>> I am stumped. We were running WSE 2.0(SP2) on a Windows 2003 server
>> without a problem. I applied SP3 and now get this error:
[quoted text clipped - 42 lines]
>> Thanks
>> Mike
are your clocks synced up?
> Dilip,
>
> Here is the SOAP fault info I am getting on the Web Services server...
>
> <soap:Envelope
> xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecuri
ty-secext-1.0.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurit
y-utility-1.0.xsd"
> xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
> <soap:Header>
<wsa:Action>http://schemas.xmlsoap.org/ws/2004/03/addressing/fault</wsa:Acti
on>
<wsa:MessageID>uuid:257e6f7a-74dc-4bcd-b9b0-be3fadbcd9d7</wsa:MessageID>
<wsa:RelatesTo>uuid:edcce820-183e-4b92-8f44-e475b9e92e7b</wsa:RelatesTo>
<wsa:To>http://schemas.xmlsoap.org/ws/2004/03/addressing/role/anonymous</wsa
:To>
> <wsse:Security>
[quoted text clipped - 8 lines]
> <soap:Fault>
> <faultcode
xmlns:code="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecuri
ty-secext-1.0.xsd">code:InvalidSecurity</faultcode>
> <faultstring>Microsoft.Web.Services2.Security.SecurityFault: An
> error was discovered processing the <Security> header --->
> System.Exception: Creation time in the timestamp can not be in the future.
> --- End of inner exception stack trace ---
> at Microsoft.Web.Services2.Security.Utility.Timestamp.CheckValid()
> at
Microsoft.Web.Services2.Security.Utility.Timestamp.LoadXml(XmlElement
> element)
> at Microsoft.Web.Services2.Security.Utility.Timestamp..ctor(XmlElement
> element)
> at Microsoft.Web.Services2.Security.Security.LoadXml(XmlElement element)
> at
Microsoft.Web.Services2.Security.SecurityInputFilter.ProcessMessage(SoapEnve
lope
> envelope)
> at Microsoft.Web.Services2.Pipeline.ProcessInputMessage(SoapEnvelope
> envelope)
> at
Microsoft.Web.Services2.WebServicesExtension.BeforeDeserializeServer(SoapSer
verMessage
> message)</faultstring>
<faultactor>http://10.13.0.134/DOAWebServices/Users.asmx</faultactor>
> </soap:Fault>
> </soap:Body>
[quoted text clipped - 24 lines]
> >> Actor: http://10.13.0.134/DOAWebServices/Users.asmx
> >> Code:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
d:InvalidSecurity
> >> Detail: NULL
> >> Message: An error was discovered processing the <Security> header
[quoted text clipped - 7 lines]
> >> *********************************************
> >> at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClient
Message
> >> message, WebResponse response, Stream responseStream, Boolean asyncCall)
> >> at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
> >> methodName, Object[] parameters)
> >> at leave.UsersWS.UsersWse.VerifyUser(String userID, String password)
[quoted text clipped - 6 lines]
> >> Thanks
> >> Mike
Mike - 27 Apr 2005 23:24 GMT
Our web server sits in a different segment from te application server that
runs our web services. Our "trusted" segment is in our domain and the web
server is not. Chances are they are not exactly the same.
What kind of problem are we talking about here?
> are your clocks synced up?
>
[quoted text clipped - 123 lines]
>> >> Thanks
>> >> Mike
Mike - 28 Apr 2005 12:35 GMT
Brilliant! The web server was 2 minutes ahead of the application server.
> are your clocks synced up?
>
[quoted text clipped - 123 lines]
>> >> Thanks
>> >> Mike
SA - 04 May 2005 00:18 GMT
Mike:
To avoid this, you can probably still get Windows to sync your clocks, even
if you web server is not in the domain. You will need to open up the SNTP
port on the firewall between both networks
On the web server:
net time /setsntp:<domain controller IP>

Signature
Sven.
> Brilliant! The web server was 2 minutes ahead of the application server.
>
[quoted text clipped - 6 lines]
> >> <soap:Envelope
> >> xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecuri
> > ty-secext-1.0.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurit
> > y-utility-1.0.xsd"
> >> xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
> >> <soap:Header>
<wsa:Action>http://schemas.xmlsoap.org/ws/2004/03/addressing/fault</wsa:Acti
> > on>
> >>
> > <wsa:MessageID>uuid:257e6f7a-74dc-4bcd-b9b0-be3fadbcd9d7</wsa:MessageID>
> >>
> > <wsa:RelatesTo>uuid:edcce820-183e-4b92-8f44-e475b9e92e7b</wsa:RelatesTo>
<wsa:To>http://schemas.xmlsoap.org/ws/2004/03/addressing/role/anonymous</wsa
> > :To>
> >> <wsse:Security>
[quoted text clipped - 8 lines]
> >> <soap:Fault>
> >> <faultcode
xmlns:code="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecuri
> > ty-secext-1.0.xsd">code:InvalidSecurity</faultcode>
> >> <faultstring>Microsoft.Web.Services2.Security.SecurityFault: An
[quoted text clipped - 7 lines]
> >> element)
> >> at
Microsoft.Web.Services2.Security.Utility.Timestamp..ctor(XmlElement
> >> element)
> >> at Microsoft.Web.Services2.Security.Security.LoadXml(XmlElement
> > element)
> >> at
Microsoft.Web.Services2.Security.SecurityInputFilter.ProcessMessage(SoapEnve
> > lope
> >> envelope)
> >> at Microsoft.Web.Services2.Pipeline.ProcessInputMessage(SoapEnvelope
> >> envelope)
> >> at
Microsoft.Web.Services2.WebServicesExtension.BeforeDeserializeServer(SoapSer
> > verMessage
> >> message)</faultstring>
[quoted text clipped - 29 lines]
> >> >> Actor: http://10.13.0.134/DOAWebServices/Users.asmx
> >> >> Code:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
d:InvalidSecurity
> >> >> Detail: NULL
> >> >> Message: An error was discovered processing the <Security> header
[quoted text clipped - 7 lines]
> >> >> *********************************************
> >> >> at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClient
> > Message
> >> >> message, WebResponse response, Stream responseStream, Boolean
[quoted text clipped - 12 lines]
> >> >> Thanks
> >> >> Mike