1

I am facing a weird issue of replay attack while getting response from the digest authenticated server. Real problem is that it works for all other screens in the application but it's not working for only one of the view controller.

What I know about replay attack is that it occurs in case timestamp or other parameters sent during request are repeated for two consecutive requests. But in my case I checked with the parameters sent during consecutive requests and new parameters are getting generated every time.Even timestamp is changing per request.

I have a list of view controllers from where web service is getting called for the data to be shown.Error is not happening for first few requests and is getting occurred for only one view controller.

Error log is as shown below:

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
   <soap:Body>
      <soap:Fault>
         <faultcode xmlns:ns1="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">ns1:InvalidSecurity
         </faultcode>
         <faultstring>An error was discovered processing the &lt;wsse:Security> header (An error happened processing a Username Token "A replay attack has been detected")
         </faultstring>
      </soap:Fault>
   </soap:Body>
</soap:Envelope>
Jean-François Corbett
  • 37,420
  • 30
  • 139
  • 188
user1576424
  • 215
  • 3
  • 12
  • Without any details on the request you are sending and the code you are using to create it, nobody will be able to help you. – jimpic Dec 07 '12 at 08:38

2 Answers2

0

Do you have access to the web service or only the client? If this is a CXF web service, it can be using nonce.caching or timestamp.caching which detect replay attacks.

"ws-security.enable.timestamp.cache" "ws-security.timestamp.cache.instance"

What web server client or server are you using?

Thanks, Yogesh

Yogesh Chawla
  • 1,583
  • 18
  • 16
  • i am also facing same issue so its better to add comment over here.. Using CXF web service, JBOSS EAP6 and provided nonce and timestamp both but still getting same excception – mahesh Dec 17 '13 at 06:38
0

My issue was solved by creating new nonce entry as suggested here

enter link description here

Sofia Khwaja
  • 1,909
  • 3
  • 17
  • 20