Help - "MustUnderstand headers" Error

paul971
Mega Expert

Hi All -

I am receiving a failure response message on my WSDL. I really have no idea, there seems to be nothing in the community or anywhere else about it. I have updated the wsse but to no avail.

Message Response:

<?xml version='1.0' encoding='UTF-8'?><S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/"><S:Body><ns0:Fault xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="http://www.w3.org/2003/05/soap-envelope"><faultcode>ns0:MustUnderstand</faultcode><faultstring>MustUnderstand headers:[{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] are not understood</faultstring></ns0:Fault></S:Body></S:Envelope>

Header XML:

<soapenv:Header>

            <wsse:Security soap:mustUnderstand="1" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">

          <wsse:UsernameToken>

              <wsse:Username>username</wsse:Username>

              <wsse:Password>password</wsse:Password>

          </wsse:UsernameToken>

      </wsse:Security>

</soapenv:Header>

Request Header:

<soapenv:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" soap:mustUnderstand="1" soapenv:mustUnderstand="1"><wsse:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="CertId-XXXXXXXXXXXXXXXXX" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd

Any idea?

4 REPLIES 4

paul971
Mega Expert

tony_barratt
ServiceNow Employee
ServiceNow Employee

Hi   Paul,



There are a few posts on   Stack Overflow which refer to MustUnderstand headers   - including these two:



web services - 'Did not understand "MustUnderstand" header(s)' Error in SoapUI Response - Stack Over...



java - SOAPFaultException "MustUnderstand headers (oasis-200401-wss-wssecurity-secext-1.0.xsd) are n...



Maybe these posts are helpful?



Best Regards



Tony


I did see those and have looked extensively for this issue but nothing seems to be fixing it. Thanks tony.barratt


tony_barratt
ServiceNow Employee
ServiceNow Employee

Hi Paul,



The issue appears to relate to WSS


Example WS-Security SOAP envelope header


WS-Security



Could you review the config on your side and reach out to the far end for their input?



Best Regards



Tony