Implementing Security for BPEL Process

Hi,
We have a requirement to add security layer to BPEL processes (BPEL 10.1.3.4) deployed on WL 9.2. Client has asked us to implement PKI for WL domain.
Please guide me regarding the same.
Regards,
Prabodh Mitra
P.S. we are not using OWSM due to some business reasons

Hi,
Can you please provide any docs related to implementing pki/ssl in a BPEL-WLS env ? I have tried, but in vain.
These are the questions I have,
1. BPEL is installed on a separate domain in WLS. How will we enable SSL here? Is it ok if we enable at admin server level ?
2. Do we need to do some configuration on BPEL side as we do in OAS setup?
Thanks in advance.
Regards,
AP

Similar Messages

Inbound security for BPEL processes

Hello,
I am trying to enable Inbound security for BPEL processes. i made changes to message-handlers.xml as specified in the document.
However when i sent a test message using AXIS API, i am getting the below error.
Error while invoking inbound message handler.
An error has occurred while attempting to invoke the inbound message handler class "class com.collaxa.cube.security.Authenticator" for the message "". The exception reported was: Could not apply security [No username provided, security expects user]
I am using one of User Ids specified in system-jazn-data.xml and I can see that input soap message has a usernametoken . Any Inputs please?
Thanks

If you want to use the BPEL tool you can simulate some load using the initiate option. There is a checkbox where you can specify the load you want to perform.
Otherwise you need to use products such as Mercury (now HP) Load Runner. This is an expensive option but gives you very good output. The other option is to develop your own scripts to test the performance.
cheers
James

How to establish WS Security for BPEL processes running on Web Logic

We are running SOA Suite 10.1.3.4 on Web Logic Server 9.2.
I have built BPEL processes and now want to implement WS Security for them, "Wssp1.2-Wss1.0-UsernameToken-Plain-X509-Basic256.xml" in particular. Have been researching but could not find any document for a Web Logic scenario; can any of you please give me some directions or blogs which might be helpul.
Appreciate your help in advance.
Thanks!

Hi
Check the Link
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/526bd490-0201-0010-038e-d3ff7eb1d16e
Regards ,
Venkat

How to maintain List Of Values (LOV's) for BPEL Processes

We are integrating two systems.Source and destination systems store data in different formats. For example State is stored as a string in source and its stored as an number in destination system. In BPEL we are trying to transform this information and send it to destination system so that it understands the incoming data.
A sample of transformation we need to do is as shown below.
State in Source     Sate in Destination
Texas               1
Nebraska          2
But we have so many fields that we need to transform as we are doing for State.
What is the best way of handling these domain mappings in BPEL. I want to know is there any efficient way we can handle this in BPEL as we do in J2EE applications(Maintaining them in Domain tables and making them available for all functionalities).
We are looking to hold all these domain mappings at one place and use in all the processes we design.Can anyone suggest a better way to handle this for BPEL processes.

Hi,
I am using the lookup-xml for maintaining list of values.But dont know whats the problem unable to get the output.
Example: this is just a sample one which i am testing.
My xml file is placed in c folder with the name "StateList.xml" which contains the following info.
<?xml version="1.0"?>
<Countries>
<Country><Abbreviation>CO</Abbreviation><FullName>CO</FullName></Country>
<Country><Abbreviation>CT</Abbreviation><FullName>Connecticut</FullName></Country>
<Country><Abbreviation>ID</Abbreviation><FullName>Idaho</FullName></Country>
<Country><Abbreviation>NJ</Abbreviation><FullName>New Jersey</FullName></Country>
<Country><Abbreviation>AP</Abbreviation><FullName>Andhra Pradesh</FullName></Country>
</Countries>
And in BPEL, in the transformation i am taking the input and assigning this lookup value to the output variable as follows :
<ns1:result>
<xsl:value-of select="orcl:lookup-xml('file:/c:/StateList.xml','/Countries/Country','Abbreviation','FullName',/ns1:HelloWorldPavanaProcessRequest/ns1:input)"/>
</ns1:result>
But unable to get the result.Kindly help me out in this.
Regards,
Pavana

Securing a BPEL Process with username/password in 10g

securing a BPEL Process with username/password in 10g

use OWSM gateways..
create a gateway and define your policy in the gateway

Secure a BPEL process in 11g with username/pass

Hi All,
How to secure a BPEL process with username and password.

As mentioned in my previous post and link I provide this is done in the Enterprise Manager.
In 11g we have composites so more often than not you want the composite to be secure then you pass the credentials to the other components, e.g. BPEL.
1. Go to Enterprise Manager
2. Click on the composite that has the BPEL process
3. Click the policy Tab
4. Select the BPEL process in the Attach To/Detach From" drop down. If BPEL is not the component that invokes the composite then select that component.
5. Select wss_username_token_service_policy, click attach
6. If in step 4 you have a mediation step in front of your BPEL process then select your BPEL process in the drop down and attach the policy wss11_saml_token_with_message_protection_client_policy.
The user name password is taken from the WLS authentication, so this will be something like weblogic/welcome1
hope this helps.
James

OWSM server agent for BPEL process in Weblogic

Hello,
We are trying to protect a BPEL process (in Weblogic) with a OWSM server agent, but we couldn't find clear guidelines on that.
OWSM 10.1.3.x is in one machine, and Oracle BPEL 10.1.3.x is in another, with Weblogic 9.2.
Can anyone give us instructions or tips on how to do this, considering this scenario?
Thanks a lot.
Daniel Viero.

Dave, Andre,
It's unfortunate that you were given incorrect information.
Let's take this issue offline by contacting me directly.
OWSM agent support for .NET was taken out as .NET was going through multiple revisions while 10.1.3.1 was being developed, and the old agent wasn't compatible with the new .NET versions; and there were resource restrictions on our part to keep up with the new version support.
While on this topic, I would like to hear from you and others what their thoughts are around this kind of support in a future release.
1. We could add back .NET agent (similar to 4.0.3)
2. We could manage the policies for .NET through Oracle Enterprise Manager while letting the .NET framework enforce them. This will allow for centralized management of policies, while leveraging the security stack of .NET for enforcement.
Which approach would you prefer?
Thanks,
Vikas Jain
http://ws-security.blogspot.com

Error creating web service proxy for bpel process in jdev 10.1.3

Hi,
I am trying to create a web service proxy in Jdeveloper 10.1.3, and get the following error:
Element type "fault" is missing required attribute "name"
I have created a fault on one of the operations, and in the .wsdl file there is a name attribute:
<operation name="process">
<fault name="TestError" message="client:TestErrorMessage"/>
</operation>
The fault definition in the .wsdl obtained from the process when you access it over http is somewhat different:
<fault>
<soap:fault name="TestError" use="literal" encodingStyle="" />
</fault>
Any ideas how to workaround this problem?
Toby

Hi Susan,
The WSDL generated by BPEL designer is :
<?xml version="1.0" encoding="UTF-8"?>
<definitions name="EncryptedPasswordTest"
targetNamespace="http://xmlns.oracle.com/EncryptedPasswordTest"
xmlns="http://schemas.xmlsoap.org/wsdl/"
xmlns:client="http://xmlns.oracle.com/EncryptedPasswordTest"
xmlns:plnk="http://schemas.xmlsoap.org/ws/2003/05/partner-link/">
     
     <types>
          <schema attributeFormDefault="qualified"
               elementFormDefault="qualified"
               targetNamespace="http://xmlns.oracle.com/EncryptedPasswordTest"
               xmlns="http://www.w3.org/2001/XMLSchema">
               <element name="EncryptedPasswordTestProcessRequest">
                    <complexType>
                         <sequence>
                              <element name="username" type="string"/>
                         </sequence>
                    </complexType>
               </element>
               <element name="EncryptedPasswordTestProcessResponse">
                    <complexType>
                         <sequence>
                              <element name="password" type="string"/>
                         </sequence>
                    </complexType>
               </element>
               <element name="EncryptedPasswordTestProcessError">
                    <complexType>
                         <sequence>
                              <element name="code" type="string"/>
                              <element name="description" type="string"/>
                         </sequence>
                    </complexType>
               </element>
          </schema>
     </types>
     
     <message name="EncryptedPasswordTestRequestMessage">
          <part name="payload" element="client:EncryptedPasswordTestProcessRequest"/>
     </message>
     <message name="EncryptedPasswordTestResponseMessage">
          <part name="payload" element="client:EncryptedPasswordTestProcessResponse"/>
     </message>
     <message name="EncryptedPasswordTestErrorMessage">
          <part name="payload" element="client:EncryptedPasswordTestProcessError"/>
     </message>
     
     
     <portType name="EncryptedPasswordTest">
          <operation name="process">
               <input message="client:EncryptedPasswordTestRequestMessage" />
               <output message="client:EncryptedPasswordTestResponseMessage"/>
<fault name="EncryptedPasswordTestError" message="client:EncryptedPasswordTestErrorMessage"/>
          </operation>
     </portType>
     
     <plnk:partnerLinkType name="EncryptedPasswordTest">
          <plnk:role name="EncryptedPasswordTestProvider">
               <plnk:portType name="client:EncryptedPasswordTest"/>
          </plnk:role>
     </plnk:partnerLinkType>
</definitions>
And the WSDL produced when you access the ws endpoint is:
<?xml version="1.0" encoding="UTF-8"?>
<definitions
name="EncryptedPasswordTest"
targetNamespace="http://xmlns.oracle.com/EncryptedPasswordTest"
xmlns="http://schemas.xmlsoap.org/wsdl/"
xmlns:tns="http://xmlns.oracle.com/EncryptedPasswordTest"
xmlns:plnk="http://schemas.xmlsoap.org/ws/2003/05/partner-link/"
xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
xmlns:client="http://xmlns.oracle.com/EncryptedPasswordTest"
>
<types>
<schema attributeFormDefault="qualified" elementFormDefault="qualified" targetNamespace="http://xmlns.oracle.com/EncryptedPasswordTest"
xmlns="http://www.w3.org/2001/XMLSchema">
<element name="EncryptedPasswordTestProcessRequest">
<complexType>
<sequence>
<element name="username" type="string"/>
</sequence>
</complexType>
</element>
<element name="EncryptedPasswordTestProcessResponse">
<complexType>
<sequence>
<element name="password" type="string"/>
</sequence>
</complexType>
</element>
<element name="EncryptedPasswordTestProcessError">
<complexType>
<sequence>
<element name="code" type="string"/>
<element name="description" type="string"/>
</sequence>
</complexType>
</element>
</schema>
</types>
<message name="EncryptedPasswordTestErrorMessage">
<part name="payload" element="tns:EncryptedPasswordTestProcessError"/>
</message>
<message name="EncryptedPasswordTestResponseMessage">
<part name="payload" element="tns:EncryptedPasswordTestProcessResponse"/>
</message>
<message name="EncryptedPasswordTestRequestMessage">
<part name="payload" element="tns:EncryptedPasswordTestProcessRequest"/>
</message>
<portType name="EncryptedPasswordTest">
<operation name="process">
<input message="tns:EncryptedPasswordTestRequestMessage"/>
<output message="tns:EncryptedPasswordTestResponseMessage"/>
<fault name="EncryptedPasswordTestError" message="tns:EncryptedPasswordTestErrorMessage"/>
</operation>
</portType>
<binding name="EncryptedPasswordTestBinding" type="tns:EncryptedPasswordTest">
<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
<operation name="process">
<soap:operation style="document" soapAction="process"/>
<input>
<soap:body use="literal"/>
</input>
<output>
<soap:body use="literal"/>
</output>
<fault>
<soap:fault name="EncryptedPasswordTestError" use="literal" encodingStyle=""/>
</fault>
</operation>
</binding>
<service name="EncryptedPasswordTest">
<port name="EncryptedPasswordTestPort" binding="tns:EncryptedPasswordTestBinding">
<soap:address location="http://bpel5.lon.domroot.com:7779/orabpel/default/EncryptedPasswordTest/1.0"/>
</port>
</service>
<plnk:partnerLinkType name="EncryptedPasswordTest">
<plnk:role name="EncryptedPasswordTestProvider">
<plnk:portType name="tns:EncryptedPasswordTest"/>
</plnk:role>
</plnk:partnerLinkType>
</definitions>

Business Activity Monitoring for BPEL Processes

Hello,
IEP is capable of monitoring real time events, Real time business event collection and processing.
In that case, can we use IEP to monitor BPEL process activities with activity data.
One very big part, the ability to provide functionality for third parties (clients like Me) to register some sort of observer to capture live BPEL process activity, is missing.
I'm trying to cover that big hole in my project. That's the reason I'm posting about BPEL process management capabilities and events.
But I got no concrete answers for that. Not every business use can be provided by any generic system.
I looked at CAM (which comes with Alaska build). But I couldn't get much info about entire picture.
Other BPEL engines, the one I have used, has the functionality to do activity monitoring and process management. (IBM Process server, Apache ODE)
Could any IEP, BPEL component developers answer any sort of solution to my use case?
Thank you
Raja

I agree that this would be very useful. If anyone can provide additional insight it would be much appreciated.

Oracle SFTP adapter Configuration for BPEL process (11.1.1.3 )

Hi All,
Can someone tell me how to configure the FTP adapter for window's server.
We already have a bpel process with FTP adapter but it is set up for unix server , we want to change the location to window's server.
Can any one provide me with what changes need to be made at the ftp adapter level in jdeveloper and also on the weblogic console for the existing bpel process .
Thanks in advance.

Thanks a lot!
Will follow the steps as mentioned in the link: SOA / BPM on Oracle Fusion Middleware: SOA Suite 11g - FTP Adapter
I am confused about the path mentioned while configuring the adapter in jdev Physical path for windows should be the ftp server path provided by client and it should begin with \winserver\local and not like \\winserver\local ???
+
The configuration needs to be done on the weblogic console also as mentioned in the above link so for this FTP server - login details - host ,username /password , serverType is required.

Jdeveloper 10.1.3.4 Test Connection failed for BPEL Process Manager.

Application Server: OK
BPEL Process Manager Server: FAILED
ESB Server: OK
Verified and tried below steps:
1. hw_services and orabpel and deploy_services are up and running
2. Jdeveloper and Oracle SOA Suite Version is 10.1.3.4
3. Tools->Preferences -> Web Browser and Proxy is disabled.
4. Restarted hw_services and orabpel via Application server control for OC4J_SOA > hw_services/orabpel
5. Able to connect the bpel process manager(BPELConsole) from Browser.
6. But Not able deploy using ant tool as well as with Jdev Deploy option(no domains are displayed under deploy option in Jdev)
7. Ant deployment throws error,
A problem occured while connecting to server "testinstance.com" using port "7777": <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>404 Not Found</TITLE>
</HEAD><BODY>
<H1>Not Found</H1>
The requested URL /integration/services/deploy/deployHttpClientProcess.jsp was not found on this server.<P>
<HR>
<ADDRESS>Oracle-Application-Server-10g/10.1.3.4.0 Oracle-HTTP-Server Server at testsoa.art.com Port 7777</ADDRESS>
</BODY></HTML>
Went thru many threads under soa/bpel forums and couldn't find it worked.
Appreciate your help

Application Server Test     Passed
BPEL Identity Service     Failed
BPEL Domains     Not Run
BPEL Server Mode      Not Run
BPEL Notification Service     Not Run
BPEL TaskManager Service     Not Run
ESB Connection     Passed
When I select "BPEL Identity Service     Failed" the error displayed as is below. But for the Not Run components it says "Not Executed".
java.lang.Exception:Exception not handled by the Collaxa Cube system.
An unhandled exception has been thrown in the Collaxa Cube system. The exception reported is: "ORABPEL-10555
Identity Service Configuration error.
Identity Service Configuration file has error.
     at oracle.tip.pc.services.identity.config.ISConfiguration.load(ISConfiguration.java:277)
     at oracle.tip.pc.services.identity.config.ISConfiguration.<clinit>(ISConfiguration.java:94)
     at oracle.bpel.services.workflow.task.impl.WorkflowUtil.setUserNameCaseSensitiveFlagOnServer(WorkflowUtil.java:1193)
     at oracle.bpel.services.workflow.task.impl.TaskService.<init>(TaskService.java:196)
     at oracle.bpel.services.workflow.task.impl.TaskService.<clinit>(TaskService.java:153)
     at oracle.bpel.services.common.InitializeServlet.init(InitializeServlet.java:56)
     at com.evermind.server.http.HttpApplication.loadServlet(HttpApplication.java:2379)
     at com.evermind.server.http.HttpApplication.findServlet(HttpApplication.java:4830)
     at com.evermind.server.http.HttpApplication.findServlet(HttpApplication.java:4754)
     at com.evermind.server.http.HttpApplication.initPreloadServlets(HttpApplication.java:4942)
     at com.evermind.server.http.HttpApplication.initDynamic(HttpApplication.java:1144)
     at com.evermind.server.http.HttpApplication.<init>(HttpApplication.java:741)
     at com.evermind.server.ApplicationStateRunning.getHttpApplication(ApplicationStateRunning.java:431)
     at com.evermind.server.Application.getHttpApplication(Application.java:586)
     at com.evermind.server.http.HttpSite$HttpApplicationRunTimeReference.createHttpApplicationFromReference(HttpSite.java:1987)
     at com.evermind.server.http.HttpSite$HttpApplicationRunTimeReference.<init>(HttpSite.java:1906)
     at com.evermind.server.http.HttpSite.initApplications(HttpSite.java:643)
     at com.evermind.server.http.HttpSite.setConfig(HttpSite.java:290)
     at com.evermind.server.http.HttpServer.setSites(HttpServer.java:270)
     at com.evermind.server.http.HttpServer.setConfig(HttpServer.java:177)
     at com.evermind.server.ApplicationServer.initializeHttp(ApplicationServer.java:2493)
     at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:1042)
     at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:131)
     at java.lang.Thread.run(Thread.java:595)
Caused by: oracle.xml.parser.v2.XMLParseException: Start of root element expected.
     at oracle.xml.parser.v2.XMLError.flushErrors1(XMLError.java:320)
     at oracle.xml.parser.v2.NonValidatingParser.parseRootElement(NonValidatingParser.java:341)
     at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:303)
     at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:291)
     at oracle.tip.pc.services.identity.config.ISConfiguration.parseDocument(ISConfiguration.java:339)
     at oracle.tip.pc.services.identity.config.ISConfiguration.load(ISConfiguration.java:259)
     ... 23 more
Exception: ORABPEL-10555
Identity Service Configuration error.
Identity Service Configuration file has error.
Handled As: oracle.tip.pc.infra.exception.PCRuntimeException

Modifying Memory Optimization parameter for BPEL process in SOA 11g

Hello
I have turned on memory optimization parameter for my BPEL process in the composite.xml (11g)
this is what I have in composite.xml:
<property name="bpel.config.inMemoryOptimization">false</property>
How do we modify this parameter in the EM console at runtime? I changed this property to "true" using the System MBean browser, but it wasn't taking effect. I thought the SOA server must be restarted (similar to what we used to do in 10g). But when I restart the SOA server, the parameter goes back to whatever the value was in the composite.xml ignoring the change I made in the System MBean browser
Please share your thoughts.
Thanks in advance.
Raja

Deploying a newer version is not an option, as the endpoints could change (not sure if it would in 11g, but in 10g it does) and also, our service consumers will be pointing to the older version.As mentioned above, if clients are using URL without version then call will be forwarded to default version of composite internally. No manual tweaking required for this. Just make sure that while deploying the new version you are marking it as default.
Besides, we report on service metrics and having multiple versions just complicates things.Not at all. If you are not using versioning feature, you are really under utilizing the Oracle SOA 11g. Remember that metrics can be collected for a single composite with same effort, irrespective of the number of composite versions deployed. Only few product tables refer the version while storing composite name and rest all use only the composite name without version. I do not know how you are collecting service metrics but we use DB jobs for same it works perfectly with any number of composites having multiple versions deployed.
The idea is to do some debugging and collect audit trail in case there is a production issue by disabling inMemoryOptimization parameter. This is a live production environment and deploying whenever we want is not even an option for us, unfortunately. Why not debug by increasing log level. Diagnostic logs are the best option to debug an issue even in production. For getting audit trail you may re-produce the issue in lower environments. I think no organization will allow re-deployments just for debugging some issue in production until and unless it is too critical issue to handle.
Does this not supported in 11g? if it isn't, it does seem like a bug to me. You may always go ahead and raise a case with support.
Regards,
Anuj

Implementing security for the Projects in OWB

Hi,
Can we able to implement the security for the individual projects?
Thanks
Vinay

Hi,
do not know exactly what kind of security you want to implement. But the below is the excerption from OWB User guide about implementing security at Project level...
You should be able to find more info in OWB User Guide.
Freezing Projects
If you want to freeze the project MY_PROJECT and prevent access to all its contents,
the following restrictions will apply:
You cannot create, edit, or delete any objects under a frozen project.
You cannot invoke any of the services that modify objects within this frozen
project. For example, you cannot perform an MDL import, a source import, or a
snapshot restore in this project.
You can deploy, export, and execute runtime procedures within a frozen project.
You can validate and generate within a frozen project.
You cannot add or remove any objects from a frozen project to a snapshot.
The frozen project security policy is implemented within Warehouse Builder through
the following files. These files are located on your installation CD under:
samples/security_feature/frozenproject.
frozenProject.pkb: Holds the implementation of the security policy.
frozenProject.sql: Contains a table of the structure as shown in Table 192. The
administrator can freeze projects by inserting them into this table and setting the
isFrozen flag to 1.
HTH
mahesh

Initiate fails in BPEL Console for BPEL process connecting to JMS Adapter

We have a BPEL process picking up data from JMS Queue of TIBCO EMS server. When we try to run this process from BPEL Console Initiate tab, we get following error dump :
Oracle BPEL Process Manager Full Cycle
An unexpected error has occurred while executing your request. This is most likely related to a defect in the Oracle BPEL Process Manager product. We apologize you can post the error to the OTN forum and we will get back to you as soon as possible.
Attachments:
Build Information:
Oracle BPEL Server version 10.1.3.1.0
Build: 0
Build time: Mon May 15 06:39:46 PDT 2006
Build type: release
Source tag: PCBPEL_SOABETA_GENERIC_060515.0600
Exception Message:
[javax.servlet.ServletException]
The system encounters errors while running as the authenticated identity.
Exception Trace:
javax.servlet.ServletException: The system encounters errors while running as the authenticated identity.
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:416)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:622)
     at com.evermind.server.http.ServletRequestDispatcher.unprivileged_include(ServletRequestDispatcher.java:161)
     at com.evermind.server.http.ServletRequestDispatcher.access$000(ServletRequestDispatcher.java:50)
     at com.evermind.server.http.ServletRequestDispatcher$1.oc4jRun(ServletRequestDispatcher.java:98)
     at oracle.oc4j.security.OC4JSecurity.doPrivileged(OC4JSecurity.java:283)
     at com.evermind.server.http.ServletRequestDispatcher.include(ServletRequestDispatcher.java:103)
     at com.evermind.server.http.EvermindPageContext.include(EvermindPageContext.java:395)
     at displayProcess.jspService(_displayProcess.java:857)
     at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
     at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:453)
     at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:590)
     at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:514)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
     at oracle.security.jazn.oc4j.JAZNFilter$1.run(JAZNFilter.java:392)
     at java.security.AccessController.doPrivileged(Native Method)
     at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:406)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:622)
     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:369)
     at com.evermind.server.http.ServletRequestDispatcher.unprivileged_forward(ServletRequestDispatcher.java:260)
     at com.evermind.server.http.ServletRequestDispatcher.access$100(ServletRequestDispatcher.java:50)
     at com.evermind.server.http.ServletRequestDispatcher$2.oc4jRun(ServletRequestDispatcher.java:194)
     at oracle.oc4j.security.OC4JSecurity.doPrivileged(OC4JSecurity.java:283)
     at com.evermind.server.http.ServletRequestDispatcher.forward(ServletRequestDispatcher.java:199)
     at com.collaxa.cube.fe.DomainFilter.doFilter(DomainFilter.java:131)
     at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:15)
     at oracle.security.jazn.oc4j.JAZNFilter$1.run(JAZNFilter.java:392)
     at java.security.AccessController.doPrivileged(Native Method)
     at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:406)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:620)
     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:369)
     at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:869)
     at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:449)
     at com.evermind.server.http.HttpRequestHandler.serveOneRequest(HttpRequestHandler.java:216)
     at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:117)
     at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:110)
     at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
     at oracle.oc4j.network.ServerSocketAcceptHandler.procClientSocket(ServerSocketAcceptHandler.java:233)
     at oracle.oc4j.network.ServerSocketAcceptHandler.access$800(ServerSocketAcceptHandler.java:33)
     at oracle.oc4j.network.ServerSocketAcceptHandler$AcceptHandlerHorse.run(ServerSocketAcceptHandler.java:847)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
Also the BPEL process containing JMS adapter is not able to pick up data from JMS queue.
The same adapter was used in ESB service as well, which is working fine. There are no issues in ESB JMS Adapter connecting to JMS Queue of TIBCO EMS server.
Your help is appriciated.

Try the BPEL / SOA forum, you'll get more help there.
-steve-

Invalid xml document for BPEL Process.

Hi everyone,
I am getting below error after i set validateXML=strict
Invalid xml document.
According to the xml schemas, the xml document is invalid. The reason is: Error::cvc-datatype-valid.1.2.1: '' is not a valid value for 'decimal'.
Error::cvc-type.3.1.3: The value '' of element 'ns1:p_person_id' is not valid.
Please make sure that the xml document is valid against your schemas.
Kindly help me with the steps. I am just a SOA admin, not developer.
Regards
Lammeki.

Ummmm Vikas,
Lemme bring out a better picture, so u get more clear on this one.
The developer has upgraded an already deployed BPEL process.
Since then, she has been facing problem. When she invoke those process they simply end up as faulted with a yellow color ! mark.
Now i as an admin, i tried everything to help her cos she escalated the issue to me, thinking maybe there is sumthing i could do to assists her.
Now i am not sure, how to help her, but yes i started with the logs. Both the oc4j container log for SOA and the domain log show the similar error.
But till then, i didn't know black and white of it. so i tried doing all testing possible from my end.
When i check on the faulted instances i see there is a Assign activity after Transform followed by Invoked being highlighted in red color. and when i clicked on it i get to see the error
Assign_41
[2011/07/21 02:26:15]
Error in evaluate <from> expression at line "315". The result is empty for the XPath expression : "/ns6:QueryPerAllPeopleOutputCollection/ns6:QueryPerAllPeopleOutput/ns6:EMPLOYEE_NUMBER".
oracle.xml.parser.v2.XMLElement@1ee216f
Copy details to clipboard
[2011/07/21 02:26:15]
"{http://schemas.xmlsoap.org/ws/2003/03/business-process/}selectionFailure" has been thrown.
- <selectionFailure xmlns="http://schemas.xmlsoap.org/ws/2003/03/business-process/">
- <part name="summary">
<summary>
empty variable/expression result.
xpath variable/expression expression "/ns6:QueryPerAllPeopleOutputCollection/ns6:QueryPerAllPeopleOutput/ns6:EMPLOYEE_NUMBER" is empty at line 315, when attempting reading/copying it.
Please make sure the variable/expression result "/ns6:QueryPerAllPeopleOutputCollection/ns6:QueryPerAllPeopleOutput/ns6:EMPLOYEE_NUMBER" is not empty.
Possible reasons behind this problems are: some xml elements/attributes are optional or the xml data is invalid according to XML Schema.
To verify whether XML data received by a process is valid, user can turn on validateXML switch at the domain administration page.
</summary>
</part>
</selectionFailure>
Copy details to clipboard
So because of that instruction i went ahead and set validateXML=strict
and that is when i got the error message as below
Invoke_PerAllPeople
[2011/07/21 11:47:12]
Invalid data: The value for variable "Invoke_PerAllPeople_QueryPerAllPeople_InputVariable", part "QueryPerAllPeopleInput_msg" does not match the schema definition for this part.The invalid xml document is shown below:
oracle.xml.parser.v2.XMLElement@17f54ff
Copy details to clipboard
[2011/07/21 11:47:12]
Faulted while invoking operation "QueryPerAllPeople" on provider "QueryPerAllPeople".
- <messages>
- <input>
- <Invoke_PerAllPeople_QueryPerAllPeople_InputVariable>
- <part xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="QueryPerAllPeopleInput_msg">
- <QueryPerAllPeopleInput xmlns:ns1="http://xmlns.oracle.com/pcbpel/adapter/db/QueryPerAllPeople" xmlns="http://xmlns.oracle.com/pcbpel/adapter/db/QueryPerAllPeople">
<ns1:p_person_id/>
</QueryPerAllPeopleInput>
</part>
</Invoke_PerAllPeople_QueryPerAllPeople_InputVariable>
</input>
- <fault>
- <invalidVariables xmlns="http://schemas.oracle.com/bpel/extension">
- <part name="code">
<code>
9710
</code>
</part>
- <part name="summary">
<summary>
Invalid xml document.
According to the xml schemas, the xml document is invalid. The reason is: Error::cvc-datatype-valid.1.2.1: '' is not a valid value for 'decimal'.
Error::cvc-type.3.1.3: The value '' of element 'ns1:p_person_id' is not valid.
Please make sure that the xml document is valid against your schemas.
</summary>
</part>
</invalidVariables>
</fault>
</messages>
Copy details to clipboard
[2011/07/21 11:47:12]
"{http://schemas.oracle.com/bpel/extension}invalidVariables" has been thrown.
- <invalidVariables xmlns="http://schemas.oracle.com/bpel/extension">
- <part name="code">
<code>
9710
</code>
</part>
- <part name="summary">
<summary>
Invalid xml document.
According to the xml schemas, the xml document is invalid. The reason is: Error::cvc-datatype-valid.1.2.1: '' is not a valid value for 'decimal'.
Error::cvc-type.3.1.3: The value '' of element 'ns1:p_person_id' is not valid.
Please make sure that the xml document is valid against your schemas.
</summary>
</part>
</invalidVariables>
Copy details to clipboard
The main problem was we were observing many SOA inactive threads in one particular database, and they keep building up minutes by minutes.
I suspect, that in the code connections were open but were not closed, there4 there were inactive threads in the database.
I had to stop the SOA application, to stop threads from building up. I guess they got build up when they were invoked. There is definitely some fault with the code. or tell me am wrong. tell me its sumthing else.
However other domains processes were working fine.
and oh, yes the developer also made changes in the database. when i asked her to revert back and see if it works, she say thats a huge amount of work.
Finally she end up saying that maybe it could be a problem with the new version.
Now as a learner, I want to know what is going on, and how do we go about solving it.
Am not much of a SOA techie. that u can make out. but yes ready to learn things. so there4 i beg you to explain to me like am a standard 3 or 4 kid. any more information needed plz feel free to write back.
regards
Lammeki.

Implementing Security for BPEL Process

Similar Messages

Maybe you are looking for