HTTP 503 after enabling OWSM policy on an ADF BC Service

I deployed an ADF BC Service to soa_server1 and tested (no problem). But when I added an OWSM policy, I could no longer access the service, nor its WSDL contract.
Here's the steps:
1. Deploy and test your ADF BC Service with no policy
2. In EM, go to the Web Services menu item for the deployed service application, then Policies tab.
3. Attach the "oracle/log_policy" policy to the service's endpoint
4. Restart the application after saving the change (as EM tells you to do).
5. Try to access your Service and/or the Service's WSDL ==> *503 Error*
6. Use EM to Detach the policy on the service's endpoint
7. Restart the application after saving the change
8. Retest -- works fine.

Note that I can apply the same policy at Develop-Time and deploy and that works. i.e. Specific to Attaching the policy through EM.
Actually, Firefox fooled me with a browser cache. The same problem occurs whether the policy is applied at Develop-Time or through EM.
-Todd
Edited by: tbeets on May 22, 2009 1:29 PM

Similar Messages

Error when OWSM policy is applied to Proxy Service in 11gR1

Hi,
I have applied oracle/wss_username_token_service_policy for my proxy service and trying to test that from OSB Test Console. I am getting below error,
When i have launched Test Console for this proxy, i have observed in Security part, oracle/wss_username_token_client_policy is appearing. I am not sure why oracle/wss_username_token_client_policy is appearing there when i applied oracle/wss_username_token_service_policy to my proxy service.
I have created Keystore and also created oralce.wsm.security map under em console.
Now when i am trying to Test proxy service using Test Console, I am facing below error,
An error ocurred during web service security outbound request processing [error-code: InternalError, message-id: <test-message>, proxy: <alsb-test-service>, target: Samples/Proxy Services/HelloWorld_PS, operation: sayHello]
--- Error message:
oracle.wsm.common.sdk.WSMException: WSM-00015 : The user name is missing.
at oracle.wsm.security.policy.scenario.executor.WssUsernameTokenScenarioExecutor.sendRequest(WssUsernameTokenScenarioExecutor.java:219)
at oracle.wsm.security.policy.scenario.executor.SecurityScenarioExecutor.execute(SecurityScenarioExecutor.java:545)
at oracle.wsm.policyengine.impl.runtime.AssertionExecutor.execute(AssertionExecutor.java:41)
at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.executeSimpleAssertion(WSPolicyRuntimeExecutor.java:608)
at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.executeAndAssertion(WSPolicyRuntimeExecutor.java:335)
at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.execute(WSPolicyRuntimeExecutor.java:282)
at oracle.wsm.policyengine.impl.PolicyExecutionEngine.execute(PolicyExecutionEngine.java:102)
at oracle.wsm.agent.WSMAgent.processCommon(WSMAgent.java:915)
at oracle.wsm.agent.WSMAgent.processRequest(WSMAgent.java:436)
at oracle.wsm.agent.handler.WSMEngineInvoker.handleRequest(WSMEngineInvoker.java:393)
at com.bea.wli.sb.security.wss.wsm.WsmOutboundHandler$1.run(WsmOutboundHandler.java:141)
at com.bea.wli.sb.security.wss.wsm.WsmOutboundHandler$1.run(WsmOutboundHandler.java:139)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:147)
I am using below header to invoke the service
+<soapenv:Header xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">+
+<wsse:Security>+
+<wsse:UsernameToken>+
+<wsse:Username>weblogic</wsse:Username>+
+<wsse:Password>welcome1</wsse:Password>+
+</wsse:UsernameToken>+
+</wsse:Security>+
+</soapenv:Header>+
Please advise me regarding this.
Thanks
Rajesh

Hi,
Check the below link for your solution.
http://tim.blackamber.org.uk/?p=825
Thanks,
Durga

Osb proxy service with owsm policy auth slow when soap request very large

I have a proxy service which is security with owsm policy: oracle/wss_username_token_service_policy, the proxy service simply route to Business Service which directly invoke a bpel exposed web service, when I call the proxy service with soap envelope large than 15MB(not attachment), waiting about 4~5 minutes, the bpel instance created ; but when I remove the security policy:oracle/wss_username_token_service_policy, it will cost only 20 seconds, why authentication cost so long? How can I deal with the problem?
My English is poor, please don't mind!
besides, with my OSB version is 11.1.1.6.0

I finally figured it out. The nullpointer exception is related to the SAML assertion. The SAML assertion in my requests is signed with embedded signature and this seems to be not supported with the used OWSM policy. Without the signature is the exception gone.
Marian

Attaching OWSM Policy to OSB Services

Hi,
Can anyone please share the detailed procedure of how to attach the OWSM policy to a Proxy Service in OSB 11g.
The documentaion of OSB 11g doesnt provide the information of attaching the OWSM polic to OSB services.
please refer
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e15866/owsm.htm#CHDBIJHD
I created a Custom Policy with the predefined assertion wss_username_token_service_template .
But i couldnt find a way to attach this policy to OSB Service. Also the OSB 11g Documentation didnt help much.
Thanks in Advance

Hi All,
I figured out a way of how to attach the OWSM policy to a prox service.
Its pretty simple in that way.
After you create a proxy service, Click on the proxy you created which opens the "View a Proxy Service" page.
In that there are many tabs such as
1. Configuration Details
2. Operational Settings
3. SLA Alert Rules
4. Policies
5. Security
In Policies tab, you can select "OWSM Policy Bindings" and then choose the policy you want.
The only thing bothering me now is how to test it?
I have used the following assertion to create the policy "wss_username_token_service_template "
Any help would be appreciated.
Cheers.

RIDC client using JAX-WS Web Service requires OWSM policy

Hi
For development purposes, I want to invoke the RIDC JAX-WS Web Service (I believe this to be the 11g idc native ws) but an error is thrown stating the various policies are invalid. The fact is my instance of Weblogic is not set up with OWSM and there are no security policies applied or configured.
I was wondering if there was a way to invoke this web service using http basic authentication and bypass the requirement to have a policy attached.
If not, does anyone have steps on how to enable OWSM and policies, and attach these to the IDC native web services).
Thanks
M

Hi Ryan
Yes, I have tried to use the JAX-WS with configuration that I was hoping would set Basic Auth on the request, however an error is thrown stating that the required policies are invalid on the server.
In summary:
I create a JaxWSClient client.
I create a binder using the client.
I create a IdcContext using a valid username and password.
I set up the service details and params in the binder.
I send the request by invoking the client and passing the binder and IdcContext.
With this basic set-up, I get a SOAP fault from the server stating that policy 'oracle/no_authentication_service_policy' and oracle/no_messageprotection_service_policy are invalid. It makes sense that there are invalid as they are not present on my weblogic instance, and it seems that because I have not specified any other configuration, that these are treated as the default policies.
Setting up basic auth would be ideal, as I do not have control of the Weblogic instances, and so getting OWSM would be a pain. There may be some way to set up the client to use Basic Auth, but unfortunately I cannot see how.
Cheers

Error installing Adobe Flash 11 "launchfail" after enable AppLocker

Error installing Adobe Flash 11 "launchfail" after enable AppLocker please help. I have allow everyone from publisher for .exe and .msi

I'll ask around, but I don't have any experience with AppLocker. Have you gone through all of the documentation here?
http://technet.microsoft.com/en-us/library/dd723678(v=ws.10).aspx

HTML DB 10g installation problem on linux HTTP-503 ORA-604

I have a problem after the installation of HTML DB from the linux 10g R2 companion image.
I installed HTML DB and HTTP server in one go, on an new system that only has the default orcl database installed. I run Red Hat enterprise linux on a x86_64 system.
The HTML DB installation took a long time, but gave no errors.
When I access the http://hostname:7777/pls/htmldb url I get an This server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.-error.
But :7777 works fine and give me the http server default page.
In my Apache error log I see the following errors:
[Thu Dec 8 13:28:42 2005] [error] [client 10.11.121.20] [ecid: 1134048522:10.14.66.23:28193:0:1,0] mod_plsql: /pls/htmldb/htmldb HTTP-503 ORA-604
I looked at several internet sources, played with my marvel.conf and my dads.conf but to no avail. My oracle home is different from my html db home. There is no ./network/admin/tnsnames.ora in my HTML_DB _HOME. Should there be? One solution in the faq even told me to copy the htmldb tnsnames.ora over my db tnsnames.ora, but the installation did not create one for me.
When should I use a dads.conf instead of marvel.conf? I don't understand the need for this second file. I tried to also use it, because some solutions and the post-installation instructions hinted on doing it. But then I get a different error in the logs about a double DAD.
When I login through sqlplus in the orcl database with the HTMLDB_PUBLIC_USER and my password (that was created during the installation) it works, but I don't see any tables (yet?). So the account is not locked. But should I see some tables when I do select table_name from user_tables; ?
I probably missing something obvious here, but I'm a bit of a oracle newby.
Any help is appreciated,
Erik

Thanks Diemar,
It worked.
I stopped all oracle process and services.
I then logged out and in again as oracle to see if the unset stuck.
I then started my listener, databases, isqlnet and em.
I then started the httpd with:
${HTMLDB_HOME}/opmn/bin/opmnctl start
opmnctl: opmn started
${HTMLDB_HOME}/opmn/bin/opmnctl startproc
this still gave some errors and the httpd was not started:
ias-component=HTTP_Server
opmnctl: starting opmn managed processes...
================================================================================opmn id=aberlour.uni.mdx.ac.uk:6200
0 of 1 processes started.
ias-instance id=standalone
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ias-component/process-type/process-set:
HTTP_Server/HTTP_Server/HTTP_Server
Error
--> Process (pid=3389)
failed to start a managed process after the maximum retry limit
Log:
/mdx/app/oracle/product/10.2.0/http/opmn/logs/HTTP_Server~1
last lines in this log where:
05/12/08 15:18:50 Stop process
/mdx/app/oracle/product/10.2.0/http/Apache/Apache/bin/apachectl stop: httpd stopped
05/12/08 15:31:55 Start process
/mdx/app/oracle/product/10.2.0/http/Apache/Apache/bin/apachectl start: execing httpd
05/12/08 15:31:57 Start process
/mdx/app/oracle/product/10.2.0/http/Apache/Apache/bin/apachectl start: execing httpd
I then added the PlsqlNLSLanguage line back into the marvel.conf
which now looks:
AddType text/xml xbl
AddType text/x-component htc
Alias /i/ /mdx/app/oracle/product/10.2.0/http/Apache/Apache/images/
<Location /pls/htmldb>
Order deny,allow
PlsqlDocumentPath docs
AllowOverride None
PlsqlDocumentProcedure wwv_flow_file_manager.process_download
PlsqlDatabaseConnectString xxxxxx.xxxxx.ac.uk:1521:orcl ServiceNameFormat
PlsqlNLSLanguage "ENGLISH_UNITED KINGDOM.AL32UTF8"
PlsqlAuthenticationMode Basic
SetHandler pls_handler
PlsqlDocumentTablename wwv_flow_file_objects$
PlsqlDatabaseUsername HTMLDB_PUBLIC_USER
PlsqlDefaultPage htmldb
PlsqlDatabasePassword @BWIuxxxxxxxxxxxxxxxxxxxxxxid4Y4t8b9g==
Allow from all
</Location>
and I started the http again, and it works fine.
Problem solved. I will try to fine tune it so I'll get the basic LANG setting back in linux but without the .UTF-8 postfix.
thanks for your help,
Erik

Error 503 after renaming SharePoint Foundation 2013 Server

We renamed a SharePoint Foundation 2013 server using the procedure outlined here:
http://www.bluesphereinc.com/blog/renaming-a-sharepoint-20102013-server/
Everything seemed to work fine until we tried to access the site afterwards. Now all we get when trying to access the site is the Error 503: Service is unavailable message. We can get into central administration without any problems.

Hi ,
According to your description, my understanding is that you encountered 503 error after renaming SharePoint Foundation 2013 Server.
For your issue, please refer to the actions as follow:
1.Check the web site properties in IIS. Under home directory tab, check the application pool value and then open that application pool from the application pools (separate node in the IIS tree). Click the
identity tab and see who is the pool assigned to. For the sake of testing, you can select "Predefined" and select local service from the drop down. Restart IIS and see if things work out for you. Http 503 error is generated by the IIS and it happens
when web server sends data stream back to the web site.
2.Verify that all SharePoint services are started, this error might occur because of changing the service account password. You may need to change the new password to application pool or SharePoint timer
service. Click the stopped application pool -> click advanced settings ->Identity ->click the user to retype the user ->Application Pool Identity dialog ->click set -> manually type the user name and password. Then restart the server.
If your issue persists, please provide detail error message of ULS log
to determine the exact cause of the error?
For SharePoint 2013, by default, ULS log is at
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\LOGS
Best Regards,
Eric
Eric Tao
TechNet Community Support

Report Services Integrated mode : Error 503 after 100 seconds

Hello,
After resolving an issue with some timeouts in shared datasets (updated value not taken into account), i am now facing another timeout (?) issue with our production sharepoint server and reporting services :
If a report takes more than 100 seconds to display, the following message is displayed on the top of the page :
"Sys.WebForms.PageRequestManagerServerErrorException: An unknown error occurred while processing the request on the server. The status code returned from the server was: 503"
The exception is triggered by the scriptmanager, but i don't know why : all the applications pool are running fine, and if i look in SSRS log, it shows that the task completed successfully !
Our development server is not affected by this strange behavior.
Is there a secret timeout switch hidden somewhere ??

Hi Raphael,
In Reporting Services, if the report server is under high memory pressure, the report server will refuse new requests until the current application domain is unloaded and a new one instantiated. While requests are refused, you will receive HTTP 503 errors.
To avoid this issue, you can add more memory, move the report server installation to a computer that has more memory, or change the memory configuration settings. For the detail information about it, please see HTTP 503 Service is Unavailable section on the
link below:
http://technet.microsoft.com/en-us/library/ms159778(v=sql.105).aspx
Besides, for the timeout issue, you can refer to the links below to troubleshooting it.
http://blogs.msdn.com/b/mariae/archive/2009/09/24/troubleshooting-timeout-errors-in-reporting-services.aspx
http://geekswithblogs.net/ssrs/archive/2009/10/30/steps-to-resolve-ssrs-timeout-issues.aspx
If you have any questions, please feel free to ask.
Regards,
Charlie Liao
TechNet Community Support

Getting error after enabling the Transaction in SSIS package in Windows Server 2008 R2 Standard machine

Hi,
I created a package with "Execute SQL Task and Data Flow Task". I am able to execute successfully in my server having
"Windows Server 2008 R2 Standard" Operating System.
But after enabling the Transaction in my SSIS Package I am not able to execute it. It is giving error. The same package is running in my local machine with Transaction enabled on
Windows 7 Operation System.
The error which I got in my server after enabling the Transaction is
"The SSIS Runtime has failed to enlist the OLE DB connection in a distributed transaction with error 0x8004D025
"The partner transaction manager has disabled its support for remote/network transactions.". End Error "
I search with this error message in google and found some solutions in the following links
http://social.msdn.microsoft.com/Forums/en-US/7172223f-acbe-4472-8cdf-feec80fd2e64/the-partner-transaction-manager-has-disabled-its-support-for-remotenetwork-transactions
http://technet.microsoft.com/en-us/library/cc753510(WS.10).aspx
http://support.microsoft.com/kb/817064
But none of the above solution is not working. Kindly help me to resolve this issue.
Thanks in Advance.
Sridhar

Hi Sridhar,
Please compare the DTS settings on the Windows 7 computer and the Windows Server 2008 R2 computer and make sure they are identical. Make sure the “Allow Inbound” and “Allow Outbound” options are check, and pay attention to the authentication mode as
well.
Besides, make sure both Distributed Transaction Coordinator (TCP-In) and Distributed Transaction Coordinator (TCP-Out) rules in Firewall are enabled.
If the issue persists and there are any security/anti-virus software, temporarily disable the security/anti-virus software and check the issue again.
Regards,
Mike Yin
TechNet Community Support

HT1478 i get a message when trying to sync..."requried disk cannot be found" even after enableing disk use

i get a message when trying to sync..."requried disk cannot be found" even after enableing disk use

First make sure you are using the most up to date version of iTunes and have all the latest Windows updates/patches installed on your PC. From there, try again and if still no luck, make sure you are plugging your iPod into a high powered USB 2.0 port.
Otherwise try these steps:
1. Run “c:\WINDOWS\system32\devmgmt.msc” (i.e. *Device Manager*), and leave it open for now for later use
2. Start up iTunes
3. Next, connect your iPod.
4. Go to your iPod Settings and select the “Enable disk use” option from under theSummary tab.
5. A dialog box will pop up reminding you that you’ll need to manually eject. Go ahead and hit OK
6. Hit Apply to save changes to the iPod
7. Quickly switch to the Device Manager window and right-click on any item within the window and select “Scan for hardware changes”
8. Finally, switch back to iTunes, and try re-syncing your iPod to see if it helped.
It might not also hurt to trash your iPod's Photo cache if it has one (i.e. you sync photos to the iPod). See this article for information on where to find this folder on your Windows XP machine.
http://support.apple.com/kb/TS1314
B-rock

Fnd_icx_launch.launch HTTP-503 ORA-12645

Hello,
I getting an error after login Service Temporarily unavailable, The Server is is temporarily unable to service you request due to maintenance downtime or capacity problem.
Please try again Later. In the apache log the following error shows up.
Wed Jul 3 12:50:01 2013] [notice] caught SIGTERM, shutting down [Wed Jul 3 13:16:49 2013] [notice] FastCGI: process manager initialized (pid 4232) [Wed Jul 3 13:16:50 2013] [notice] Oracle HTTP Server Powered by Apache/1.3.19 configured -- resuming normal operations [Wed Jul 3 13:23:45 2013] [error] mod_plsql: /pls/SID/fnd_icx_launch.launch HTTP-503 ORA-12645
I am able to login dev60cgi/f60cgi not through AppsLocalLogin.
I tried autoconfig on both nodes. (APP Tier and DB Tier) This is 11.5.10.2 version and the database version is 11g.
I Just cloned the application from production .
Any idea. Please help me.
Thanks
Prince

Hussein
yes , I am getting an error on alert log.
Fatal NI connect error 12170. VERSION INFORMATION: TNS for Linux: Version 11.2.0.3.0 - Production Oracle Bequeath NT Protocol Adapter for Linux: Version 11.2.0.3.0 - Production TCP/IP NT Protocol Adapter for Linux: Version 11.2.0.3.0 - Production Time: 16-JUL-2013 14:12:15 Tracing not turned on. Tns error struct: ns main err code: 12535 TNS-12535: TNS:operation timed out ns secondary err code: 12560 nt main err code: 505 TNS-00505: Operation timed out nt secondary err code: 110 nt OS err code: 0 Client address:
Thanks
Prince

SQL server 2012 Ent using less memory than the allocated amount after enabling -T834

I am facing the situation mentioned here.
http://blogs.msdn.com/b/psssql/archive/2009/06/05/sql-server-and-large-pages-explained.aspx
My SQL Server 2012 is not able to use all the 112 GB RAM that was allocated to it after enabling -T834.
This was not the case earlier. Now I see the Total server memory and target server memory counters are just 27 GB constantly. I found the below error while starting SQL after enabling -T834. I restarted services again and this time it started fine. But I
didnt bother about the error untill users complained slowness and SQL memory usage was found to be low.
Detected 131068 MB of RAM. This is an informational message; no user action is required.
Using large pages in the memory manager.
Large Page Allocated: 32MB
Large page allocation failed during memory manager initialization
Failed to initialize the memory manager
Failed allocate pages: FAIL_PAGE_ALLOCATION 2
Error: 17138, Severity: 16, State: 1.
Unable to allocate enough memory to start 'SQL OS Boot'. Reduce non-essential memory load or increase system memory.
Now, SQL is started by its Total server memory is only 27 GB. How can I make SQL server use all the allocated max server memory with -T834 still on ?
Bharath Kumar ------------- Please mark solved if I've answered your question, vote for it as helpful to help other user's find a solution quicker

Hi Bharath ,
in the below post the scenario is mentioned clearly
http://blogs.msdn.com/b/psssql/archive/2009/06/05/sql-server-and-large-pages-explained.aspx
Unable to allocate enough memory to start 'SQL OS Boot'. Reduce non-essential memory load or increase system memory.
This shows one of the problems with large pages: the memory size requested must be contiguous. This is called out very nicely at the MSDN
article on Large Pages
These memory regions may be difficult to obtain after the system has been running for a long time because the space for each large page must be contiguous, but the memory may have become fragmented. This is an expensive operation;
therefore, applications should avoid making repeated large page allocations and allocate them all one time at startup instead.
In this case above, even if ‘max server memory’ was set to say 8Gb, the server could only allocate 2Gb and that now becomes a maximum allocation for the buffer pool. Remember we don’t grow the buffer pool when using large pages so whatever memory we allocate
at startup is the max you get.
The other interesting thing you will find out with large pages is a possible slowdown in server startup time. Notice in the ERRORLOG entry above the gap of 7 minutes between the server discovering trace flag 834 was on (the "Using large pages..” message)
and the message about how much large memory was allocated for the buffer pool. Not only does it take a long time to call VirtualAlloc() but in the case where we cannot allocate total physical memory or ‘max server memory” we attempt to allocate lower values
several times before either finding one that works or failing to start. We have had some customers report the time to start the server when using trace flag 834 was over 30 minutes.
regards,
Ram
ramakrishna

Securing web services SOAP headers against OWSM policy

Hi,
I need to authenticate the user against the OWSM policy. The caller will pass username and password in SOAP headers and I need to attach WSS policy to my exposed web service.
How to extract the Header information and then validate them against the policy.
A simple HelloWorld sample will be of great help.
regards
Sanjeev

Hi,
For service authentication add policy wss_username_token_service_policy to client composite.Create user in security realms in adminstration console.
While testing the service select wss username token option under security tab and test with valid credentails or from, soap UI
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>USER CREATED IN SECURITY REALMS</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">PSWD ENTERED FOR THE SAME USER IN SECURITY REALMS</wsse:Password>
</wsse:UsernameToken></wsse:Security> WITH INPUT

OWSM Policy in OSB

I am trying to build a sample OSB service having the OWSM policy attached to it.I am using the option of "From OWSM Policy Store " and used the policy oracle/wss_username_token_service_policy.
When i tried to exceute the OSB,i am getting an error as
"oracle.wsm.policymanager.PolicyManagerException: WSM-02128 : Cannot read WSDL. [Possible Cause : unknown protocol: servicebus]"
Looking like,some issue with the parsing of the WSDL that i used upon the service.Do i need to refer the wsdl from MDS.If,yes how can i do that in OSB.

You may refer below blog for configuration -
http://niallcblogs.blogspot.com/2010/07/osb-11g-and-wsm.html
Regards,
Anuj

HTTP 503 after enabling OWSM policy on an ADF BC Service

Similar Messages

Maybe you are looking for