Ido Shlomo

I think that the problem is in the fake service we added to the wsdl
It should be soap12:address instead of soap:address

You might need to find a different version of the wsdl file. You used soap 1.2 and the device requires you to use soap 1.1

Yeah, I've cleaned it up and reposted this solution on stack overflow http://stackoverflow.com/questions/8798419/build-soap-web-service-client-using-wsdl-documents-in-eclipse/10394687

It looks that either the device you're communicating with returns the wrong class, or that it tries to return an error.
I'd suggest using wireshark to read the traffic directly and look at the xml that you end up sending and the xml you receive back from the device.
It's usually readable enough to help you understand what went wrong.

By the username, I'm guessing that you are using an axis camera.
You need to create a user specific for ONVIF in the cameras web interface.

You should also try to read the camera's current time, and use that for authentication instead of your local time.
See my example above

1. Is your clock synchronized with the device you're trying to connect to?

2. I've tried using the nonce you've posted and got the following results:

Input
nonce str: 1234567892133613
time str: 1970-01-11T21:39:42.208Z
pass str: 123456

In bytes:
nonce bytes: [49, 50, 51, 52, 53, 54, 55, 56, 57, 50, 49, 51, 51, 54, 49, 51]
time bytes: [49, 57, 55, 48, 45, 48, 49, 45, 49, 49, 84, 50, 49, 58, 51, 57, 58, 52, 50, 46, 50, 48, 56, 90]
pass bytes: [49, 50, 51, 52, 53, 54]

Result:
digest str: TiWxOU9wmwlMQlIx3a856HpQYAk=
digest bytes: [84, 105, 87, 120, 79, 85, 57, 119, 109, 119, 108, 77, 81, 108, 73, 120, 51, 97, 56, 53, 54, 72, 112, 81, 89, 65, 107, 61]

Please make sure you get the same result when using this exact input.

nonce is an array of 16 bytes, not an int.
the byte[16] none may contain zeros, so use memcpy, instead of sprintf

Looks like I forgot to add the implementation of the message digest creation:

private static String calculatePasswordDigest(byte[] nonceBytes, String created, String password) { String encoded = null; try { MessageDigest md = MessageDigest.getInstance( "SHA1" ); md.reset(); md.update( nonceBytes ); md.update( created.getBytes() ); md.update( password.getBytes() ); byte[] encodedPassword = md.digest(); encoded = Base64.encode(encodedPassword); } catch (NoSuchAlgorithmException ex) { } return encoded; }

An important thing I've discovered about Axis cameras:
Once you set the initial root password using the web interface, the ONVIF interface will not allow access.
You must reset the camera to its factory defaults in order to use the ONVIF interface without credentials.
You should now be able to initialize the root password and ONVIF passwords via the ONVIF interface.
If you did, however initialize the camera's root password via the web interface, you should also manually add an ONVIF user as explained above.
I would like to thank this blessed behavior for wasting my time.

I finally solved it:

Start off by browsing into the Axis camera's web interface:

Open your browser
Open the Axis camera's web interface
Go to Setup -> System Options -> Security -> ONVIF
Add a user!

Now for the code part.
You start off by reading the server's clock:
SystemDateTime systemDateAndTime = device.getSystemDateAndTime(); clientTime = System.currentTimeMillis; DateTime utcDateTime = systemDateAndTime.getUTCDateTime(); org.onvif.ver10.schema.Date date = utcDateTime.getDate(); Time time = utcDateTime.getTime(); Calendar c = new GregorianCalendar(utc); c.set(date.getYear(), date.getMonth()-1, date.getDay(), time.getHour(), time.getMinute(), time.getSecond()); serverTime = c.getTimeInMillis();

Then, you create an authentication header.
For that you need to bind a handler:
BindingProvider bindingProvider = (BindingProvider)device; final Binding binding = bindingProvider.getBinding(); List<Handler> handlerList = binding.getHandlerChain(); if (handlerList == null) handlerList = new ArrayList<Handler>(); handlerList.add(new SecurityHandler()); binding.setHandlerChain(handlerList);

Implement the handler
private static TimeZone utc = TimeZone.getTimeZone("UTC"); private static SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ss.SSS'Z'"); static { sdf.setTimeZone(utc); } private static long serverTime = 0; private static long clientTime = 0; // calculate diff between my time and the camera's time private static String localToGmtTimestamp() { return sdf.format(new Date(System.currentTimeMillis()-clientTime+serverTime)); } public static final class SecurityHandler implements SOAPHandler<SOAPMessageContext> { @Override public boolean handleMessage(final SOAPMessageContext msgCtx) { // Indicator telling us which direction this message is going in final Boolean outInd = (Boolean) msgCtx.get(MessageContext.MESSAGE_OUTBOUND_PROPERTY); // Handler must only add security headers to outbound messages if (outInd.booleanValue() && clientTime!=0) { try { String timestamp = localToGmtTimestamp(); String user = ...; String pass = ...; byte[] nonceBytes = new byte[16]; for (int i=0 ; i<16 ; ++i) nonceBytes[i] = (byte)(Math.random()*256-128); String dig=calculatePasswordDigest(nonceBytes, timestamp, pass); SOAPEnvelope envelope = msgCtx.getMessage().getSOAPPart().getEnvelope(); SOAPHeader header = envelope.getHeader(); if (header == null) header = envelope.addHeader(); SOAPElement security = header.addChildElement("Security", "wsse", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"); SOAPElement usernameToken = security.addChildElement("UsernameToken", "wsse"); SOAPElement username = usernameToken.addChildElement("Username", "wsse"); username.addTextNode(user); SOAPElement password = usernameToken.addChildElement("Password", "wsse"); password.setAttribute("Type", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest"); password.addTextNode(dig); SOAPElement nonce = usernameToken.addChildElement("Nonce", "wsse"); nonce.setAttribute("EncodingType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"); nonce.addTextNode(Base64.encode(nonceBytes)); SOAPElement created = usernameToken.addChildElement("Created", "wsu", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"); created.addTextNode(timestamp); } catch (final Exception e) { e.printStackTrace(); return false; } } return true; } // Other required methods on interface need no guts @Override public boolean handleFault(SOAPMessageContext context) { // TODO Auto-generated method stub return false; } @Override public void close(MessageContext context) { // TODO Auto-generated method stub } @Override public Set<QName> getHeaders() { // TODO Auto-generated method stub return null; } }

And there you have it.

You were so close!
After banging my head with this for a few days I finally found the fix!

String camIp = "192.168.4.148"; // Start off, just loading the document with the DeviceService addition you made earlier URL url = new URL("file:///d|/Share/ONVIF/wsimport/wsdl/devicemgmt.wsdl"); QName qname = new QName("http://www.onvif.org/ver10/device/wsdl", "DeviceService"); Service service = Service.create(url, qname); Device device = service.getPort(Device.class); // Now this is where the magic happens! ((BindingProvider)device).getRequestContext().put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY , "http://"+camIp+"/onvif/device_service"); // Test it ! Holder<String> manufacturer = new Holder<String>(); Holder<String> model = new Holder<String>(); Holder<String> firmwareVersion = new Holder<String>(); Holder<String> serialNumber = new Holder<String>(); Holder<String> hardwareId = new Holder<String>(); device.getDeviceInformation(manufacturer, model, firmwareVersion, serialNumber, hardwareId); System.out.println(manufacturer.value); System.out.println(model.value); System.out.println(firmwareVersion.value); System.out.println(serialNumber.value); System.out.println(hardwareId.value);

/Edit
It works for devices that don't require authentication. I'm still stuck with authenticating when needed.