I have a class "CustomAuthenitcation" which overrides the AuthenticateToken()
method and implements a db lookup for validation.The class file is included
in the web service project. I have made a web.config entry.  

*********************************************************
<securityTokenManager>
       <add type="CustomAuthentication"
namespace="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" localName="usernameToken" />
     </securityTokenManager>
*********************************************************

*********************************************************
Public Class CustomAuthentication
   Inherits UsernameTokenManager

   Public Sub New()
   End Sub 'New

   Public Sub CustomAuthentication()
       'Constructor
   End Sub

   'Protected Overrides Function AuthenticateToken(ByVal token As
Microsoft.Web.Services3.Security.Tokens.UsernameToken) As String
   '    Return "sudhir"
   '    'Return AuthenticateUserAgent(token.Username, token.Password)
   'End Function


   Public Function AuthenticateUserAgent(ByVal UserID As Integer, ByVal
Password As String) As Boolean
       Return True
   End Function

   Protected Overrides Function AuthenticateToken(ByVal token As
Microsoft.Web.Services3.Security.Tokens.UsernameToken) As String
       Return "test"
   End Function

End Class

*********************************************************

I get the following error:

*********************************************************

Description:
An error occured processing an outgoing fault response.

Details of the error causing the processing failure:
System.InvalidOperationException: Send security filter on the server could
not retrieve the operation protection requirements from the operation state.
  at
Microsoft.Web.Services3.Security.SecureConversationServiceSendSecurityFilter.SecureMessage(SoapEnvelope envelope, Security security)
  at
Microsoft.Web.Services3.Security.SendSecurityFilter.ProcessMessage(SoapEnvelope envelope)
  at Microsoft.Web.Services3.Pipeline.ProcessOutputMessage(SoapEnvelope
envelope)
  at
Microsoft.Web.Services3.WseProtocol.GetFilteredResponseEnvelope(SoapEnvelope
outputEnvelope)

The SOAP fault that was being processed follows:
<soap:Envelope xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing"
xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
   <soap:Header>
       
<wsa:Action>http://schemas.xmlsoap.org/ws/2004/08/addressing/fault</wsa:Action>
       
<wsa:MessageID>urn:uuid:3eb3c3d6-ba5d-4d2d-b69f-ca93e88a3938</wsa:MessageID>
       
<wsa:RelatesTo>urn:uuid:0ebee179-2eb9-43ee-b5e6-f14bac575453</wsa:RelatesTo>
       
<wsa:To>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:To>
   </soap:Header>
   <soap:Body>
       <soap:Fault>
           <faultcode
xmlns:prefix0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
d">prefix0:FailedAuthentication</faultcode>
           <faultstring>System.Web.Services.Protocols.SoapHeaderException:
Microsoft.Web.Services3.Security.SecurityFault: The security token could not
be authenticated or authorized
  at
Microsoft.Web.Services3.Security.Tokens.UsernameTokenManager.OnLogonUserFailed(UsernameToken token)
  at
Microsoft.Web.Services3.Security.Tokens.UsernameTokenManager.AuthenticateToken(UsernameToken token)
  at
Microsoft.Web.Services3.Security.Tokens.UsernameTokenManager.VerifyToken(SecurityToken token)
  at
Microsoft.Web.Services3.Security.Tokens.SecurityTokenManager.LoadXmlSecurityToken(XmlElement element)
  at
Microsoft.Web.Services3.Security.Tokens.SecurityTokenManager.GetTokenFromXml(XmlElement element)
  at Microsoft.Web.Services3.Security.Security.LoadToken(XmlElement
element, SecurityConfiguration configuration, Int32& tokenCount)
  at Microsoft.Web.Services3.Security.Security.LoadXml(XmlElement element)
  at Microsoft.Web.Services3.Security.Security.CreateFrom(SoapEnvelope
envelope, String localActor, String serviceActor)
  at
Microsoft.Web.Services3.Security.ReceiveSecurityFilter.ProcessMessage(SoapEnvelope envelope)
  at Microsoft.Web.Services3.Pipeline.ProcessInputMessage(SoapEnvelope
envelope)
  at Microsoft.Web.Services3.WseProtocol.FilterRequest(SoapEnvelope
requestEnvelope)
  at Microsoft.Web.Services3.WseProtocol.RouteRequest(SoapServerMessage
message)
  at System.Web.Services.Protocols.SoapServerProtocol.Initialize()
  at System.Web.Services.Protocols.ServerProtocolFactory.Create(Type type,
HttpContext context, HttpRequest request, HttpResponse response, Boolean&
abortProcessing)</faultstring>
           
<faultactor>http://localhost:3697/TestWSE/Service.asmx</faultactor>
       </soap:Fault>
   </soap:Body>
</soap:Envelope>

*********************************************************