Invoking secured web-service deployed in OC4j

Hi All
I have implemented security for web-services(UsernameToken profile) and i have deployed it in the standalone Oc4j
I am trying to invoke the secured webservice now by passing the below security header in the SOAP message.
<soap:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
<wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>admin</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">admin</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
And i am hitting with the below exception
WSDoAllReceiver: cannot get SOAP header after security processing; nested exception is:
org.xml.sax.SAXParseException: <Line 9, Column 48>: XML-20100: (Fatal Error) Expected 'EOF'
Help me out pls ..
Thanks in advance
Kalyan

(Re: Error: org.xml.sax.SAXParseException: <Line 1, Column 2049>: XML-20100:
Hi!
Read this site, maybe the solution is on the bottom of the page:
http://www.orafaq.com/forum/t/91517/0/
"3. Verify this file to be a valid xml file. There should be no unwanted extra lines after the last element either."
"4. Make necessary changes in the file. Save the file."
"5. Try to deploy the application again."
Bests!
Tamas

Similar Messages

Error while invoking a Web service deployed on OC4J from Oracle BPEL

Hi,
I had created a web service from a simple java class using JDeveloper and deployed that on OC4J which had emmited a wsdl for the web service. On the same AS my BPEL processing is deployed in which i had created a partner link by using 1st option (i.e Browse WSDL files from local file system) and invoking the published method of the java class.I am expecting that the method of the class which is deployed as web service will be executed and i will get the return of the method as the response of the invoke activity , but i am getting this error :
<remoteFault xmlns="http://schemas.oracle.com/bpel/extension">
<part name="summary">
<summary>when invoking locally the endpoint 'http://localhost:8080/MyIM-JavaCustomerFactory-context-root/JavaCustFactory', ; nested exception is: ORABPEL-02052 Cannot lookup BPEL domain. The BPEL domain "JavaCustFactory" cannot be found; the domain may not have initialized properly. Please verify that the BPEL domain loader has a valid set of initialization properties in the application properties file.</summary>
</part>
<part name="detail">
<detail>ORABPEL-02052 Cannot lookup BPEL domain. The BPEL domain "JavaCustFactory" cannot be found; the domain may not have initialized properly. Please verify that the BPEL domain loader has a valid set of initialization properties in the application properties file.</detail>
</part>
</remoteFault>
It seems that the Invoke activity is not able to get the WebService and it is asking for some settings , if any clue regarding this pls reply.
I can also give the wsdl also.
mail me at [email protected]

Hi,
Thanx it is working now.
BTW can you give me some urls with info of this kind of setting which i need to do for other kind of integarions in J2EE platform.Sorry if i am asking too much as i am a starter in this technology.

Error Call Web Service Deployed to OC4J 10g with JDev 10g

I deployed a PL/SQL Package as a Web Service to a Stand Alone 10g OC4J instance. When I invoke the Web Service the text I am returned is this:
<?xml version='1.0' encoding='UTF-8'?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode>SOAP-ENV:Server.Exception:</faultcode>
<faultstring>java.rmi.RemoteException: null; nested exception is:
java.lang.NullPointerException</faultstring>
<faultactor>/webservice/Mayoclinic</faultactor>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
I can successfully run the Web Service in the OC4J instance in JDev 10g.
Any ideas. I recieve know errors in JDev 10g Deploying the application.

Last line should be ...
Any ideas. I recieve NO errors in JDev 10g Deploying the application.

Error while invoking secure web service.

Hi,
I am trying to access a secure web service through a simple BPEL process in SOA Suite 11g. When I test it through enterprise manager I am getting the following error. Since it's a secured websecure i set the WS policy(oracle/wss_username_token_client_policy) in the external reference and also provided the credentials. If anyone has come across similar error or know the solution please let me know. Also I am not sure if its related to security or is it with the way I am trying to call the service.
Error Message:
Fault ID     reference:80014
Fault Time     May 22, 2011 12:54:45 PM
Non Recoverable System Fault :
javax.xml.ws.soap.SOAPFaultException: 99999: Unknown Service
Error Message: {http://schemas.oracle.com/bpel/extension}remoteFault
Fault ID     default/Mocking!1.0*soa_be35cb3e-5f05-49df-a696-a653d5703681/BPELProcess1/30017-BpInv0-BpSeq0.3-3
Fault Time     May 22, 2011 12:54:46 PM
Non Recoverable System Fault :
<bpelFault><faultType>0</faultType><remoteFault xmlns="http://schemas.oracle.com/bpel/extension"><part name="summary"><summary>99999: Unknown Service</summary></part><part name="detail"><detail><con:fault xmlns:con="http://www.bea.com/wli/sb/context"> <con:errorCode>99999</con:errorCode> <con:reason>Unknown Service</con:reason> <con:location> <con:node>PipelinePairNode1</con:node> <con:pipeline>PipelinePairNode1_request</con:pipeline> <con:stage>stage1</con:stage> </con:location> </con:fault> </detail></part><part name="code"><code>soap:Server</code></part></remoteFault></bpelFault>

Thanks very much for your suggestion. I will take a look into the wsdl again and see if something is wrong in that.
I have a peculiar problem with the wsdl. When I created the partner link using the remote wsdl it would throw a compilation error. But when I took a local copy of the remote wsdl and seperated all the schema's from the wsdl and imported them inside wsdl it gets compiled. But I am not sure if this is a appropriate thing to do and if that is creating this problem. Any thoughts on this would be really helpful.

Compliation Error while invoking Secure web service.

Hi,
I am trying to invoke secure JDE Business Service in SOA 11g from a simple Composite process as a partnerlink.
The JDE Business Service is deployed on a weblogic server. The service is getting invoked through SOAP UI but is giving compilation errors when used in a Composite process.
Error(17,30): Load of wsdl "https://hostname:port/DV900/AddressBookManager?wsdl" failed
Error(20,30): Load of wsdl "AddressBookManagerDefinitionsWrapper.wsdl" failed
Error(33,88): Cannot find Port Type "{http://oracle.e1.bssv.JP010000/}Oracle_E1_SBF_JWS_PkgBldFile_AddressBookManager" for "AddressBookManager" in WSDL Manager
Could someone please let me know how to resolve this issue.
Also, is this related to some kind of keystores that need to be imported into JDeveloper or Weblogic Server
OR
Certificates that need to be imported into my application.
Any help will be appreciated.
Regards,
Varun Maheshwari
Edited by: Varun Maheshwari on 01.des.2011 08:30

In Document 663626.1 there are a few tests/samples that could help with testing and verification.
If this isn't what you're looking for, you may want to check out the Information Center for Using Business Services (BSSV) in the JD Edwards EnterpriseOne Tools and Technology Product (Doc ID 1365168.2)
Hope that helps!

How to invoke secure web service from BPEL in SOA 11g

In SOA 11g I have a simple bpel process in which I am invoking a secured webservice as partnerlink. The webservice which is used in bpel process is deployed in weblogic and the SSL port is enabled on weblogic server. The wsdl url starts with "https:\\hostname:port\servicename?wsdl"
But I am getting compilation errors when i compiled the BPEL code
Error(16,65): Load of wsdl "AddressBookManager.wsdl" failed
Error(19,30): Load of wsdl "https://hostname:port/DV900/AddressBookManager?wsdl" failed
Error(35,102): Cannot find Port Type "{http://oracle.e1.bssv.JP010000/}Oracle_E1_SBF_SEI_PkgBldFile_AddressBookManager" for "AddressBookManager" in WSDL Manager
Can anyone please help me out in resolving this.
Thanks,
Shameem banu.

Solution is you need to import the keystore into Jdeveloper jdk first.
keytool -import -alias <name> -file <name>.pem -keystore <name>.jks -storepass <passwd>
All details in <> are your specific keystore,pwd details.
Then go to Jdeveloper/jdev/bin
add the following to
jdev.conf file
AddVMOption -Djavax.net.ssl.trustStore=path_to_keystore\keystorename.jks
AddVMOption -Djavax.net.ssl.trustStorePassword=password
Then you can create partner link for https based wsdl
Good Luck

Error invoking web service deployed in SOA Suite

I have implemented a stateful web service in Jdeveloper 10.1.3.2.
I can test succesfully an operation of the web service from the embedeed oc4j of jdeveloper, but i can not succes when i try do the same from the application server control of soa suite.
The response of the web service in the second case, is the xml of the request.I can not understand.
I implemented a web service proxy in jdeveloper that invokes the web service deployed in soa suite.When i run it, it gives me an exception like this:
unexpected element name: expected={http://orclproject/types/}doLoginResponseElement, actual={http://orclproject/types/}doLoginElement
     at oracle.j2ee.ws.common.encoding.literal.LiteralObjectSerializerBase.internalDeserialize(LiteralObjectSerializerBase.java:231)
     at oracle.j2ee.ws.common.encoding.literal.LiteralObjectSerializerBase.deserialize(LiteralObjectSerializerBase.java:159)
     at klient7.proxy.runtime.OrclLoginWSSoapHttp_Stub._deserialize_doLogin(OrclLoginWSSoapHttp_Stub.java:1022)
     at klient7.proxy.runtime.OrclLoginWSSoapHttp_Stub._readFirstBodyElement(OrclLoginWSSoapHttp_Stub.java:891)
     at oracle.j2ee.ws.client.StreamingSender._sendImpl(StreamingSender.java:333)
     at oracle.j2ee.ws.client.StreamingSender._send(StreamingSender.java:112)
     at klient7.proxy.runtime.OrclLoginWSSoapHttp_Stub.doLogin(OrclLoginWSSoapHttp_Stub.java:484)
     at orclproject.OrclLoginWSSoapHttpPortClient.doLogin(OrclLoginWSSoapHttpPortClient.java:65)
     at orclproject.OrclLoginWSSoapHttpPortClient.main(OrclLoginWSSoapHttpPortClient.java:28)
where doLogin is the operation of the web service.
any idea?
thanks in advance...

Hi,
almost 8 months passed since this post, but if still actual then look at BUG: Request XML returned as response when result too large thread. It may be the same problem with large data sets.
Regards,
Patrik

Error while invoking a WS-Security secured web service from Oracle BPEL..

Hi ,
We are facing some error while invoking a WS-Security secured web service from our BPEL Process on the windows platform(SOA 10.1.3.3.0).
For the BPEL process we are following the same steps as given in an AMIS blog : - [http://technology.amis.nl/blog/1607/how-to-call-a-ws-security-secured-web-service-from-oracle-bpel]
but sttill,after deploying it and passing values in it,we are getting the following error on the console :-
“Header [http://schemas.xmlsoap.org/ws/2004/08/addressing:Action] for ultimate recipient is required but not present in the message”
Any pointers in this regard will be highly appreciated.
Thanks,
Saurabh

Hi James,
Thanks for the quick reply.
We've tried to call that web service from an HTML designed in Visual Studios with the same username and password and its working fine.
But on the BPEL console, we are getting the error as mentioned.
Also if you can tell me how to set the user name and password in the header of the parter link.I could not find how to do it.
Thanks,
Saurabh

Invoking a secured web service

Hello,
I'm using a clustered osb with a loadbalancer, i have two nodes osb1 and osb2.
i'm trying to test a secured business service which points to a web service deployed on another server.
i installed its certificate in both nodes.
if i stop osb1, the test is always successful.
if i stop osb2, the test always fails.
if they are both running, the test fails sometimes and succeeds sometimes.
the log in osb1 contains the following errors :
java.security.InvalidKeyException: Illegal key size
at javax.crypto.Cipher.a(DashoA13*..)
at javax.crypto.Cipher.init(DashoA13*..)
at javax.crypto.Cipher.init(DashoA13*..)
<Error> <WliSbTransports> <BEA-381304> <Exception in HttpTransportServlet.service: java.net.SocketException: Broken pipe
java.net.SocketException: Broken pipe
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
at weblogic.utils.io.ChunkedOutputStream.writeTo(ChunkedOutputStream.java:193)
at weblogic.servlet.internal.ResponseHeaders.writeHeaders(ResponseHeaders.java:434)
Truncated. see log file for complete stacktrace
<Error> <Socket> <soaapp1> <osbms1> <ExecuteThread: '4' for queue: 'weblogic.socket.Muxer'> <<WLS Kernel>> <> <> <1263614497772> <BEA-000403> <IOException occurred on socket: Socket[addr=/10.100.10.112,port=59913,localport=7001]
java.net.SocketException: Connection refused.
java.net.SocketException: Connection refused
at java.net.SocketInputStream.socketRead0(Native Method)
at java.net.SocketInputStream.read(SocketInputStream.java:129)
at weblogic.socket.SocketMuxer.readReadySocketOnce(SocketMuxer.java:887)
at weblogic.socket.SocketMuxer.readReadySocket(SocketMuxer.java:859)
at weblogic.socket.DevPollSocketMuxer.processSockets(DevPollSocketMuxer.java:120)
at weblogic.socket.SocketReaderRequest.run(SocketReaderRequest.java:29)
at weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:42)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:145)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:117)
the log in osb2 contains the following error :
<Error> <WliSbTransports> <BEA-381304> <Exception in HttpTransportServlet.service: java.net.SocketException: Broken pipe
java.net.SocketException: Broken pipe
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
at weblogic.utils.io.ChunkedOutputStream.writeTo(ChunkedOutputStream.java:193)
at weblogic.servlet.internal.ResponseHeaders.writeHeaders(ResponseHeaders.java:434)
Truncated. see log file for complete stacktrace
<Error> <Socket> <soaapp2> <osbms2> <ExecuteThread: '2' for queue: 'weblogic.socket.Muxer'> <<WLS Kernel>> <> <> <1261190759758> <BEA-000403> <IOException occurred on socket: Socket[addr=/10.100.10.112,port=41815,localport=7001]
java.net.SocketException: Connection refused.
java.net.SocketException: Connection refused
at java.net.SocketInputStream.socketRead0(Native Method)
at java.net.SocketInputStream.read(SocketInputStream.java:129)
at weblogic.socket.SocketMuxer.readReadySocketOnce(SocketMuxer.java:887)
at weblogic.socket.SocketMuxer.readReadySocket(SocketMuxer.java:859)
at weblogic.socket.DevPollSocketMuxer.processSockets(DevPollSocketMuxer.java:120)
at weblogic.socket.SocketReaderRequest.run(SocketReaderRequest.java:29)
at weblogic.socket.SocketReaderRequest.execute(SocketReaderRequest.java:42)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:145)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:117)
>
could someone help?

Hi - I know it has been a long time since you posted into this forum. I am seeing a similar error though I have "Hostname verification" set to none. Can you please tell me if your problem has been fixed and if so, how? Thanks

Invoking a secure web service from a standalone java client

I am using stand alone java client to invoke a web service. This web service in turn invokes a jcs which is protected ( role based access ).
I am using a proxy at the client side for web service invocation
FileSubmission_Impl filesubmission_impl = new FileSubmission_Impl();
FileSubmissionSoap filesubmissionsoap = filesubmission_impl.getFileSubmissionSoap();
filesubmissionsoap.processFiles(...)
This works if there are no security constraints on any of the resources (@common:security).
I need to pass the username and password from the java client that will be authenticated and allowed to access the protected resources.
Please let me know as to how this can be achieved ( passing username and password from client )

Paula,
I suppose you're using CFINVOKE (http://www.activsoftware.com/code_samples/code.cfm/CodeID/44/ColdFusion/Invoking_SOAP_Web_Services_with_ColdFusion_MX_CFINVOKE_Tag) or are you using a third party tool like CFX_SOAP (http://www.activsoftware.com/products/productdetail.cfm/id/1015)?
Are you working with WebAS 6.4 or 6.2?
It works with web services created with WebAS 6.4, but you should generate proxy classes. Check Thomas' weblog (second part of it)->https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/1012. [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken] [original link is broken]
The WSDL generated by this method is more standard than the one generated when you just Remote enable an FM and look at the webservice browser.
Th core of CF MX is Java and that engine is rather strict in standards.
Eddy

Jdeveloper WS proxy error while invoking web service deployed on weblogic

Hello experts, can you please help me. I have web service deployed on weblogic server.
I have not set any credential for this web service. I can test the service from SOAPUI without providing any credentials.
Then I generated WS proxy client using Jdeveloper. When I try to run the client, I do not know why I get security execption (shown below) eventhough I have not secured the web service deployed on weblogic server.
java.lang.SecurityException: keyStoreFilename is either null or empty string
     at weblogic.wsee.security.util.CertUtils.getCertificate(CertUtils.java:87)
     at pilot1.ContactWSPortTypePortClient.getBSTCredentialProvider(ContactWSPortTypePortClient.java:104)
     at pilot1.ContactWSPortTypePortClient.setPortCredentialProviderList(ContactWSPortTypePortClient.java:78)
     at pilot1.ContactWSPortTypePortClient.main(ContactWSPortTypePortClient.java:46)
Process exited with exit code 0.
Here is my client class :
public static void main(String[] args) {
try {
contactWSService = new ContactWSService();
ContactWSPortType contactWSPortType = contactWSService.getContactWSPortTypePort();
Map<String, Object> requestContext = ((BindingProvider) contactWSPortType).getRequestContext();
setPortCredentialProviderList(requestContext);
// Add your code to call the desired methods.
// QueryPageInputSecondPage qpisp= new QueryPageInputSecondPage(); //I have commented it in order to resolve security issue
System.out.println("Inside the client class");
} catch (Exception ex) {
ex.printStackTrace();
Inside the method setPortCredentialProviderList(), I have not provided any credentials, keystores etc. Because weblogic is not setup with SSL and also I have not set up any authorization or authentication for the web service. I do not know why I am able to test it through SOAPUI and why not using WS proxy.
Appreciate your quick response.
thanks a lot
jyothi

Hello experts, can you please help me. I have web service deployed on weblogic server.
I have not set any credential for this web service. I can test the service from SOAPUI without providing any credentials.
Then I generated WS proxy client using Jdeveloper. When I try to run the client, I do not know why I get security execption (shown below) eventhough I have not secured the web service deployed on weblogic server.
java.lang.SecurityException: keyStoreFilename is either null or empty string
     at weblogic.wsee.security.util.CertUtils.getCertificate(CertUtils.java:87)
     at pilot1.ContactWSPortTypePortClient.getBSTCredentialProvider(ContactWSPortTypePortClient.java:104)
     at pilot1.ContactWSPortTypePortClient.setPortCredentialProviderList(ContactWSPortTypePortClient.java:78)
     at pilot1.ContactWSPortTypePortClient.main(ContactWSPortTypePortClient.java:46)
Process exited with exit code 0.
Here is my client class :
public static void main(String[] args) {
try {
contactWSService = new ContactWSService();
ContactWSPortType contactWSPortType = contactWSService.getContactWSPortTypePort();
Map<String, Object> requestContext = ((BindingProvider) contactWSPortType).getRequestContext();
setPortCredentialProviderList(requestContext);
// Add your code to call the desired methods.
// QueryPageInputSecondPage qpisp= new QueryPageInputSecondPage(); //I have commented it in order to resolve security issue
System.out.println("Inside the client class");
} catch (Exception ex) {
ex.printStackTrace();
Inside the method setPortCredentialProviderList(), I have not provided any credentials, keystores etc. Because weblogic is not setup with SSL and also I have not set up any authorization or authentication for the web service. I do not know why I am able to test it through SOAPUI and why not using WS proxy.
Appreciate your quick response.
thanks a lot
jyothi

Can config wallet on cloud DB for security web service invoke ?

Currently, I can invoke the security web service by APEX at my local DB env.
based the apex_web_service API
http://docs.oracle.com/cd/E37546_01/doc/doc.41/e28475/apex_web_service.htm#AEAPI537
we need wallet to store the cert files.
want to confirm that
--> Can we config wallet to import cert files on cloud DB?
Thanks
Edited by: 985754 on Feb 6, 2013 2:17 AM

Hello 985754,
Unfortunately, you cannot import your own certificates into the wallet used by Application Express in the Database Cloud Service. However, this wallet already contains many common CA certificates. Unless the web service you are consuming uses a self-signed certificate, chances are you will be able to use this functionality in the Cloud.
-- Vlad

Unable to invoke a secured web service

Hi all
I have been trying to call a secured web service which enforces wss11_saml_token_with_message_protection_client_policy policy. To create a web proxy in JDev, I am using the following wiki - http://aseng-wiki.us.oracle.com/asengwiki/display/ASDevOWSM/How+can+I+create+a+JSE+client+to+invoke+ADF+BC+Web+Service+with+OWSM+wss11_saml_token_with_message_protection_service_policy (scroll down to find "Creating JSE client for above Web service")
I have got the default-keystore.jks, cwallet.sso and jps-config.xml from the webservice env. I am getting this error now -
SEVERE: WSM-00055 The keystore located at xyzabc\default-keystore.jks cannot be loaded due to java.io.IOException: Keystore was tampered with, or password was incorrect. Ensure that valid keystore type and password are configured.
Any pointers would be appreciated.
Thanks,
Pushkal

One more update i tried printing l_http_response.status_code and got 302.
Thanks,
PKV

How to invoke a web service using https

Hi,
I have a few security related questions surrounding BPEL process manager.
1. Does the BPEL engine have the capability to invoke a web service using https (HTTP over SSL)? Does it automatically do that if partner link URI starts with https:// ?
2. If not, what needs to be done to enable accessing a https based web service?
3. I need to write a web service that accepts a message and updates certain information in the database. The web service will be deployed in an OC4J instance in Oracle App Server. We want to allow the web service to be accessed from BPEL only by users registered in the database. What is the recommended way to pass username and password to a webservice if service is invoked from BPEL process manager? Note that specifying username/password in bpel.xml is not an option.
Thanks,
Pranav

1. Does the BPEL engine have the capability to invoke a web service using https (HTTP over SSL)? Does it automatically do that if partner link URI starts with https:// ?
We currently don't have support for HTTP over SSl. We are working on it to include this functionality in near future.
2. If not, what needs to be done to enable accessing a https based web service?
I am not sure it is possible with current product offering. I will confirm it after discussing with our concerned development group. There is some work going to integrate with Oblix security mechanism [recently acquired by Oracle].
3. I need to write a web service that accepts a message and updates certain information in the database. The web service will be deployed in an OC4J instance in Oracle App Server. We want to allow the web service to be accessed from BPEL only by users registered in the database. What is the recommended way to pass username and password to a webservice if service is invoked from BPEL process manager? Note that specifying username/password in bpel.xml is not an option.
This will be easier to do if we can use Oblix along with BPEL PM. Could you please let us know more about your application so that we can provide you the customized solution till it's part of the product. You can send this query to [email protected] so that our product management team can give you more detailed roadmap regarding this.
HTH.
Thanks,
Rakesh

Problem invoking a web service from soa11g BPEL.

Hi ,
I am trying to invoke a web service from soa bpel 11g composite.
We have the wsdl, wsdl URL of the web service along with the user name , password credentials.
Initially w/o any WS policy attached and testing the composite, it fails with the below message
*<fault>*
*<bpelFault>*
*<faultType>0</faultType>*
*<remoteFault>*
*<part name="summary">*
*<summary>An Authentication object was not found in the SecurityContext</summary>*
*</part>*
*<part name="detail">*
*<detail>javax.xml.ws.soap.SOAPFaultException: An Authentication object was not found in the SecurityContext</detail>*
*</part>*
*<part name="code">*
*<code>soap:Server</code>*
*</part>*
*</remoteFault>*
*</bpelFault>*
*</fault>*
*<faultType>*
*<message>0</message>*
*</faultType>*
*</messages>*
So I have gone back to the composite and added the WS policy (oracle/wss_username_token_client_policy) by Right clicking on web service -> Configure WS Policy -> Security -> oracle/wss_username_token_client_policy -> OK.
After this I have added the following binding properties 'oracle.webservices.auth.username' , 'oracle.webservices.auth.password' with the respective values and deployed it again.
Even then I face the same issue. I have looked into the EM console and found the HTTP username and password properties were blank for this Web service even though the WS policy was attached.
Later I have tried editing the username pwd from the EM console, only to find out that the composite was now failing in the previous step (an ordinary db adapter with a select statement) even before it reaches the web service invocation.
If I redeploy the composite, the http username and pwd properties in the EM console are erased and when i test it, it errors out at the web service invocation with the same issue again.
Any pointers on how to solve this issue ??
How can I figure out what is the security policy the web service is using ??
Regards,
Shiva Kiran

Hi,
Can anyone help me with this ??
I guess I am not able to send the authorization credentials via the request to the web service invocation.
Plz help ! This is a bit urgent..
Regards,
Shiva Kiran

Invoking secured web-service deployed in OC4j

Similar Messages

Maybe you are looking for