Access Server SDK issue.

We have set up SSO for one of our application (App1) and is working fine(in production). I am configuring one more application(App2) for SSO.
App1 is setup using webgate on our proxy server. all the request go through the webgate, urls are validated against the policy server and are given access. no problems here
App2 - Webgate installed on my local machine proxy apache server, configured the new policy domain, and using the same identity servers as app1, the app is working fine. I am trying to decode the obssocookie to retrieve the userid, I have created a webservice which takes in the obssocookie and decodes it go retrieve the user name, so that the service can be used in different applications(which are not on sso) kind of authenticate the user against the OAM if the user is already logged in.
My question is I have webgate configured on my local machine and also installed the access server sdk (Oracle_Access_Manager10_1_4_0_1_Win32_AccessServerSDK.exe) on my local machine, setup the classpath and path variables as discribed in admin guide. I am running weblogic 9.2. My index.jsp page accepts the user credentials and posts it to login.jsp ( Ihave protected the login.jsp) in the policy domain with the form based authentication schem.
I have created a testsso.jsp (unprotected page) to test the sdk. below is my code. i always get an error when i access the testsso.jsp page
cm=my_webgate challenge=268e2d09986e24c7
8-1-2009 12:41:17 Received message: 0 14
cm=access_dlsso01 challenge=071a577990ee977d st=ma=25 rt=1
8-1-2009 12:41:17 Sending message: 0 15
response=7b951e1ae2109fb4c7319060f2b9dc57
8-1-2009 12:41:17 Received message: 0 15
response=c045c076d3af5af4a2038a45ede9613f st=ma=25 rt=1
8-1-2009 12:41:17 Sending message: 0 1
ro=t=0 o= no= r= nr= wu=http://mymachine/myapp/login.jsp wh= wo=1 wa=0 ws= st=ma=6 mi=20 sg=0 sm= version=3 pd=NULL
8-1-2009 12:41:17 Received message: 0 1
ro=t=0 o= no= r= nr= wu=http://mymachine/myapp/login.jsp wh= wo=1 wa=0 ws= ri=NULL st=ma=5 mi=20 sg=3236 sm= rt=0
com.oblix.access.ObAccessException: Unprotected resource GET HTTP:http://mymachine/myapp/login.jsp pass
ed to the ObResourceRequest, so there is no associated authentication scheme.
     ObResourceRequest resReq = null;
     ObUserSession user = null;
     ObAuthenticationScheme authnScheme = null;
     Hashtable cred = new Hashtable();
     cred.put("userid", "TEST");
     cred.put("password", "TEST");
     try
          // put the correct path to your AccessSDK installation here
          ObConfig.initialize("C:\\OAM\\oblix\\AccessServerSDK");
          resReq = new ObResourceRequest("HTTP", "http://mymachine/myapp/login.jsp", "GET");
          // check if it is protected, if yes, create a user session
          //if (resReq.isProtected()) { // commented since the resource is always comming as unproctected. when I used the access tester
          // i get that the resource is always protected with a authentication schema
               authnScheme = new ObAuthenticationScheme(resReq);
               if (authnScheme.isBasic()) {
                    System.out.println("##################is protected #################");
                    user = new ObUserSession(resReq, cred);
                    if (user.getStatus() == ObUserSession.LOGGEDIN)     {
                              System.out.println("user status is LOGGEDIN " + user.getStatus());
                              if(user.isAuthorized(resReq)) {
                                        System.out.println("Permission GRANTED");
                              token = user.getSessionToken();
                    } else {
                         System.out.println("user status is NOT LOGGEDIN " );
               } else {
                    System.out.println("is not basic");
          /*} else {
               System.out.println("is not protected");
          ObConfig.shutdown();
     } catch (Exception oe) {
               ObConfig.shutdown();
               oe.printStackTrace();
please advice on how to use the sdk
Edited by: user7498134 on Jan 8, 2009 10:35 AM

Looking at the exception - "com.oblix.access.ObAccessException: Unprotected resource GET HTTP:http://mymachine/myapp/login.jsp passed to the ObResourceRequest, so there is no associated authentication scheme.", it seems like what the SDK wants is the resource to be passed as "//mymachine/myapp/login.jsp", i.e. leave out the redundant "http:" from your URL in the program.
Let me know if that helps.
-Vinod

Similar Messages

  • How to use Access Server SDK

    Hi All,
    Can someone please brief me how we can use the Access Server SDK and purpose of it

    Its an SDK to impement you own custom Access Gate.
    Typically OAM is used to protect Web applications but if you want to protect a Windows Client server application / Microsoft Smart Client type of applications, you can write Custom Access Gate and protect the resource.
    the Advantage of OAM is to define resources and policieis in one central place and enforce those policies. You can leverage Access Server SDK to implement custom access gate.
    its also used in directly if you have both OAM and OWSM.
    I have used it to protect Smart client applications ( Microsoft client server app) , Web Services that are called from a Web Application which is protected by OAM ( passing the same cookie in the header and validating the privileges)
    Thanks
    Ram
    www.identris.com

  • Oracle access server installation issue

    is oracle identity management infrastructure 10.1.4.0.1 is compatible with i oracle access management identity server and web pass 10.1.4.3.0
    reply asap
    Edited by: Aditya on Jun 7, 2011 11:44 AM

    Hey Aditya,
    I can see it in this document below:
    1-http://www.google.com/url?sa=t&source=web&cd=1&ved=0CBkQFjAA&url=http%3A%2F%2Fwww.oracle.com%2Ftechnetwork%2Fmiddleware%2Fdownloads%2Foracle-accessmgr-10gr3-certmatrix-132000.xls&rct=j&q=certification%20matrix%20oam%2010.1.4.3&ei=7SbuTcK5AeLV0QHjm8SRCA&usg=AFQjCNEmg3xQgbQpEdItzo-tOcgMR_xSDA&cad=rja
    -->Oracle Access Manager (OAM)     10.1.4.0.1+     Oracle     Oracle Application Server 10g (10.1.2.x)     n/a     32     Integration available on all supported platforms     n/a     n/a     More details could be found under http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/e10356/osso.htm#CEGCEAJI
    -->Oracle Access Manager (OAM)     10.1.4.0.1+     Oracle     Oracle Application Server 10g (10.1.3.x)      n/a     32     Integration available on all supported platforms     n/a     n/a     More details could be found under http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/e10356/osso.htm#CEGCEAJI
    -->Oracle Access Manager (OAM)     10.1.4.0.1+     Oracle     Oracle Application Server 10g Single Sign-On (10.1.2.x)      n/a     32     Integration available on all supported platforms     n/a     n/a     More details could be found under http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/e10356/osso.htm#CEGCEAJI
    -->Oracle Access Manager (OAM)     10.1.4.0.1+     Oracle     Oracle Application Server 10g Single Sign-On (10.1.4.x)     n/a     32     Integration available on all supported platforms     n/a     n/a     More details could be found under http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/e10356/osso.htm#CEGCEAJI
    2-http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/e10356/osso.htm#CEGCEAJI
    3-You can also go to metalink and research in certification tab more details there.
    I hope this helps.
    Thiago Leoncio Guimaraes

  • Access gate SDK, authentication and issues/bug

    I have been trying to test authentication against CORE ID using the access gate SDK for java and following the samples that installed with the SDK.
    I simulate user account lock-out and pwd to expire ( in two days) situations. Doing the form based access server authentication, I am able to see the error messages and in the case of locked a/c, it doesn't log me in.
    Using access gate SDK, it successfully creates a ObUserSession object for the protected resource, shows user as LOGGED_IN and the getStatus() returns normal. There is no indication of the actual status of the user account on the server !
    It does, catch the actual pwd expired status, as mentioned in the documentation.
    Is there anything missing here ?

    Couple of options. You seem have to taken the Access Gate based approach. I will throw this in any way and you can make a call which one you want to use.
    If its a web application you can control authorization based on Resource by defining policy in the Access Manager.
    You mentioned aout display of one area in one page. That should be driven off of User attribute or custom logic. If it is driven off of User attribute then you can return header variable and you can check in the code as opposed to writing custom access gate.
    Now if you do want to write custom access gate when the resource is already protected by a Web gate,
    you can get the ObSSOCookie from the users browser session.
    You can pass the URL to the IsAuthorized method and call.
    Now here you have to install the Access Server SDK on the server, create custom access gate and then write the code and deploy it on that server.
    THanks
    Ram

  • How to make the Access Gate SDK work with Web Gate

    When we want control the display of one area in one page, we can define this area as one resource then control the access of it. But when the user has been authenticated in the application, how can we get the user session and then call Access Gate SDK to check if the user is authorized? The following is one utility class to archive it.
    * $Id: CreateUserAction.java,v 1.1 2005/10/11 23:19:34 jason Exp $
    * $Revision: 1.1 $
    * $Date: 2005/10/11 23:19:34 $
    * Copyright (C) 1972 - 2005, Oracle Co. All Rights Reserved
    * The program(s) herein may be used and/or copied only with
    * the written permission of Oracle Co. or in accordance with
    * the terms and conditions stipulated in the agreement/contract
    * under which the program(s) have been supplied.
    package oblix.view;
    import com.oblix.access.ObAccessException;
    import com.oblix.access.ObConfig;
    import com.oblix.access.ObResourceRequest;
    import com.oblix.access.ObUserSession;
    import javax.servlet.http.Cookie;
    import javax.servlet.http.HttpServletRequest;
    * @author zhoujian
    public class OblixUtil {
    private static String ObSSOCookie = "ObSSOCookie";
    private OblixUtil() {
    * Check if the user is Authorized
    * @param request
    * @param rescourceUrl
    * @return
    public static boolean isAuthorized(HttpServletRequest request,
    String rescourceUrl) {
    return isAuthorized(request, "http", rescourceUrl, "GET");
    * Check if the user is Authorized
    * @param request
    * @param resourceType
    * @param rescourceUrl
    * @param resourceMethod
    * @return
    private static boolean isAuthorized(HttpServletRequest request,
    String resourceType, String rescourceUrl, String resourceMethod) {
    try {
    ObConfig.initialize();
    ObResourceRequest resource = new ObResourceRequest(resourceType,
    rescourceUrl, resourceMethod);
    ObUserSession session = getObUserSession(request);
    return session.isAuthorized(resource);
    } catch (ObAccessException oe) {
    oe.printStackTrace();
    ObConfig.shutdown();
    return false;
    * Get the Oblix user session from the request.
    * @param request
    * @return
    * @throws ObAccessException
    private static ObUserSession getObUserSession(HttpServletRequest request)
    throws ObAccessException {
    String token = getCookieValueByName(request.getCookies(), ObSSOCookie);
    if (token != null) {
    return new ObUserSession(token);
    return null;
    private static String getCookieValueByName(Cookie[] cookies, String name) {
    for (int i = 0; i < cookies.length; i++) {
    if (cookies[i].getName().equalsIgnoreCase(name)) {
    return cookies[i].getValue();
    return null;
    }

    Couple of options. You seem have to taken the Access Gate based approach. I will throw this in any way and you can make a call which one you want to use.
    If its a web application you can control authorization based on Resource by defining policy in the Access Manager.
    You mentioned aout display of one area in one page. That should be driven off of User attribute or custom logic. If it is driven off of User attribute then you can return header variable and you can check in the code as opposed to writing custom access gate.
    Now if you do want to write custom access gate when the resource is already protected by a Web gate,
    you can get the ObSSOCookie from the users browser session.
    You can pass the URL to the IsAuthorized method and call.
    Now here you have to install the Access Server SDK on the server, create custom access gate and then write the code and deploy it on that server.
    THanks
    Ram

  • Multiple access server issue remotely

    I have two rack with two access server.How can I access both remotely with linksys router.I did port range forwarding but only one rack is accessible.Please advise

    A TCP connection to a router is established using an IP address. Using the host name is valid only when you are initiating an rcp or rsh command from a local router. The host name is converted to an IP address using Domain Name System (DNS) or host-name aliasing. To allow a remote user to execute rcp or rsh commands on a local router, you must create an entry for the remote user in the local authentication database. You must also enable the router to act as an rsh or rcp server. To enable the router to act as an rsh server, issue the ip rcmd rsh-enable global configuration command. To enable the router to act as an rcp server, enter the ip rcmd rcp-enable command. The router cannot act as a server for either of these protocols unless you explicitly enable the capacity

  • Routing Issue between router and Access Server

    Hi,
    We have a Lucent MAX TNT access server, having TAOS version 9.0.9. I
    have configured
    the default route so that all dialup user traffic is diverted towards
    cisco 2611 series router but this
    only happens with the IP subnets configured on MAX TNT and cisco router
    ethernet interfaces.
    We need a solution in which dailup users on MAX TNT with IPs from any network can
    be routed towards the cisco router in order to reach the internet cloud accross the Router.

    Muhammad
    Your message states that you have configured the access server with a default route pointing to the 2611 router. But it does not say whether you have configured a route on the 2611 pointing to the access server for the address range used by the dial pool which the access server uses to assign addresses to dial up users. I suspect this is your problem. I believe that the 2611 needs a route to that address space and that the 2611 needs to advertise that address range if there are any other routers in your network.
    HTH
    Rick

  • OHS: MBean error while trying to access server configuration

    I have an SSL installation of WebLogic. I further installed webtier components (which includes OHS) for 11g. I can access the OHS default port (7777) fine but when I try to access server confuration for OHS on the em page I get following error:
    oracle.sysman.emSDK.app.exception.EMSystemException at oracle.sysman.emas.sdk.model.jmx.JMXUtil.invokeOperation(JMXUtil.java:100) at oracle.sysman.emas.model.ohs.OHSConfigModel.initializeData(OHSConfigModel.java:130) at oracle.sysman.core.model.util.ModelUtil$EMObjectResetter.initOrResetEMObject(ModelUtil.java:319) at oracle.sysman.core.model.util.ModelUtil$EMObjectResetter.access$000(ModelUtil.java:280) at oracle.sysman.core.model.util.ModelUtil.initializeMBEMObjects(ModelUtil.java:231) at oracle.sysman.core.model.util.ModelUtil.initializeAllEMObjects(ModelUtil.java:131) at oracle.sysman.core.model.util.ModelUtil.initializeAllEMObjects(ModelUtil.java:102) at oracle.sysman.emSDK.adfext.ctlr.EMPagePhaseListener.doPrePrepareModel(EMPagePhaseListener.java:868) at oracle.sysman.emSDK.adfext.ctlr.EMPagePhaseListener.beforePhase(EMPagePhaseListener.java:794) at
    I see following error in weblogic admin logs:
    <Jan 25, 2011 11:03:17 AM PST> <Warning> <Security> <BEA-090477> <Certificate chain received from adc1140465.us.oracle.com - 10.232.154.60 was not trusted causing SSL handshake failure.>
    <Jan 25, 2011 11:03:17 AM PST> <Warning> <Security> <BEA-090477> <Certificate chain received from adc1140465.us.oracle.com - 10.232.154.60 was not trusted causing SSL handshake failure.>
    <Jan 25, 2011 11:03:17 AM PST> <Warning> <Security> <BEA-090477> <Certificate chain received from adc1140465.us.oracle.com - 10.232.154.60 was not trusted causing SSL handshake failure.>
    javax.net.ssl.SSLKeyException: [Security:090477]Certificate chain received from adc1140465.us.oracle.com - 10.232.154.60 was not trusted causing SSL handshake failure.
    at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)
    at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertSent(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
    at com.certicom.tls.record.handshake.ClientStateReceivedServerHello.handle(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown Source)
    at com.certicom.tls.record.MessageInterpreter.interpretContent(Unknown Source)
    Any clue how to solve this issue?
    Appreciate the help.
    --Rahul                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

    Hi Rahul,
    It seems to be a mismatch between the Server (WLS) SSL configuration and the (OHS)client SSL configuration. This can happen if a new certificate is created after configuring the WebLogic server SSL certificate.
    If a new certificate is created, the new nms-server.keystore will be saved to $NMS_CONFIG/jconfig/server
    To update the certificate, first verify whether WebLogic is reading the certificate from.
    In the WebLogic console, go to Home, Server, [server name], Keystores, Custom identity keystore.
    Next, overwrite this keystore with the version that is in $NMS_CONFIG/jconfig/server
    Thanks
    GK

  • Mobile Access Server setup

    So, I'm setting up a 10.6.1 server in the DMZ to be a Mobile Access Server to reverse proxy mail, calendaring, and web. Couple issues I have:
    1. I want to manage this DMZ server from a different internal 10.6.1 Server inside my network. I have turned on Remote Management on the DMZ server, but cannot connect from Server Admin on the internal server to the DMZ server. I need to be able to manage both servers from one Server Admin console. I also need to be able to screen share the DMZ server for access ONLY from the internal server. How do I accomplish this?
    2. My internal 10.6.1 server is my Open Directory Master already, and working nicely. But to use Mobile Access Server and reverse proxy services back to the internal server, I need the DMZ server to be aware of my existing directory inside. Would I want to make the DMZ server an Open Directory Replica, or should I use the middle option for Open Directory types called "Connect to another directory"? Obviously, I know that it should NOT be another master.
    3. I have purchased and implemented a wildcard cert on my internal 10.6.1 server to use for TLS, HTTPS, etc. I have also told the Open Directory Master to use ssl for the LDAP piece of it (there's a GUI option for that). Figured I might as well secure everything I can a bit more since I purchased the cert. What effect will this have on Question 2 above? Will I need to open a different port for instance on the firewall for LDAP over SSL? Or any issues with creating a Replica or "connect to another OD server" on the OD server in the DMZ to get it to connect to the internal OD Master?
    Thanks for all the help here.

    To your #1: When you use a firewall to place a device in a DMZ, that device is not part of the internal network. It 'technically' sits on the outside of the firewall at nearly the same place as your external connection.
    Some discussions about a firewall use colors to designate the 'data protection' level or 'threat' vector.
    (Below was 'borrowed' from http://riskless.com/firewall_configuration.aspx)
    * RED Network Interface
    This network is the Internet or other untrusted network. IPCop’s primary purpose is to protect the GREEN, BLUE and ORANGE networks and their computers from traffic originating on the RED network. Your current connection method and hardware are used to connect to this network.
    * GREEN Network Interface
    This interface only connects to the computer(s) that IPCop is protecting. It is presumed to be local. Traffic to it is routed though an Ethernet NIC on the IPCop computer firewall.
    * BLUE Network Interface
    This optional network allows you to place wireless devices on a separate network. Computers on this network cannot get to the GREEN network except tightly controlled “pinholes”, or via a VPN. Traffic to this network is routed through an Ethernet NIC.
    * ORANGE Network Interface
    This optional network allows you to place publicly accessible servers on a separate network. Computers on this network cannot get to the GREEN or BLUE networks, except through tightly controlled “DMZ pinholes”. Traffic to this network is routed through an Ethernet NIC.
    * The GREEN and RED networks are required
    * The ORANGE and BLUE networks are optional
    The interface requirements for your RED network will vary depending on your connection to the Internet. The RED network may require an additional Ethernet card and cable.
    you can also read up all this from a more neutral article here: http://www.ocmodshop.com/ocmodshop.aspx?a=1526
    The point of all this is that, depending on 'where' the dat is comgin from , it either is denied access ,or must be 'punched through' to allow access. Her is a diagram of that process (from a linux firewall called ipcop)
    !http://www.ipcop.org/1.4.0/en/admin/images/traffic.png!
    Soaccess from inside (your network) to your DMZ device should work without any trouble but from DMZ to inside should require ports to be opened up. On most Firewalls, they call this port access 'Pin Holes' as the DMZ is itself protected by only allowing the ip address of that network into through the firewall. Possibly Your firewall is not doing any kind of Statefull Packet Inspection so all conversations must have a pinhole to come 'back' out of the dmz? Tell us your firewall brand and that might help.
    #2: I would use "Connect to another directory". YOu want to limit the amount of data that can be compromised in the DMZ. As I mentioned the DMZ is outside your network, technically naked to the world. I believe that any port that does NOT get routed (forwarded) into your green, will automatically be forwarded to your DMZ, so it will be hammered with all manner of hack and virus vectors.
    Peter

  • "Exception Processing Message" error when clicking the Accessing Server Data link on the start page

    When I first started the application, I click the Accessing Server Data link on the start page.  I immediately got the error "Exception Processing Message c0000013 Parameters 75b6bf7c 4 75b6bf7c 75b6bf7c in a dialog box titled "Windows - No Disk".  I had to used Task Manager to remove the box after closing Flash Builder 4.  I then tried the video tutorial on "PHP Services in Flash Builder 4".  I keep receiving an error during service introspection trying to connect to the PHP class.  It was the same error as the other individual "Cannot Connect to PHP Service".  So I tried another tutorial and generated a sample PHP class.  I moved a datagrid on to the stage, droped in the getAllItems function, and configured the return type.  However, when I ran the app, I received the same error "Exception Processing Message" again.  I have attached the screenshot of the error in addition to my phpinfo and log files.

    "The exception process message" is definitely a issue. Is it happening consistently, if so can you file a bug at bugs.adobe.com/flex and give out your machine config details, and the error log.
    With regards to generating a new php file and the introspection error that you are getting, looking at the logs it probably is two fold.
    First off the name of the file and the class name should be the same, are you having employeeServices as the name of the class in employeeServices.php file.
    Second, It seems prior to generating this new file, you had a syntax error at line 5.
    It would be easier to figure out what the error is, if you can also attach the php file, by removing any sensitive information in that.
    Hope this helps.
    Thanks
    -Sunil

  • Windows 7 Desktop synchronisation - Windows cannot access \\server\users\name\desktop

    Hi there
    My client has a laptop which won’t load the desktop when disconnected from the network. When you log on (while disconnected) you get the error
    “Windows cannot access \\server\users\name\desktop”
    Works as expected while connected to the network.
    The server is a Windows Small Business Server 2003 with active directory etc. and roaming profiles turned on. This issue does not occur on other workstations/laptops.
    When I check the Users folder on the local system drive there is not a desktop folder. I assume this is the issue although I’m not sure how you would force windows to create one or why one hasn’t been created?
    This is a brand new laptop so my initial reaction was to reset the laptop to factory state and then add the laptop back in to the domain. After this process the issue was still present!
    I guess the only thing I should mention is that this was shipped as a Home Premium laptop and was then upgraded to Professional using an upgrade key.
    I have checked Control Panel, System & Security, System, Advanced, User Profiles and the account shows as Local with Roaming Profiles greyed out.
    Any ideas?
    Martyn Fewtrell
    [email protected]
    Martyn Fewtrell TNC (IT Solutions) Ltd Email: [email protected] Web: http://www.tncit.co.uk

    Hi,
    I am just writing to check the status of this thread. Was the information provided in previous
    reply helpful to you? Do you have any further questions or concerns? Please feel free to let us know.
    Regards,
    Alex Zhao
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Alex Zhao
    TechNet Community Support

  • Access Server-SAP IDOC Message Question

    Hi.
          We have configured an access server to receive realtime IDOC messages from SAP. Required configuration has been done on the BODS side:
    On Web admin console for RFC client configuration and real-time service configuration
    On the SAP RFC Connection, logical system, and partner profile setup side.
    Issue is on the SAP side it shows message was sent successfully where as on the BODS side the message received count is 0.
    Any insights any one can share regarding how to troubleshoot this issue would be really appreciated
    Thanks
    Rajiv

    Thanks. It was an IDOC mismatch error.
    Now we do have correct IDOC mismatch but to me now it seems to be a data issue now.
    I have the real-time job and I am getting the following error when I view Access server logs.
    SP(PPROLL01, l1.no.com:3500)::flowThread() Flow became invalid during waiting for request (BODI-300137)
    Unknown: R3RfcClient(NewR3Rfc_1) ActaIDocFunc::Process() encountered processing error for Requeste(4) (Communication Error. See real time job log for details.) (IDOC 0000000000209266/RPD210    ). (BODI-300129)
    Real time job log does not show any thing in the error log other than the trace log which shows:
    DATAFLOW: Cache statistics determined that data flow <DF_ZFII034_PPAYROLL01_TEST_RT> uses <0> caches with a total size of <0> bytes. This is less than(or equal to) the virtual memory <3757047808> bytes available for caches. Statistics is switching the cache type to IN MEMORY.
    To check if the mapping is valid I created another batch job using the same IDOC as used in the real-time job above but BODS gives me a generic error. I had all tracing enabled even then it gave a generic error.
    458946     1     RUN-050505     08/09/2009 3:45:25 PM     |Dataflow DF_SAP_BATCH_V1|Transform Q1-Nest1
    458946     1     RUN-050505     08/09/2009 3:45:25 PM     Unknown error in transform <Q1-Nest1>.
    All the fields in the input are varchar or date type and the repository database and staging database is oracle 10G.
    Thanks for the help,
    Rajiv

  • Acrobat Connect Pro LMS 7.5 server cache issue - displaying old content

    Our Adobe Acrobat Connect Pro server is showing old Captivate-created content from about 4-6 weeks ago.
    I loaded 35+ sets of Captivate 3 (SCORM 1.2, HTML, zipped) content onto our Acrobat Connect Pro LMS about 6 weeks ago.
    I converted all training content from Captivate 3.0.1 to 4.0.1, 4 weeks ago by opening each file in Captivate 4 and following prompts to "Save As" new files with different file names.
    I reloaded all content 4 weeks ago, and again 2 weeks ago.
    I reloaded about half of all content again last week.
    End User Acceptance testing performed this week showed that most of the courses are showing old content, ranging from 2-6 weeks old
    Attempted fixes and workarounds:
    Deleting content entirely and reloaded from scratch - this will not work long term, as we lose usage data each time we reload completely new files.
    Contacted Adobe, provided times to track incidents of the issue.  We reached Tier 2 - who told us it was our problem and that everything appeared to be working fine from their side.
    New workaround - load new content and reattach course to new content.  This presents the same long term issue as the first workaround, but enables us to retain older versions of content in the system, should we need to revert or report on it.
    Gaining server side access is a bit challenging due to the hosting situation we have, so I am looking (ideally) for a solution that can be performed from the Administrator/Author Frontend.  However, I want to learn the real cause of the problem, wherever it might reside, so that it can be properly corrected and avoided in the future.  I am calling this a server cache issue, as it seems the server has somewhere retained unwanted old versions of content, preventing current content from being displayed to end users.  Viewing content as an end user = see old content.  Viewing content from the Content area (Author view) shows the current files, so I know they are on the server and are loading correctly, up to a point.
    I am preparing all content for another round of loading/reloading due to other issues and updates, so republishing and reloading all 35+ files into the LMS is unavoidable at this point.
    This issue is keeping our LMS from launching to several thousand users across the country, so any suggestions or helpful tips are much appreciated.

    I think I have isolated the source of this problem. It's the Pitstop Professional 9 plug in. I un-installed this, and everything opens quicker than greased lightning. I re-installed it and it's back to slowsville.
    Unfortunately Pitstop is essential to my workflow.
    Until recently I did my pre-press on a Mac G5 with Acrobat Pro 7 and Pitstop 6.5. I never had this problem with slow file opening. But it seems that the delays would occur when I used the plug-in with large complex files.. So it would open files as fast as you'd expect from an elderly machine. But starting to use Pitstop would result in a prolonged period of staring at a spinning beachball.
    I wonder is there any way to stop the Pitstop plug-in from initializing until it is used? So the plug-in stays inert until you select the tool from from the menus.

  • WHCK - Not able to access Server from client machine

    Hi,
    Server is running in : \\testserver
    Domain : ns.local
    Client : testclient 
    Test Name : TDI filters and LSPs are not allowed
    When the above test is run from the server side, Test fails with the following error:
    Cause : Failed to Start the Task
    Cause : Zero files are copied when Trying to Copy From Path "\\testserver.ns.local\TaefBinaries\x64"....Failing the Task
    Failure : Failed to Start the Task "Copy TAEF Binaries"
    Cause : Failed to Copy File : "\\testserver.ns.local\TaefBinaries\x64" Dest : "C:\WLK\JobsWorkingDir\Tasks\WTTJobRun6A2E5AF3-8C3E-4425-9997-5B809CAC2BB1\"
    Cause : Cannot Find Pattern "\\testserver.ns.local\TaefBinaries\x64"
    From WttEa.log , it displays "The network path was not found". 
    CRunManager::ExecutionAgent: Working Dir C:\WLK\JobsWorkingDir\JobRuns\WTTJobRun6A2E5AF3-8C3E-4425-9997-5B809CAC2BB1 
    CRunManager::ExecutionAgent: Saving RunXML to file C:\WLK\JobsWorkingDir\JobRuns\WTTJobRun6A2E5AF3-8C3E-4425-9997-5B809CAC2BB1\WttJobRun.Xml
    CRunManager::ExecutionAgent: Saving EaDataXML to file C:\WLK\JobsWorkingDir\JobRuns\WTTJobRun6A2E5AF3-8C3E-4425-9997-5B809CAC2BB1\WttEaData.Xml
    CRunManager::UserName : DTMShareUser
    CRunManager::Domain : TESTSERVER
    CRunManager::Password : Server2008,WTT5326ShareUser
    Build No Greater than 4000. This is a Windows Vista Machine
    Single User TS Enabled
    Comparing TESTSERVER testclient.ns.local 10
    Logon Netonly
    GetUserToken : Returns 0
    Error: 0x35, The network path was not found.   WTTCreateDirPAth : CreateDirectory \\testserver.ns.local\HCKLogs\EaFolderAccessCheck\CF82A2A5-E08D-49C7-A078-4BA1416F1AA1 Failed   File=d:\wtt25\wtt25\sdktools\wtt\jobs\runtime\wttexecutionagent\common\eautil\src\eautil.cpp
    Line=1589
    Error: 0x80070035, The network path was not found.   (Error ( status = 53 ) in call: WttCreateDirPath(lpszTemp) )   File=d:\wtt25\wtt25\sdktools\wtt\jobs\runtime\wttexecutionagent\eamanager\runmanager\src\runmanager.cpp Line=2232
    Retrying the log location creation 10 more times
    Error: 0x35, The network path was not found.   WTTCreateDirPAth : CreateDirectory \\testserver.ns.local\HCKLogs\EaFolderAccessCheck\CF82A2A5-E08D-49C7-A078-4BA1416F1AA1 Failed   File=d:\wtt25\wtt25\sdktools\wtt\jobs\runtime\wttexecutionagent\common\eautil\src\eautil.cpp
    Line=1589
    Error: 0x80070035, The network path was not found.   (Error ( status = 53 ) in call: WttCreateDirPath(lpszTemp) )   File=d:\wtt25\wtt25\sdktools\wtt\jobs\runtime\wttexecutionagent\eamanager\runmanager\src\runmanager.cpp Line=2240
    What could be the problem ??? What steps need to be done or checked further to proceed ??
    Could you please help why the client is not able to access Server ???
    Thanks.
    Regards,
    Pradeep VR

    Hi,
    Reason for this failure is that the test executable is not present in the HLK controller.
    It looks like a Microsoft issue. We have faced same type of problem for other tests also. Our problem gets fixed in HLK 10056.
    If you face the problem in current build also, then please log a bug to Microsoft.
    Thanks,
    Arpo

  • Office 365 Streaming Notifications, "One or more subscriptions in the request reside on another Client Access server."

    Hello all,
    I am maintaining a part of our product that requires monitoring mailboxes for events.  This is currently being done by using streaming connections for getting the notifications.  Our solution has been successful for situations with smaller numbers
    of mailboxes, ~200 or less.  However we are seeing some issues when scaling up to say, 5000 mailboxes.
    The error and the sequence leading up to it are as follows:
    Make an Exchange Service Account.
    exchSvc.ConnectionGroupName = someGroupName;
    add to the httpheaders ("X-AnchorMailbox", userSmtp) and ("X-PreferServerAffinity", "true");
    create a new impersonated UserId for the userSmtp address that is our anchor mailbox.
    set the Exchange Service account ImpersonatedUserID to the one we just made.
    ExchangeServiceAccount.SubscribeToStreamingNotifications(new FolderId[] { WellKnownFolderName.Inbox }, _mailEvents);
    to this point everything was successful, saw no error messages.
    we create a second impersonated UserID for a different mailbox, and repeat the process above from that step forward.  Upon the final step, subscribing to the streaming notifications we get the error:
    Exception: Microsoft.Exchange.WebServices.Data.ServiceResponseException: One or more subscriptions in the request reside on another Client Access server. GetStreamingEvents won't proxy in the event of a batch request.
    This is only the second subscription that we are trying to add to this connection, and it is to a different mailbox than the first.
    Can anyone please help point me to where this is going wrong?

    >> Is there a good way to verify the number of subscriptions in a group?
    Not that I know of you should be tracking this in your code there are no server side operations in EWS to even tell you if there are active subscriptions on a mailbox.
    >>The error I am getting is on the second subscription in a new group, just after doing the anchor mailbox so I don't think we are hitting the 200 limit. 
    It's hard to say without seeing your code but it sounds like there is problem with your grouping code. One way to validate this is that with every request you make with the EWS managed API there is a
    RequestId header http://blogs.msdn.com/b/exchangedev/archive/2012/06/18/exchange-web-services-managed-api-1-2-1-now-released.aspx
    you should be able to give that RequestId to the Office365 support people and they should be able to check the EWS Log on the server and tell you more about what's happening (it maybe server side bug). Something doesn't quite add up in that the X-BackEndOverrideCookie
    is what ultimately determines what server the request ends up at and the error is essentially telling you its ending up at the wrong server (have you looked at the headers on the error message?). Is it always one group of users that fails have
    you tried different groups and different combinations etc.
    Cheers
    Glen

Maybe you are looking for

  • Connection reset by peer problem

    I have the following code, and every time I run it i get a "java.net.SocketException: Connection reset by peer: socket write error" exception. Why is that? This is the first time I'm writing a network client application, so please help :) Socket s =

  • Rename the Catalog Link

    Hi, I want to rename the Catalog link on the header bar but i can't seem to find any documents on steps to do it. Have come accross docs on renaming the other links 'Home', 'Dashboard' etc in http://obiee10grevisited.blogspot.co.uk/2012/02/obiee-11g-

  • Where are my aliases?

    Apple tech docs say I can edit email aliases through settings/iCloud. Nope. What am I missing? I need to get to my aliases.

  • Oaf :one dout in creating EO

    Hi friends iam new to OAF learning one by one .... My work done I hav created a QueryPG ... without creating EO ... i hav just created CO,VO and AM for quering purpose for that 1)IN CO PFR, first i get the value from the page and send the value to th

  • Events in Table and Crosstab

    Hi. I am trying to add a KeyListener to my crosstab, but until now, no success at all. I wonder what's the best way to catch a cell update and the key '\n' (ENTER) pressed?? Can anyone provide me a simple example? Regards Odds