Fixed the issue raised in this [1] discussion.
RampartUsernameTokenValidator overrides the verifyPlaintextPassword method of org.apache.ws.security.validate.UsernameTokenValidator
The default implementation expects the callback handler to supply the plain text password (when a username token with a plain text password is used), which should not be possible in practice.

1.http://marc.info/?t=135828023100003&r=1&w=3



git-svn-id: https://svn.apache.org/repos/asf/axis/axis2/java/rampart/trunk@1440286 13f79535-47bb-0310-9956-ffa450edef68