Iplanet  web server 7 -how to get more information when a certificate is untrusted ?

Hi
When a client tries to access to iplanet 7.0.15, we only get a line in the errors log with a simple error., for instance SSL_ERROR_UNKOWN_CA_ALERT...
We would like to know if it is possible to configure iplanet to get more information about this request..
iPLANET is receiving requests from a lot of clients and sometime it is difficult to identify the source of a error without more information..
We would like have similar information that access log shows when certificate is valid
We get the same information with log-level = info or finest..
Thanks
Uge

Hi Uge,
Setting the iPlanet Web Server log level to 'finest' will give you more information, but it is very verbose, and you still might not get the information you are looking for. You might want to try 'fine' or 'finer' first to see if either of those gives you the information you  need.
With regards to the above error, SSL_ERROR_UNKOWN_CA_ALERT, this means that the client presented a certificate in the SSL handshake that was signed by a CA that the Web Server doesn't have in it's certificate database. In order to ensure the Web Server is kept upto date with the latest set of public CA certificates, I would recommend you upgrade to the latest version.
If you know that the certificates the clients are using are from an internal CA, you need to ensure the Root CA Certificate from that internal CA is installed in the Web Servers certificate database as a trusted certificate.
regards
Tracey

Similar Messages

  • XSchema: How to get (more) Information about validation errors?

    I changed the file car.xml to have an invalid xml-file, then
    i validate the demo car.xml using the demo programm xsdtest.
    I got the following error message:
    In line 7 of car.xml:
    LSX-00290: invalid enumeration choice "Hugo"
    LSX-00213: only 0 occurrences of particle "sequence", minimum is 1
    Validation failed, error 213
    The first 2 lines are dumped from the SchemaProzessor. Unfortunatly there is no
    possibility to get this information with a methodcall or by return value
    to use for further processing!
    The only thing i got controlled back is the error code 213.
    But how do i get the correspondening errortext ? What means error 213 ?
    So here is my suggestion:
    Please give accurate information about validation errors! Including:
    1) The position where the error occurred. (maybe in XPath notation)
    2) An error Number to classify the error (Including a possibility to resolve the errormessage via program.)
    3) An error text for the specific case : (for example : invalid enumeration choice "Hugo")
    Please give this information in a struct back or provide methods on the
    Xschema prozessor.
    Otherwise the XSchema support is useless!!!!!
    Sorry for my bad English & Greetings
    Martin Frenzel
    By the way: The XDK for Java uses a different Error Messages !!!! But there is the same problem...

    1.How to check when user last time login to database.AUDIT
    2.If user account is lock why it is locked? if it is locked by trying to loing with wrong password how to check how many times he attempted with wrong password...and other reasons alsoCheck Profile For this user and attr.
    3.Wheni was trying to select user expire date it is showing empty value...can we check expire date through querys or we need to check profile?
    SQL> select EXPIRY_DATE from dba_users ;
    EXPIRY_DA
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    23-MAY-13
    24-SEP-11
    24-SEP-11
    24-SEP-11 check
    expiry_date in dba_users is null
    4.How to check when he was reset his password last time.SELECT PTIME FROM SYS.USER$;

  • How to get more information regarding a service call

    So are all of your services working now?

    Here are the gory details. This is how I described the problem when I called for service: 'I am a u-verse customer. I have TV, internet and phone. There was an outage of all services for 15 hours. Voice and TV returned. But not my broadband internet connection.'  Tech arrived. Used his i-pad and says internet is 'working'. I tell him my computer, tablet, etc etc will not connect. He says he is writing down that internet works. My devices not his concern he says. Well OK I say forget my devices but I want ALL the TV channels that are part of my u-verse package to work before you leave. He says 'but TV is working'. I say no, this is not true unless ALL the channels I pay for are working, --please check this channel (interactive Country Deep--530 in my channel lineup). He says oh that channel is probably not part of your package. Excuse me I say. I pay over $200 a month for my services and U300 is my package and it most certainly includes the Country Deep channel which is not working (it is spinning, spinning) and which I do watch. I know from the user perspective that there is a difference between the Country Deep channel which loads data before it plays and the 'normal' channels. He looks at me like I have two heads. However I felt quite certain that if he took care of the problem with that interactive channel then I would be able to get all my devices to work. He threatened to depart because I was not listening to him. However he was not listening to me either. He would not 'own' that there was any u-verse problem. Since this did not make sense to me and I had already invested at least eight hours of my life attempting to get help I was frustrated and I will certainly confess to not 'listening' to him very well. Unfortunately I then had to leave and go to work. He left no information about what was done and no information with the person I left in charge but it took over 4 hours and apparently a number phone calls to other people. And I do know he swapped out my DVR because I lost all recordings but that is all I know. I tried to look online at the workorder but no further information was available.

  • How to get more information about users in oracle 11g

    Hi All,
    I need to know more infor about users in oracle 11g.
    1.How to check when user last time login to database.
    2.If user account is lock why it is locked? if it is locked by trying to loing with wrong password how to check how many times he attempted with wrong password...and other reasons also
    3.Wheni was trying to select user expire date it is showing empty value...can we check expire date through querys or we need to check profile?
    4.How to check when he was reset his password last time.
    Please correct me if am wrong. thanks
    Regards

    1.How to check when user last time login to database.AUDIT
    2.If user account is lock why it is locked? if it is locked by trying to loing with wrong password how to check how many times he attempted with wrong password...and other reasons alsoCheck Profile For this user and attr.
    3.Wheni was trying to select user expire date it is showing empty value...can we check expire date through querys or we need to check profile?
    SQL> select EXPIRY_DATE from dba_users ;
    EXPIRY_DA
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    24-SEP-11
    23-MAY-13
    24-SEP-11
    24-SEP-11
    24-SEP-11 check
    expiry_date in dba_users is null
    4.How to check when he was reset his password last time.SELECT PTIME FROM SYS.USER$;

  • How to get DDIC information when building your fieldcatalog manually

    Hi guys!
    I try to build ma alv fieldcatalog manually. For each field i want to set a DDIC Dataelement.
    I tried this way.
    Data:
    lt_fcat type lvs_t_fcat,
    ls_fcat type lvs_s_fcat,
    ls_fcat-ref_field = 'ZZ_MY_DATAELEMENT'
    *... and some other information
    append ls_fcat to lt_fcat
    ...but it's not working the the column text is provided by the data_element.
    I know about the lvc_fieldcatalog_merge function, but i need to find a way to do this manually!
    thanks for your help

    hI
    There are field for the short, medium an long text too, are't there?
    SCRTEXT_L
    SCRTEXT_M
    SCRTEXT_S
    Max

  • Can iDSIE (Meta-directory) be used as a single authentication point from iPlanet Web Server for multiple databases using direct "or" indirect connectors?

    Basically, the latest release of iPlanet Web Server forces the user/group information source to be an LDAP database. Currently, the user accounts are in Active Directory, NT, Oracle and NetWare Directory Service in this heterogeneous environment.
    What I am looking for is a meta-directory product which can do two things:
    1-Single authentiation point for users in mulitple databases from iPlanet Web Server.
    2-Single administration point for all of the databases listed above.
    For example, can I add/modify/delete a user account at the meta-directory level and have this propagate to all of the databases listed above reducing the administration to one meta-directory product?

    With an Virtual Directory solution, you can authenticate Iplanet Web Server against nearly anything including any LDAPv3 Directory Server, Microsoft Active Directory, Windows NT Domains, Oracle RDBMS, IBM DB2 RDBMS, Microsoft SQL, and others.
    All of this is done dynamically and doesn't require any heavyweight synchronization process. The Virtual Directory acts as a dynamic schema / DIT / data translation engine for different types of repositories.
    OctetString's Virtual Directory Engine is one such example. You can download a 30 day evaluation copy at:
    http://www.octetstring.com
    It will take you all of 30 minutes to get iPlanet Web Server authenticated against and using groups from things like Oracle RDBMS, Windows NT Domains, or Active Directory.

  • Hi, I am using HP11 and iPlanet web server. When trying to upload files over HTTP using FORM ENCTYPE="multipart/form-data" that are bigger than a few Kilobytes i get a 408 error. (client timeout).

    Hi, I am using HP11 and iPlanet web server. When trying to upload files over HTTP using FORM ENCTYPE="multipart/form-data" that are bigger than a few Kilobytes i get a 408 error. (client timeout). It is as if the server has decided that the client has timed out during the file upload. The default setting is 30 seconds for AcceptTimeout in the magnus.conf file. This should be ample to get the file across, even increasing this to 2 minutes just produces the same error after 2 minutes. Any help appreciated. Apologies if this is not the correct forum for this, I couldn't see one for iPlanet and Web, many thanks, Kieran.

    Hi,
    You didnt mention which version of IWS. follow these steps.
    (1)Goto Web Server Administration Server, select the server you want to manage.
    (2)Select Preference >> Perfomance Tuning.
    (3)set HTTP Persistent Connection Timeout to your choice (eg 180 sec for three minutes)
    (4) Apply changes and restart the server.
    *Setting the timeout to a lower value, however, may    prevent the transfer of large files as timeout does not refer to the time that the connection has been idle. For example, if you are using a 2400 baud modem, and the request timeout is set to 180 seconds, then the maximum file size that can be transferred before   the connection is closed is 432000 bits (2400 multiplied by 180)
    Regards
    T.Raghulan
    [email protected]

  • How to install iPlanet Administrative Server while installing iPlanet Web Server Ver 6.0 Service Pack 3 in SUN Ultra 10,Solaris 5.8

    We are the partner of Sun Developer Connection Program.
    Company: ITI Ltd.
    Member no: 1024878
    We tried to install iPlanet Web Server ver 6.0
    Service Pack 3, in Sun Ultra10 Solaris 5.8 machine.
    During the time of installation it is giving Error:
    Failure installing iPlanet Administration Server
    Do you want to continue? if Yes
    it starts poceeding with the installation and again gives an Error:
    Failure installing Core Java Classes.
    Do you want to continue? if Yes
    It completes the installation.
    But startconsole cannot be executed.
    Please send the solution.

    May I ask where did you get the bits for iWS 6.0 SP3? The latest version currently available for download is iWS 6.0 SP2.
    http://wwws.sun.com/software/download/download/
    Thanks

  • How to find out version of patch for iPlanet Web Server 6.1 on Win2000

    I have a iPlanet Web Server 6.1 SP1 running on Windows 2000. Can I find out what patches has been installed for my iPlanet Web Server?
    Thanks in advance for any information.

    n/m, read version, not patches.
    Edited by: David.Eriksson on Jun 30, 2008 8:12 AM

  • Failed to get GenericServlet - iPlanet Web Server 4.1?

    I'm trying to get jsps and custom tags to work under iPlanet Web Server 4.1. The jsps are served fine, but when adding custom tags (or trying to get the example test-tags to work) the only error I get is the "Failed to get GenericServlet".
    What gives?

    I think that I have seen that message sometimes when the JSP cannot be compiled. First of all, make sure you have looked at the messages prior to the GenericServlet one to see if there is anything else related. One possibility, which I have encountered, is that the class that supports the custom tag can't be compiled.

  • Getting Defunct processes while using Oracle iPlanet Web Server 7.0.9 in Solaris 10

    Hi,
    I have installed Oracle iPlanet Web Server 7.0.9 in our Solaris 10. \
    Successfully Configured iPlanet web server using the manual and the application scripts are working fine with this iPlanet webserver.
    Even if the application is working fine, the iPlanet webserver stop responding at a period of time and needs to be restart manually...
    Found that lots of defunct processes(PPID of webservd) are created and these defuncts (zombies) leads to stop the services.
    I am not good in iPlanet webserver configuration settings on the Solaris 10 OS.
    Could anyone help me to fix this issue ?
    Thanks,
    Antony.

    Here is the truss output (last few lines before the application hungs...
    /14:    2516.1065        0.0000 time()                                          = 1428330724
    /49:    2516.1382        0.0001 pollsys(0xFFFFFFFF71E3FB40, 1, 0xFFFFFFFF71E3FA80, 0x00000000) = 0
    /49:    2516.1386        0.0000 lwp_sigmask(SIG_SETMASK, 0xFFBFFEFF, 0x0000FFF7) = 0xFFBFFEFF [0x0000FFFF]
    /49:    2516.1389        0.0000 lwp_kill(66, SIG#0)                             Err#3 ESRCH
    /49:    2516.1412        0.0022 munmap(0xFFFFFFFF70D00000, 262144)              = 0
    /49:    2516.1413        0.0000 lwp_exit()
    /39:    2516.1553        0.0000 pollsys(0xFFFFFFFF7283FB40, 1, 0xFFFFFFFF7283FA80, 0x00000000) = 0
    /39:    2516.1557        0.0000 lwp_sigmask(SIG_SETMASK, 0xFFBFFEFF, 0x0000FFF7) = 0xFFBFFEFF [0x0000FFFF]
    /39:    2516.1559        0.0000 lwp_kill(75, SIG#0)                             Err#3 ESRCH
    /39:    2516.1561        0.0001 munmap(0xFFFFFFFF70400000, 262144)              = 0
    /39:    2516.1562        0.0000 lwp_exit()
    /25:    2516.1614        0.0000 lwp_park(0xFFFFFFFF73CFBA90, 0)                 Err#62 ETIME
    /16:    2516.1671        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /35:    2516.2558        0.0000 lwp_park(0xFFFFFFFF72EFBA90, 0)                 Err#62 ETIME
    /16:    2516.2673        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /16:    2516.3675        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /36:    2516.4317        0.0000 lwp_park(0xFFFFFFFF72CFBE60, 0)                 Err#62 ETIME
    /15:    2516.4505        0.0000 lwp_park(0xFFFFFFFF7613F9D0, 0)                 Err#62 ETIME
    /16:    2516.4677        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /16:    2516.5679        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /27:    2516.6533        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF7383FD20, 0x00000000) = 0
    /16:    2516.6681        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /1:     2516.7105        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF7FFFA6A0, 0x00000000) = 0
    /16:    2516.7684        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /34:    2516.8137        0.0000 lwp_park(0xFFFFFFFF730FBA70, 0)                 Err#62 ETIME
    /16:    2516.8685        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /16:    2516.9686        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /16:    2517.0688        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /14:    2517.1057        0.0001 pollsys(0x00000000, 0, 0xFFFFFFFF744FBDA0, 0x00000000) = 0
    /14:    2517.1061        0.0000 time()                                          = 1428330725
    /25:    2517.1618        0.0000 lwp_park(0xFFFFFFFF73CFBA90, 0)                 Err#62 ETIME
    /16:    2517.1691        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /35:    2517.2561        0.0000 lwp_park(0xFFFFFFFF72EFBA90, 0)                 Err#62 ETIME
    /16:    2517.2693        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /16:    2517.3695        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /36:    lwp_park(0xFFFFFFFF72CFBE60, 0) (sleeping...)
    /15:    lwp_park(0xFFFFFFFF7613F9D0, 0) (sleeping...)
    /16:    2517.4696        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /54:    2517.5362        0.0000 pollsys(0xFFFFFFFF7193FB40, 1, 0xFFFFFFFF7193FA80, 0x00000000) = 0
    /54:    2517.5364        0.0000 lwp_sigmask(SIG_SETMASK, 0xFFBFFEFF, 0x0000FFF7) = 0xFFBFFEFF [0x0000FFFF]
    /54:    2517.5367        0.0000 lwp_kill(53, SIG#0)                             Err#3 ESRCH
    /54:    2517.5368        0.0001 munmap(0xFFFFFFFF71A00000, 262144)              = 0
    /54:    2517.5369        0.0000 lwp_exit()
    /16:    2517.5697        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /27:    pollsys(0x00000000, 0, 0xFFFFFFFF7383FD20, 0x00000000) (sleeping...)
    /16:    2517.6699        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /1:     2517.7106        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF7FFFA6A0, 0x00000000) = 0
    /1:     2517.7111        0.0001 close(26)                                       = 0
    /1:     2517.7113        0.0000 write(24, " 8", 1)                              = 1
    /1:     2517.7115        0.0000 close(23)                                       = 0
    /1:     2517.7116        0.0000 close(24)                                       = 0
    /1:     2517.7118        0.0000 lwp_unpark(25)                                  = 0
    /25:    2517.7118        0.0000 lwp_park(0xFFFFFFFF73CFBA90, 0)                 = 0
    /1:     2517.7120        0.0000 lwp_unpark(35)                                  = 0
    /35:    2517.7120        0.0000 lwp_park(0xFFFFFFFF72EFBA90, 0)                 = 0
    /25:    2517.7121        0.0000 lwp_sigmask(SIG_SETMASK, 0xFFBFFEFF, 0x0000FFF7) = 0xFFBFFEFF [0x0000FFFF]
    /25:    2517.7122        0.0000 lwp_kill(61, SIG#0)                             Err#3 ESRCH
    /35:    2517.7123        0.0000 lwp_sigmask(SIG_SETMASK, 0xFFBFFEFF, 0x0000FFF7) = 0xFFBFFEFF [0x0000FFFF]
    /25:    2517.7124        0.0001 munmap(0xFFFFFFFF71200000, 262144)              = 0
    /25:    2517.7125        0.0000 lwp_exit()
    /1:     2517.7126        0.0000 lwp_wait(25, 0xFFFFFFFF7FFFA47C)                = 0
    /35:    2517.7127        0.0000 lwp_kill(52, SIG#0)                             Err#3 ESRCH
    /35:    2517.7128        0.0001 munmap(0xFFFFFFFF71B00000, 262144)              = 0
    /35:    2517.7129        0.0000 lwp_unpark(1)                                   = 0
    /1:     2517.7129        0.0000 lwp_park(0x00000000, 0)                         = 0
    /35:    2517.7130        0.0000 lwp_exit()
    /1:     2517.7132        0.0000 lwp_wait(35, 0xFFFFFFFF7FFFA47C)                = 0
    /1:     2517.7134        0.0000 close(13)                                       = 0
    /16:    2517.7700        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /34:    2517.8141        0.0000 lwp_park(0xFFFFFFFF730FBA70, 0)                 Err#62 ETIME
    /16:    2517.8702        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /16:    2517.9704        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /22:    2517.9743        0.0001 pollsys(0xFFFFFFFF73F3FA98, 1, 0xFFFFFFFF73F3F9D0, 0x00000000) = 0
    /16:    2518.0706        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF742FBDD0, 0x00000000) = 0
    /14:    2518.1063        0.0000 pollsys(0x00000000, 0, 0xFFFFFFFF744FBDA0, 0x00000000) = 0
    /14:    2518.1073        0.0000 time()                                          = 1428330726
    /1:     2518.1082        0.0000 lseek(1, 0, SEEK_CUR)                           = 0
    /1:     2518.1083        0.0000 lseek(2, 0, SEEK_CUR)                           = 4128
    /1:     2518.1085        0.0000 lseek(2, 0, SEEK_CUR)                           = 4128
    /1:     2518.1093        0.0000 lseek(1, 0, SEEK_CUR)                           = 0
    /1:     2518.1094        0.0000 lseek(2, 0, SEEK_CUR)                           = 4128
    /1:     2518.1095        0.0000 lseek(2, 0, SEEK_CUR)                           = 4128
    /1:     2518.1102        0.0000 _exit(0)

  • I have perl scripts that I want to be able to run with my iplanet web server 6.0. How can I make it work in Windows NT? (Because I have no problem when I use it with Linux).

     

    Hi Melanie,
    In order to run a PERL script under Windows NT the iPlanet Web Server needs to know where to find the PERL interpreter.
    follow these steps :
    1) Make sure Windows NT knows what a .pl file is. In file Manager click on file and choose associate from the menu. Check the "files with extension" drop-down list for pl - if it exists verify that it is pathed to your perl.exe. If it is not already on the list click the "New Type" button. In the Filetype box put pl. Choose open from the Action drop-down list. In the Command box specify the full path to your perl.exe interpreter (Make sure to use short filenames, rather than long filenames.) Click the OK button. Then click the Close button in the main Associate dialog box. Double click a .pl file to test - it should automatically launch the PERL interpreter and feed it your .pl file.
    2) Create a directory to contain your .pl scripts.
    ~server_root\shell-cgi is a good choice.
    or \cgi-bin\
    NOTE: Make very sure that this directory is NOT part of the document root, it should have it's own directory (preferably at the same level of the docroot).
    3) In the Admin Server select Programs.
    4) Choose CGI directory (normally) or WinCGI directory or ShellCGI Directory depending on ur choice from the Programs menu.
    5) Put the URL Prefix you would like to map to your Shell-CGI directory into the URL Prefix field.
    6) Put the full path to your Shell-CGI directory in the Shell CGI directory field.
    7) Click OK.
    8) The save and apply changes page will display your changes and give you the opportunity to verify them. If they are correct click the Save and Apply button. If not Click the Undo button and go back to step 4.
    (9)You can then call your .pl scripts directly by referencing the directory mapping that you have just created. For example:
    http://my.server.whatever/shell-cgi/ myscript.pl
    this should work now.
    If not Pls Mail me.
    regards
    T.Raghulan
    [email protected]

  • How to find what version of Iplanet Web Server is running on System

    Hi,
    I am trying to find a command which i can run to find out what version of Iplanet Web Server am i running on my Solaris System.
    Example: if i ran command it should return something like: Iplanet Enterprise Web Server 4.1 SP8
    WIll appreciate any feedback
    Thanks

    You can go to server_root/bin/https/bin and run "./ns-httpd -v" command:
    # ./ns-httpd -v
    Sun Netscape Alliance
    iPlanet-WebServer-Enterprise/4.1SP8
    For the current 6.x versions, you can use the start script of the instance like follows:
    # ./start -version
    Sun Microsystems, Inc.
    Sun ONE Web Server 6.1SP1 B12/19/2003 22:19
    Please note that 4.1 version is no longer supported. You
    should plan to upgrade to a supported version like 6.1.
    Thanks
    Manish

  • Error shows up in default trace, but nowhere else; how to get more info ?

    Our default (java) traces get filled up quickly with the following messages :
       error 2010-06-29 11:10:13:851 Error during parsing body item ^mt_Order using class com.sap.aii.af.sdk.xi.mo.DefaultItem at ^Klantnaam/ caused by --- java.lang.NullPointerException com.sap.aii.af.sdk.xi.mo.Message.reparseRootDocument()
        error 2010-06-29 11:10:13:850 Caught an Exception: java.lang.NullPointerException org.xml.sax.SAXParseException: The entity name must immediately follow the '&' in the entity reference. com.sap.aii.af.sdk.xi.util.StreamXMLScannerImpl.next()
        error 2010-06-29 11:10:13:850 Excetption java.lang.NullPointerException at state 1 with current values  Klantnaam  com.sap.aii.af.sdk.xi.util.StreamXMLScannerImpl.updateState()
        error 2010-06-29 11:10:13:849 Caught an Exception in EP: org.xml.sax.SAXParseException: The entity name must immediately follow the '&' in the entity reference. com.sap.aii.af.sdk.xi.util.StreamXMLScannerImpl.run()
        error 2010-06-29 11:10:13:761 Error during parsing the SOAP part --- java.lang.NullPointerException
    based on the phrase "Klantnaam" and "mt_Order" I could find the likely culprit interface. this is a plain and
    simple SOAP-to-IDOC scenario.
    these messages never show up in RWB, so they must fail before RWB even is involved.
    I suspect that someone is sending us malformed soap (or http?) requests, and the soap message cannot be constructed from the message payload.
    sometimes (but not nearly as often as the log messages appear) I see a message in RWB with this text as "message : SOAP document" :
    authorization:Basic UElJU1VTRVI6cDBzdGIwZGU= accept-encoding:gzip sap-xi-messageid:8499D4D0835F11DFB78D0019994ADA63 content-length:7963 host:<deleted by poster> user-agent:SAP NetWeaver Application Server (1.0;711) content-type:multipart/related;boundary=SAP_0019994ADB6F02EE8FD38DB64E22D23D_END;type="text/xml";start="" soapaction:"http://sap.com/xi/XI/Message/30" ApplicationMessagesynchronous8499d4d0-835f-11df-b78d-0019994ada632010-06-29T09:20:11ZP_ismP21_100CRMXIF_ORDER_SAVEBestEffortSJMaf.p20.dbp20-seXIRA8499d4d0-835f-11df-b78d-0019994ada63is.20.cip20XI8499d4d0-835f-11df-b78d-0019994ada633.0af.p20.dbp20-seXIRA8499d4d0-835f-11df-b78d-0019994ada635fdc3fd7e5f335e3806fc35a13d2c233WarningOffMainDocumentMain XML documentApplication
    seems like a HTTP header to me, but not quite sure...
    my question : what can I do to get more information, especially about the content of the messages causing this behaviour ?
    I tried enabling more logging for the components menstioned in the above entries, but to no avail. 
    traces in SMICM and SICF also were not helpful.
    I hope to avoid to need to trace the actual network for the messages...
    any help much appreciated !
    Regards,
    Ronald
    Edited by: Ronald on Jun 29, 2010 11:24 AM Added RWB info

    Thanks for your reply.
    I am glad you support my diagnosis.
    however, since it is an unknown party calling the web service,
    my main question is how I can get more information on that source message.
    is there any trace which dumps that message content before it is being passed to and parsed by the soap adapter ??
    I have no clue who is sending this request, so I cannot ask them to investigate.
    Edited by: BW teamlid on Jun 29, 2010 4:00 PM rephrase

  • Iplanet web server 6.0 ACL question

    Hi,
    I am using ACLs to protect some of my URLs in iplanet web server 6.0.
    I am getting one problem. Its not a problem actually but would like to know how to avoid authenticating the users 2 times.
    In my ACL file, when ever I create an entry for a path, I am getting the following by default.
    authenticate (user,group) {
    database = "default";
    method = "basic";
    My entry is like this with the above lines.
    acl "path=/www/develop/itsecurity/admin";
    authenticate (user,group) {
    database = "default";
    method = "basic";
    allow absolute (all)
    (user = "modadmin");
    allow absolute (all)
    (user = "itsecadm");
    deny (all)
    (user = "anyone");
    Now if the entry is like this with
    authenticate (user,group) {
    database = "default";
    method = "basic";
    after the first line, then whenever that particulaar user "itsecadm" tries to access the URL, he gets userid and password dialogue box. After entring into the page, if he tries to access or click any other link, it is asking the userid and password again.If he gives this second time, next time onwards it is not asking userid and password.
    But When I remove the lines
    authenticate (user,group) {
    database = "default";
    method = "basic";
    from the file for that particular entry, it is not asking 2nd time userid/password.
    Could you please tel me why this happening. Why this entry is created whenever I am adding a new one into ACL file?
    Is any one facing the similar problem with iplanet web server 6.0 ACL files?
    Thanks & Regards
    Murthy

    Hi,
    Thank you for your suggestion. I have tried with your option also. Still I am getting the second time userid/password dialogue box.
    Is there any other solution to avoid the second time user authentication dialogue box?
    Do you want to see the ACL file?
    Thanks & Regards,
    Murthy

Maybe you are looking for

  • Duplicate Vendor Ref. No.

    Dear Experts, Is there a way restrict the "Vendor Ref. No." field on the A/P Invoice screen so that the same invoice number from a vendor is not duplicated? In other words, we want to keep from paying a duplicate invoice. Any suggestiions? Also,  if

  • Af:commandMenuItem action only works first time

    I am using the af:panelPage, and have added a menu1 facet that contains an af:menuTabs component with 3 af:commandMenuItems. I'd like the selection of each tab to invoke a bean 'action', where I'll set some flags that control the rendering of differe

  • How to clear session in JSP?

    I searched yahoo, and found that it seemed not easy to force invalid the session using jsp, compared to php just three lines: session_start(); session_unset(); session_destroy(); How to acheive this using JSP? Must I follow these (quite complex) step

  • Cant view windows 7 shard folder on mac 10.6.7

    I have a network in my home . i use time capsule 1TB and route my internet. now the problem is i use to share all my PC drive in home network with mac but after i install 10.6.7 i cant find my pc shard folder on mac. but still i can W/R mac shard fil

  • Exchange 2010 SP3 install question

    Greetings!  I am planning on installing the SP3 update for Exchange 2010 in preparation for a Hybrid deployment with O365.  After installing the SP3 update to all Exchange servers in our environment, I was going to then install the RU8 on the servers