samples/secpolicy/scenario28/services.xml

<service name="sec_echo">
    <parameter name="ServiceClass" locked="xsd:false">sec_echo</parameter>

   <description>
        This is a testing service , to test the system is working or not
   </description>
    <module ref="rampart"/>
    <module ref="rahas"/>

	<operation name="SecConv13Issue">
		<parameter name="wsamapping">http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/SCT</parameter>
		<wsp:Policy xmlns:wsp="http://www.w3.org/ns/ws-policy">
			<wsp:ExactlyOne>
				<wsp:All>
				  <sp:SymmetricBinding xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<sp:ProtectionToken>
							<wsp:Policy>
								<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
									<wsp:Policy>
										<sp:RequireDerivedKeys/>
										<sp:RequireThumbprintReference/>
										<sp:WssX509V3Token10/>
									</wsp:Policy>
								</sp:X509Token>
							</wsp:Policy>
						</sp:ProtectionToken>
						<sp:AlgorithmSuite>
							<wsp:Policy>
								<sp:Basic256/>
							</wsp:Policy>
						</sp:AlgorithmSuite>
						<sp:Layout>
							<wsp:Policy>
								<sp:Strict/>
							</wsp:Policy>
						</sp:Layout>
						<sp:IncludeTimestamp/>
						<sp:EncryptSignature/>
						<sp:OnlySignEntireHeadersAndBody/>
					</wsp:Policy>
				</sp:SymmetricBinding> 
					<sp:SignedSupportingTokens xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<sp:UsernameToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always"/>
					</wsp:Policy>
					</sp:SignedSupportingTokens>
					<sp:Wss10 xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
						<wsp:Policy>
							<sp:MustSupportRefKeyIdentifier/>
							<sp:MustSupportRefEmbeddedToken/>
							<sp:MustSupportRefIssuerSerial/>
						</wsp:Policy>
					</sp:Wss10>
					<sp:Trust13 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
				<wsp:Policy>
					<sp:MustSupportIssuedTokens /> 
					<sp:RequireClientEntropy /> 
					<sp:RequireServerEntropy /> 
				</wsp:Policy>
			</sp:Trust13>
					<!--sp:EncryptedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
						<sp:Body/>
					</sp:EncryptedParts-->
					<sp:SignedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
						<sp:Body/>
					</sp:SignedParts>
					<rampc:RampartConfig xmlns:rampc="http://ws.apache.org/rampart/c/policy">
						<rampc:User>Bob</rampc:User>
						<rampc:TimeToLive>360</rampc:TimeToLive>
						<rampc:EncryptionUser>b</rampc:EncryptionUser>
						<rampc:PasswordType>Digest</rampc:PasswordType>
						<rampc:PasswordCallbackClass>AXIS2C_HOME/samples/lib/libpwcb.so</rampc:PasswordCallbackClass>
						<rampc:ReceiverCertificate>AXIS2C_HOME/samples/data/keys/bhome/alice_cert.cert</rampc:ReceiverCertificate>
						<rampc:Certificate>AXIS2C_HOME/samples/data/keys/bhome/bob_cert.cert</rampc:Certificate>
						<rampc:PrivateKey>AXIS2C_HOME/samples/data/keys/bhome/bob_key.pem</rampc:PrivateKey>
					</rampc:RampartConfig>
				</wsp:All>
			</wsp:ExactlyOne>
		</wsp:Policy>
	</operation>

    <operation name="echoString">
            <parameter name="wsamapping">http://example.com/ws/2004/09/policy/Test/EchoRequest</parameter>
    <wsp:Policy xmlns:wsp="http://www.w3.org/ns/ws-policy">
        <wsp:ExactlyOne>
            <wsp:All>
              <sp:SymmetricBinding xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
                <wsp:Policy>
                    <sp:EncryptionToken>
                        <wsp:Policy>
							<sp:SecureConversationToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
								<wsp:Policy>
									<sp:BootstrapPolicy>
										<wsp:Policy xmlns:wsp="http://www.w3.org/ns/ws-policy">
											<wsp:ExactlyOne>
												<wsp:All>
													<sp:AsymmetricBinding xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
														<wsp:Policy>
															<sp:InitiatorToken>
																<wsp:Policy>
																	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
																		<wsp:Policy>
																			<sp:WssX509V3Token10/>
																		</wsp:Policy>
																	</sp:X509Token>
																</wsp:Policy>
															</sp:InitiatorToken>
															<sp:RecipientToken>
																<wsp:Policy>
																	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
																		<wsp:Policy>
																			<sp:WssX509V3Token10/>
																		</wsp:Policy>
																	</sp:X509Token>
																</wsp:Policy>
															</sp:RecipientToken>
															<sp:Layout>
																<wsp:Policy>
																	<sp:Strict/>
																</wsp:Policy>
															</sp:Layout>
															<sp:IncludeTimestamp/>
														</wsp:Policy>
													</sp:AsymmetricBinding>
													<rampc:RampartConfig xmlns:rampc="http://ws.apache.org/rampart/c/policy">
														<rampc:TimeToLive>360</rampc:TimeToLive>
													</rampc:RampartConfig>
												</wsp:All>
											</wsp:ExactlyOne>
										</wsp:Policy>

									</sp:BootstrapPolicy>
								</wsp:Policy>
                            </sp:SecureConversationToken>
                        </wsp:Policy>
                    </sp:EncryptionToken>
                    <sp:SignatureToken>
                        <wsp:Policy>
							<sp:SecureConversationToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
								<wsp:Policy>
									<sp:BootstrapPolicy>
										<wsp:Policy xmlns:wsp="http://www.w3.org/ns/ws-policy">
											<wsp:ExactlyOne>
												<wsp:All>
													<sp:AsymmetricBinding xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
														<wsp:Policy>
															<sp:InitiatorToken>
																<wsp:Policy>
																	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
																		<wsp:Policy>
																			<sp:WssX509V3Token10/>
																		</wsp:Policy>
																	</sp:X509Token>
																</wsp:Policy>
															</sp:InitiatorToken>
															<sp:RecipientToken>
																<wsp:Policy>
																	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
																		<wsp:Policy>
																			<sp:WssX509V3Token10/>
																		</wsp:Policy>
																	</sp:X509Token>
																</wsp:Policy>
															</sp:RecipientToken>
															<sp:Layout>
																<wsp:Policy>
																	<sp:Strict/>
																</wsp:Policy>
															</sp:Layout>
															<sp:IncludeTimestamp/>
														</wsp:Policy>
													</sp:AsymmetricBinding>
													<rampc:RampartConfig xmlns:rampc="http://ws.apache.org/rampart/c/policy">
														<rampc:TimeToLive>360</rampc:TimeToLive>
													</rampc:RampartConfig>
												</wsp:All>
											</wsp:ExactlyOne>
										</wsp:Policy>

									</sp:BootstrapPolicy>
								</wsp:Policy>
                            </sp:SecureConversationToken>
                        </wsp:Policy>
                    </sp:SignatureToken>
                    <sp:AlgorithmSuite>
                        <wsp:Policy>
                            <sp:Basic256/>
                        </wsp:Policy>
                    </sp:AlgorithmSuite>
                    <sp:Layout>
                        <wsp:Policy>
                            <sp:Strict/>
                        </wsp:Policy>
                    </sp:Layout>
                    <sp:IncludeTimestamp/>
                    <sp:OnlySignEntireHeadersAndBody/>
					<sp:EncryptSignature/>
                </wsp:Policy>
            </sp:SymmetricBinding> 
                <sp:SignedSupportingTokens xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
                <wsp:Policy>
                    <sp:UsernameToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always"/>
                </wsp:Policy>
                </sp:SignedSupportingTokens>
                <sp:Wss10 xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
                    <wsp:Policy>
                        <sp:MustSupportRefKeyIdentifier/>
                        <sp:MustSupportRefEmbeddedToken/>
                        <sp:MustSupportRefIssuerSerial/>
                    </wsp:Policy>
                </sp:Wss10>
                <sp:SignedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<sp:Body/>
					<sp:Header Namespace="http://www.w3.org/2005/08/addressing"/>
                </sp:SignedParts>
				<sp:EncryptedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<sp:Body/>
				</sp:EncryptedParts>
                <rampc:RampartConfig xmlns:rampc="http://ws.apache.org/rampart/c/policy">
                    <rampc:User>Bob</rampc:User>
                    <rampc:PasswordType>Digest</rampc:PasswordType>
                    <rampc:PasswordCallbackClass>AXIS2C_HOME/samples/lib/libpwcb.so</rampc:PasswordCallbackClass>
                </rampc:RampartConfig>
            </wsp:All>
        </wsp:ExactlyOne>
    </wsp:Policy>
    </operation>


</service>