Most wss SUs require to provide a CallbackHandler, that generally makes use of org.apache.ws.security.WSPasswordCallback .
In rampart 1.4, org.apache.ws.security.WSPasswordCallback contains a stupid bug:
the getIdentifier() method was misspelled, and called getIdentifer() instead - a letter is missing in the name (sic).
This has been fixed in rampart 1.6 (maybe 1.5 as well ?), so CallbackHandlers that come from rampart1.6 cause a "java.lang.NoSuchMethodError: org.apache.ws.security.WSPasswordCallback.getIdentifier()" exception when deployed in Petals !