samples/secpolicy/scenario27/services.xml

<service name="sec_echo">
    <parameter name="ServiceClass" locked="xsd:false">sec_echo</parameter>

   <description>
        This is a testing service , to test the system is working or not
   </description>
    <module ref="rampart"/>
    <module ref="rahas"/>

    <operation name="echoString">
		<parameter name="wsamapping">http://example.com/ws/2004/09/policy/Test/EchoRequest</parameter>
		<wsp:Policy xmlns:wsp="http://www.w3.org/ns/ws-policy">
			<wsp:ExactlyOne>
				<wsp:All>
				  <sp:SymmetricBinding xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<sp:EncryptionToken>
							<wsp:Policy>
								<sp:SecureConversationToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
									<wsp:Policy>
										<sp:SC13SecurityContextToken/>
									</wsp:Policy>
								</sp:SecureConversationToken>
							</wsp:Policy>
						</sp:EncryptionToken>
						<sp:SignatureToken>
							<wsp:Policy>
								<sp:SecureConversationToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
									<wsp:Policy>
										<sp:SC13SecurityContextToken/>
									</wsp:Policy>
								</sp:SecureConversationToken>
							</wsp:Policy>
						</sp:SignatureToken>
						<sp:AlgorithmSuite>
							<wsp:Policy>
								<sp:Basic256/>
							</wsp:Policy>
						</sp:AlgorithmSuite>
						<sp:Layout>
							<wsp:Policy>
								<sp:Strict/>
							</wsp:Policy>
						</sp:Layout>
						<sp:IncludeTimestamp/>
						<sp:OnlySignEntireHeadersAndBody/>
						<sp:EncryptSignature/>
					</wsp:Policy>
				</sp:SymmetricBinding> 
				<sp:SignedSupportingTokens xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<sp:UsernameToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always"/>
					</wsp:Policy>
				</sp:SignedSupportingTokens>
					<sp:Wss10 xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
						<wsp:Policy>
							<sp:MustSupportRefKeyIdentifier/>
							<sp:MustSupportRefEmbeddedToken/>
							<sp:MustSupportRefIssuerSerial/>
						</wsp:Policy>
					</sp:Wss10>
					<sp:SignedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
						<sp:Body/>
						<sp:Header Namespace="http://www.w3.org/2005/08/addressing"/>
					</sp:SignedParts>
					<sp:EncryptedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
						<sp:Body/>
					</sp:EncryptedParts>
					<rampc:RampartConfig xmlns:rampc="http://ws.apache.org/rampart/c/policy">
						<rampc:User>Bob</rampc:User>
						<rampc:PasswordType>Digest</rampc:PasswordType>
						<rampc:PasswordCallbackClass>AXIS2C_HOME/samples/lib/libpwcb.so</rampc:PasswordCallbackClass>
					</rampc:RampartConfig>
				</wsp:All>
			</wsp:ExactlyOne>
		</wsp:Policy>
    </operation>



</service>