Livecycle hosted service provider

It appears that livecycle policy server is out of reach (financially) for small design firms. Unless I'm missing something.
Is it feasible to setup a multi-user hosted service provider? If a small firm needed to use the service they could subscribe to the service provider with an on-line console for setting document policy on a single document. A limited use facility.
Presumming there are thousands of independent designers who would love to be able to control security on their artwork.
Cheers....MB

In fact, we do have a hosted version.
You can access a hosted version of LiveCycle Policy server at:
https://createpdf.adobe.com/
At this point this service is a beta stage and is available only to subscribers of the Create Adobe PDF Online service.
Please see:
https://policy.adobe.com/spdf/faq.do
for more details
-Bill

Similar Messages

Installing APEX on a website hosted by an external hosting service provider

I have an external hosting service provider who provide hosting service based on LAMP stack. Has anyone on this forum installed APEX on the servers of these hosting service providers..
Would appreciate inputs.
Thanks

Hi,
APEX requires an Oracle DB to install into (and run), so you can't use MySQL or any other database.
However, the good news is that there are already hosting providers who provide APEX Hosting, there is a list of some of them available here -
http://wiki.shellprompt.net/bin/view/Apex/HostingExamples
I run one of those Hosting companies (Shellprompt), so feel free to contact me directly if you need any more information ([email protected]).
Hope this helps,
John.

Best web hosting services compatible with iWeb

Hi all! I just started using iWeb a month ago after Apple's keynote, and renewed my .Mac account. However, I am very dissapointed that Apple only provides 1GB of storage and 10GB of bandwidth versus the 5GB+ & 200GB+ yahoo and other hosting services provide.
If Apple does not provide larger bandwidth and storage for their users, I am thinking about changing next year with a different company. The only downside is having to start all over again with other publishing software like Macromedia Dreamweaver etc.
I want to know if there is anyone out there with success publishing their sites with iWeb on to different hosting companies other than .Mac. I am talking seamless uploads with the click of a button from iWeb (like the current .Mac service). Has anyone had great experiences? Please post your thoughts. Thanks!
MACPOWER

If Apple does not provide larger bandwidth and
storage for their users,
You can buy more you know.
I want to know if there is anyone out there with
success publishing their sites with iWeb on to
different hosting companies other than .Mac. I am
talking seamless uploads with the click of a button
from iWeb (like the current .Mac service).
Only .Mac can be done with the click of an iWeb button. Any other normal server requires a separate ftp program (.Mac does not use ftp but a different protocol called webdav).
Publishing via ftp is not a problem. Some tips for using other servers can be found here:
http://homepage.mac.com/thgewecke/iwebserver.html

How to resolve a host name from IP using JNDI/DNS service provider

Hi
I got two questions on JNDI/DNS service provider:
1) How to resolve a host name when i got an IP
I understand How I do it inverse.
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.dns.DnsContextFactory");
env.put(Context.PROVIDER_URL, "dns://"+server+"/"+domain);
DirContext ictx = new InitialDirContext(env);
Attributes attrs1 = ictx.getAttributes(host, new String[] {"A"});
2) This example above works when I specify the domain in the provider url.
If I am not specifing a domain but only the dns server I got an NameNotFoundException.
What should I do if I don't got the domain?
get the availible domains and loop on them?

Hi,
if your DNS server supports that, you can do a reverse DNS lookup. This works as follows:
String server = "your.dns.server";
String domain = "in-addr.arpa";
String ip = "4.3.2.1";
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.dns.DnsContextFactory");
env.put(Context.PROVIDER_URL, "dns://" + server + "/" + domain);
DirContext ictx = new InitialDirContext(env);
Attributes attrs1 = ictx.getAttributes(ip, new String[] {"PTR"});1: Use the pseudo-domain in-addr.arpa
2: Use the reverse IP address for lookup, i.e. if your host has 1.2.3.4, use 4.3.2.1!!
3: Request the PTR attribute
see also [http://en.wikipedia.org/wiki/Reverse_DNS_lookup|http://en.wikipedia.org/wiki/Reverse_DNS_lookup]
Martin

Shared hosting, Coldfusion 8 & Livecycle Data Services ES

I want to develop a CF/Flex/Air online/offline application that uses Livecylcle Data Services (LCDS) to synchronize client (SQLlite) and server (MySQL) databases. I'm a coldfusion developer (MX6) and have done some Flash work (AS2). I'm going to learn Flex, Air and AS3.
I can only use shared hosting. I'm confused about the licensing of LCDS and if there is shared hosting that provides it. I Googled for Coldfusion/Flex/LCDS web hosting and the only one I found was way too expensive, e.g.$250/month.
But I just read that LCDS is included with Coldfusion 8. So does that mean web hosting with CF 8 (Enterprise) automatically includes LCDS?

It really depends on the hosting provider. The ColdFusion 8 install (Standard & Enterprise) have the ability to install a LCDS "trial" which after 30 days will revert to LCDS ES which is free, as long as the server that it's installed on has no more than 1 processor (up to 2 cores though I believe).
To more specifically answer your question, it really depends on whether the individual hosting provider has installed and offers this option to their clients. The use of LCDS with Flex required configuration of a data-management-config.xml file and certain ports may need to be opened up for rtmp vs. polling transfer methods. I'm not sure exactly how this would work given a shared hosting environment and if you could sandbox the configurations per client.
The sure way to get this setup (and the method I've used for the past few years) is to get yourself a dedicated box (which can be had for less than 100 dollars, especially given the processor limitation on the LCDS licensing) and get yourself a license for CF8 while they're still available. CF9 will still support LCDS integration, but the install isn't seamless like it is with CF8. During the install process for CF8 you can choose to install LCDS and after a bit of configuration you're all set.

Need help with a currently "in-use" form we want to switch to Adobes hosting service

Hi, I am in desperate need of help with some issues concerning several forms which we currently use a paid third party (not Adobe) to host and "re-distribute through email"...Somehow I got charged $14.95 for YOUR service, (signed up for a trial, but never used it)..and now I am paying for a year of use of the similar service which Adobe is in control of. I might want to port my form distribution through Adobe in the hopes of reducing the errors, problems and hassles my customers are experiencing when some of them push our "submit button". (and I guess I am familiar with these somewhat from reading what IS available in here, and I also know that, Adobe is working to alleviate some of these " submit" issues, so let's don't start by going backwards, here) I need solutions now for my issues or I can leave it as is, If Adobe's solution will be no better for my end users...
We used FormsCentral to code these forms and it works for the most part (if the end-user can co-operate, and thats iffy, sometimes), but I need help with how to make it go through your servers (and not the third party folks we use now), Not being cruel or racist here, but your over the phone "support techs" are about horrible & I cannot understand them or work with any of them, so I would definitely need someone who speaks English and can understand the nuances of programming these forms, to please contact me back. (Sorry, but both those attributes will be required to be able to help me, so, no "newbie-interns" or first week trainees are gonna cut it).... If you have anyone who fits the bill on those items and would be willing to help us, please contact me back at your earliest convenience. If we have to communicate here, I will do that & I can submit whatever we need to & to whoever we need to.
I need to get this right and working for the majority of my users and on any platform and OS.
You may certainly call me to talk about this, and I have given my number numerous times to your (expletive deleted) time wasting - recording message thingy. So, If it's not available look it up under [email protected]
(and you will probably get right to me, unlike my and I'm sure most other folks', "Adobe phone-in experiences")
Thank You,
Michael Corman
VinylCouture
Phenix City, Alabama 36869

Well, thanks for writing back...just so you know...I started using Adobe products in 1987, ...yeah...back then...like Illustrator 1 & 9" B&W Macs ...John Warnock's Helvetica's....stuff like that...8.5 x 11 LaserWriters...all that good stuff...I still have some of it working on a mac...much of it was stuff I bought. some stuff I did not...I'm not a big fan of this "cloud" thing Adobe has foisted upon the creatives of the world...which I'm sure you can tell...but the functionality and usefulness of your software can not be disputed, so feel free to do whatever we will continue to pay for, ...I am very impressed with CC PS on the 64 bit PC and perhaps I will end up paying you the stipend that you demand for the other services.
So I guess that brings us to our problem.. a few years back and at the height of the recession and near bankruptcy myself, I was damn lucky and hit on something and began a small arts and crafts supply service to sell my products online to a very "niche market" ...I had a unique product and still sell that product (plus others) online...My website is www.vinylcouture.com...Strange? Yes...but there is a market it seems, for everything now, and this is the market I service...Catagorically, these are 99%+ women that use these "adhesive, sticky backed vinyl products" to make different "craft items" that are just way too various and numerous to go into... generally older women, women who are computer illiterate for the most part...and all this is irrelevant to my problem, but I want you to have every bit of background on this and especially the demographic we are dealing with, so we can get right to the meat of the problem.
OK...So about two years ago, I decided to offer a "plain sheet" product of a plain colored "stick back" vinyl... it is available in multiple quantities of packs ( like 5 pieces, 10 pieces, 15 pieces, in a packi & so on)...and if you are still on my site.. go to any "GO RIGHT TO OUR ORDER PAGE" button, scroll down a little...and then to the "PLAIN VINYL" section...you will see the Weebly website order process.) You can back out from here, I think,..but, anyway this product is available in 63 colors + or - a few. So then the problem is, how do they select their individual colors within that (whatever) pack?... .
So my initial idea was to enable a "selection form" for these "colors" that would be transmitted to me via email as 'part" of the "order process".. We tried getting our customers to submit a " a list" ( something my competitiors still do, lol, poor bastards)......but that..is just unbelievable..I can't even begin to tell you what a freakin' nightmare that was...these people cannot even count to 10, much less any higher... figuring out what colors to list and send me... well, lets just say, it wasn't working......I had to figure out a better way...Something had to be done.
So after thinking this all out, and yeah...due to my total ignorance, i figured that we could make a form with Live Cycle Designer (Now Forms Central)...(back then something that was bundled with Adobe Acrobat Pro), I believe, and thats what this thing was authored in... and it would be all good...LOL!
Well not so simple...as you well know, Adobe Acrobat would NOT LET YOU EMAIL anything from itself.....it just wouldn't work (and I know why, and all that hooey), but not being one to take NO for answer,.I started looking for a way to make my little gizmo work.. So I found this company that said they can "hijack" (re-direct actually) the request to email, bypass the wah-wah, and re-transmit it to the proper parties.....for less than $100 a year, I think...its called http://pdf-fillableforms.com/.
A nice gentleman named Joseph Silva helped us program the thing to go to his servers and back out. Please dont hassle them...I need them...for now..it basically does work...try it...you should get back a copy of the form that you filled out...good luck however, if you're on MAC OSX or similar...
I have included a copy of both of our forms (and feel free to fill it out and play with it)...just put test somewhere on it...(and you must include YOUR email or it will balk)..they are supposed to be mostly identical, except one seems to be twice as large....generating a 1.7 meg file upon submission, while the other one only generates a 600K file or so...thats another issue for another day or maybe you can advise on that also...
OK so far so good......In our shop, once Grandma buys a 10 pack (or whatever), Only then she gets to the link on her receipt page ro the relevant "selection form" ,(this prevents "Filling and Sending" with "no order" and "no payment", another early problem we had)... which they can click on and it will usually download and open up on their device if all goes well...Then our little form is supposed to be fillable and is supposed to ADD UP all the quantities, so grandma knows how many she is buying and so forth right on the fly, and even while she changes her mind..., and IT'S LARGE so grandma can see it, and then it TOTALS it all up for them, ( cause remember, they can NOT add).., except there is a programming bug (mouse-click should be a mouse-up probably or something..) which makes you click in the blank spaces to get to a correct TOTAL...about 70-80% of our customers can enable all these features and usually the process completes without problems for them especially on PC's running Windows OS and Acrobat Reader X or XI...at least for most... Unfortunately it is still not the "seamless process" I would like or had envisioned for the other folks out there that do have trouble using our form.... Many folks report to us the following issues that we know of. First of all it takes too much time to load up...We know its HUGE...is there anyway that you can see, to streamline this thing? I would love for it to be more compact...this really helps on the phones and pads as I'm sure you well know.
Some just tell us,"it WON'T work"....I believe this is because they are totally out of it and dont even have Adobe Reader on their machine, & don't know how to get it ( yes, we provide the links).....or it's some ancient version....no one can stop this one...
It almost always generates some kind ( at least one time) of "error message" which we do warn them about..., telling one, basically that "Acrobat doesnt even like this happening at all, and it could be detrimental to ones computer files", blah-blah...(this freaks grandma out really bad)...& usually they end up not even trying to send it... and then I get calls that even you wouldn't believe...& If they DO nut up and push the Red "Submit Form" button, it will usually send the thing to us (and also back to them at the "required email address" they furnished on the form, thats what the folks at the "fillable forms place" do) so, if it's performing it's functions, why it is having to complain?. What are we doing wrong?....and how can I fix it?...Will re-compiling it or saving it as a newer version of "FormsCentral" correct any of these problems ?
Ok, so that should keep you busy for a minute and we can start out with those problems...but the next thing is, how can I take advantage of YOUR re-direct & hosting services?, And will it get rid of the error messages, and the slowness, and the iOS incompatibilities ? (amazingly, the last iOS Reader version worked almost OK.. but the newest version doesnt seem to work with my form on my iphone4) If it will enable any version of the iOS to send my form correctly and more transparently, then it might be worth the money...$14.95 a MONTH you say. hmmmmm...Better be good.
Another problem is, that I really don't need 5000 forms a month submitted. I think its like 70-100 or less....Got any plans for that? Maybe I'm just not BIG ENOUGH to use Adobe's services, however in this case, I really don't care whose I do use as long as the product works most correctly for my customers as well as us. Like I said, If I'm doing the best I can, I won't change anything, and still use the other third party, If Adobe has a better solution, then i'm all for that as well. In the meantime, Thanks for any help you can provide on this...
Michael Corman
VinylCouture.com
(706) 326-7911

Can I create a form in muse and have it work with a different hosting service?

I contacted a hosting service that I need to upload the site I built in MUSE to. (Hosting has already been purchased). I asked OMNIS:
I want to create a form with Muse and then upload my site to OMNIS, not muse, the forms will display as I designed them, but they will not function. I have someone to help me who is experienced in working with code. I can use Muse to export my site and then open the files in an HTML editor. "Update the source code of the form to make it compatible with the form processing technology used by your hosting provider (OMNIS) before you upload the files to their server." Can you help me with this? Do I need to get a script or something from you?
OMNIS ASKED me:
What are MUSE's site requirements?
I will be building other sites and my clients may want to have the site hosted elsewhere. Can you give me the easiest way to deal with forms?

Thank you for getting back to me Morgan.
I read in another forum:
There's a handy piece of software from CoffeeCup Software called "Web Form Builder". It's pretty affordable and easy to use and it can be hosted on the server of your choice provided that server uses an up-to-date PHP script.
This is what I have been using....but I would rather not have to deal with a third party form builder at all.
Do you reccommend this?

I am using iPhone 4 from the last one year and went dead and got it replaced by paying Rs.12500/- to Nyasa Sion Koliwada Mumbai Service Provider but now again after 38days the problem has started, what do i do? Is this is the quality & service we boost?

I am using iPhone 4 from the last one year and went dead and got it replaced by paying Rs.12500/- to Nyasa Sion Koliwada Mumbai Service Provider but now again after 38days the problem has started, what do i do? Is this is the quality & service we boost? On visiting the store we get only one reply you may write to Apple directely. we have the similar kind of problem with iPad which is being used by my wife Mr.Neelam Vij and paid Rs.16000/- to get it replaced within a year & 6months use. so in totality we have paid Rs.28500/- + Rs. 3000/- diagnostic charges.
1. iPhone 4 , 32 GB Black with Sr. No. 88******A4T
2. iPad 2, 16GB White with Sr. No.DL*******KPH
Moreover, we have no information to contact whom. even the replace set has a warranty of only three month which further confirm that Apple itself is not confident wheather product will last after replacement for more then three month. Such kind of happening do not encourage anyone to recomend this product to anyone. Would appriciate a faster response to our problem if someone from Apple is going to read this email.
Thanks & Regards
A K Vij
<Personal Information Edited by Host>

http://support.apple.com/kb/he57?viewlocale=de_de
India
(91) 1800 4250 744
www.apple.com/in/support/
hope it helps

How to get the UDDI Key to publish a service provider system in SR?

Hi,
I am following instruction in appendix 1 & 2 of the white paper at https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1079b1af-dcb7-2b10-9ebb-eafcaa3cbbea?overridelayout=true
trying to publish a service provider system into the service registry. One thing not clear to me is how to get the uddikey as needed in step 6 in appendix 1.
My service registry is in a PI 7.1 SP4 system. I followed the instruction in appendix 2 but there is no uddi key displayed in the General tab. Please help.
Regards,
Jiannan
Paragraph extracted from the whitepaper:
There may be cases in which the NWA logical settings do not match the Services Repository
settings when Visual Composer is trying to locate the enterprise services. Such cases can occur
when there is no SLD ID definition of the physical system in the Services Repository.
Currently, Visual Composer cannot search for services on a physical system with an empty SLD ID
(which is not a valid one).
To obtain this capability, the following steps should be performed to generate the necessary data
for each system with a non-valid SLD ID, so that Visual Composer can search for services over it.
1.Log on to http://<serverName>:<serverPort>/WSNavigator.
2.Select the Services Registry radio button.
3.In the Find field, enter sr and choose Go.
4.Select the ServicesRegistrySi line and choose Next.
5.Under the Operation Name, search for the publishPhysicalSystems operation, select it and choose Next.
6.Fill the service information parameters with the following (see Appendix 2 for details on how to get this information) :
6.1.Click the + icon in the physical system[].
6.2.Deselect the Classifications checkbox.
6.3.Click the + icon in the classificationReferenceGroups[].
6.4.Click the + icon in the classificationReferences[].
6.5.Deselect the classificationSystemKey checkbox.
6.6.Deselect the uddiKey checkbox and enter the value <localUddiKey>.
6.7.Deselect the value checkbox and enter the value <localSystemHostName>.
6.8.Deselect the host checkbox and enter the value <localHostName>.
6.9.Deselect the physicalSystemKey checkbox.
6.10.Deselect the logical key checkbox and enter the value <System name>.<SystemHome>.<host name>.
6.11.Deselect the systemName checkbox and enter the value <system name>.
6.12.Deselect the type checkbox and enter the value 2.

Hi Jiannan,
No worries, you can go to UDDI client from the main page of PI i.e. http://<serverName>:<serverPort>/
And you use the search function for the TModel for your Physical System. Search parameters can use the % wildcard.
Hit the search and you find the UDDI Key for the Physical System.
Cheers.
Hemant Chahal

Why would I need to use LiveCycle Data Services in a Flex app?

I cannot figure out what additional functionality is provided by using LiveCycle Data Services in my Flex apps. I cannot get a clear understanding of how using LiveCycle Data Services would benefit my applications. Does someone out there use LiveCycle Data Services? If so, what do you do with it in Flex?
Thanks!

- data push for publish/subscribe implementations
User has to do nothing to get updated information. You push it to their machine when new data is available, like Yahoo finance updated quotes.
- data paging
You don't want to display one million rows in your datagrid at once. Get a batch of data, if the user scrolls down, get the next batch, etc.
- server side clustering
One server does not get overloaded. High traffic sites have their large number of concurrent connections managed more efficiently.
- JMS services
JMS is a powerful technology for messaging throughout an application, and LCDS makes it much easier.
- RTMP tunneling
Allows the use of the RTMP protocol in LiveCycle Data Services applications. Makes it easier to traverse firewalls and proxies appropriately that currently prevent direct RTMP client connections to the server.
If this post answered your question or helped, please mark it as such.

LiveCycle Data Services without Flex UI

Is it possible to use LiveCycle Data Services as a backend without Flex/Flash as front end ( any other tech as front end Struts, JSP, JSF etc).
Idea is to get advantage of features provided by Data Services with something other than Flash player as front end?
Thanks
YogLC

Thanks Mete.
If you can please elaborate your thoughts more it will be helpful to me to take certain decisions.
If you can provide some reference or pointer or example on this specific topic that would be great too!
Any Adobe personnel from LiveCycle Data Services Team pl. reply?
Thanks again,
YogLC

LiveCycle Data Services for Java EE 4.6 now available

I'm pleased to announce the general availability of LiveCycle Data Services version 4.6. It is the latest update to the JEE or LiveCycle version of Data Services and it is a feature-rich major release, including expanded support for mobile applications (HTML5/JavaScript, native iOS and Java/Google Android), adds an SAP Connector, introduces managed remoting, and enhancements to model driven development and the offline synchronization framework.
For more information check out the following two sites:
Product overview on Adobe.com: http://www.adobe.com/products/livecycle/dataservices/
LiveCycle Developer Center on the Adobe Developer Connection: http://www.adobe.com/devnet/livecycle/dataservices.html
For existing customers with maintenance and support contracts, the Data Services 4.6 release along with Flash Builder 4.6 has been automatically pushed into your Licence Web Site (LWS) account. This includes ADEP/Livecycle V10 customers that have licence rights to Data Services.
Juergen Hauser - Sr. Product Manager - LiveCycle Data Services

This certification is currently being evaluated for upgrade to a new version. At this time, I cannot give a definitive answer about whether or not there will be an EE 6 version. We also do not have any info on retirement of the EE 5 version. I don't expect that this certification will retire terribly soon, as it is still getting a good amount of traffic. I'm sorry, I realize that my answer is not very informative or helpful, but that is the only info I have at this time. If you are interested in this certification, I would recommend that you go ahead and go for it. Even if we do end up retiring the certification path, the certification remains valid. It remains on your list of certifications in CertView and you can continue to use the OCM logo.
If you are worried about getting 1/2 way through the path and having the path retire, I can tell you that we typically provide at least 3 months notice for a retiring exam/certification path. This path may require extra time because of the length of time that it takes to complete this certification path. Whenever this certification path is set to retire, we will make every effort to contact all candidates who are working on the certification at that time, so always be sure that your email address is updated and correct in your Pearson VUE profile.
Regards,
Brandye Barrington
Certification Forum Moderator

AdvancedDataGrid compatability with LiveCycle Data Services

Hi,
I have a J2EE project which I have integrated with Flex3,
using the setup provided by your samples.jar in the LiveCycle data
services download - e.g. copied the data from web.xml,
flex-config.xml etc.
Every thing works fine until I put an AdvancedDataGrid
element into a page. I get the error:
Could not resolve <mx:AdvancedDataGrid> to a component
implementation.
I resolved this by copying over the datavisualization.swc
into the libs folder of my app. However then I got the error:
unable to load SWC datavisualization.swc
I then copied over the jars provided by Flex3.0 into the
WEB-INF/flex/jars section of my project, overwriting any old ones
provided by LiveCycle Data services sample. I also updated
flex-config.xml to provide a
<locale><locale-element>en_US</locale-element></locale>
element..
Then, when trying to load the page i got: the following
error:
Exception java.lang.NoSuchMethodError
flex2.compiler.CompilerSwcContext
This is method exists in the old mxmlc.jar file that i
overwrote with the one provided by Flex sdk 3.0 and it is called
from the flex-webtier.jar provided by LiveCycle Data Services.
Am I right in thinking I can't have an advanced data grid at
the moment? Or do i need a different flex-webtier.jar?
Thanks
Matt

Hi,
Could you please file a bug on
http://bugs.adobe.com/flex/
in which you describe your configuration and your installer
settings. Please attach your .log file as well, which can be found
in [your Workspace]\.metadata\.log .
Thanks,
Catalin

Do I have to use opmn:ormi in the JNDI Service Provider URL?

Trying to create a new Enterprise Message Source (JMS) and it's not updating the Data Object. Tested the OC4J queue using a Java POJO listener ... sending and receiving text message seems okay. I created a basic Plan (there's only one data element for now) and it is running.
Any suggestions would be appreciated!

Here is a document from Ranga on how to connect BAM to OJMS (hope it helps):
Database Trigger - OJMS - BAM Integration Sample
Last updated 07/27/05 Ranga
OJMS setup
Step 1 - Oc4j setup
     Install Standalone/Developer 10g OC4J or production version Application server.
Developer version download -http://www.oracle.com/technology/software/htdocs/devlic.html?/technology/software/products/ias/htdocs/utilsoft.html#1012 or from http://bamqa.us.oracle.com/bamqaWiki/attach?page=Downloads%2Foc4j1012_extended.zip
     Modify following configuration files
o     Add entry in <OC4J_Install_location>\j2ee\home\config\data-sources.xml for your database, use below sample replacing HOST, PORT and SERVICE_NAME in url tag
<data-source
class="com.evermind.sql.DriverManagerDataSource"
name="TTTDS"
location="jdbc/OracleTTTDS"
xa-location="jdbc/xa/OracleXaBamDS"
ejb-location="jdbc/OracleEjbBamDS"
connection-driver="oracle.jdbc.driver.OracleDriver"
username="scott"
password="tiger"
url="jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(LOAD_BALANCE=on)(ADDRESS=(PROTOCOL=tcp)(HOST=stank04)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=db10g)))"
inactivity-timeout="30"
/>
o     Add a resource provider entry in <OC4J_Install_location>\j2ee\home\config\application.xml
<resource-provider name="BAMTTT" class="oracle.jms.OjmsContext">
<description>BAM for Generic</description>
<property name="datasource" value="jdbc/OracleTTTDS"/>
</resource-provider>
Step 2 - Database setup
     Install 10g or 9i database, below steps will setup AQ in sample schema scott.
     Connect to database as sys and grant AQ permissions to scott user
connect sys/welcome1@db10g as sysdba
grant SELECT_CATALOG_ROLE to scott;
GRANT EXECUTE ON DBMS_APPLY_ADM TO scott;
GRANT EXECUTE ON DBMS_AQ TO scott;
GRANT EXECUTE ON DBMS_AQADM TO scott;
GRANT EXECUTE ON DBMS_CAPTURE_ADM TO scott;
GRANT EXECUTE ON DBMS_FLASHBACK TO scott;
GRANT EXECUTE ON DBMS_STREAMS_ADM TO scott;
execute dbms_aqadm.grant_system_privilege('ENQUEUE_ANY', 'scott', TRUE);
grant aq_administrator_role to scott;
grant execute on dbms_lock to scott;
grant execute on sys.dbms_aqin to scott;
grant execute on sys.dbms_aqjms to scott;
     Connect to database as scott user and create AQ
connect scott/tiger@db10g
execute dbms_aqadm.stop_queue( queue_name => 'bam_ttq' );
execute dbms_aqadm.drop_queue( queue_name => 'bam_ttq');
execute DBMS_AQADM.DROP_QUEUE_TABLE (queue_table => 'bam_ttq_tab');
execute dbms_aqadm.create_queue_table( queue_table => 'bam_ttq_tab', queue_payload_type => 'sys.aq$_jms_text_message', multiple_consumers => true );
execute dbms_aqadm.create_queue( queue_name => 'bam_ttq', queue_table => 'bam_ttq_tab' );
execute dbms_aqadm.start_queue( queue_name => 'bam_ttq' );
Database Trigger setup
Run the following sql connected to database as scott user, it creates a trigger on EMP table.
create or replace trigger send_recs_Employee AFTER INSERT OR Update ON EMP
FOR each row
declare
xml_complete varchar2(8000);
v_enqueue_options dbms_aq.enqueue_options_t;
v_message_properties dbms_aq.message_properties_t;
v_msgid raw(16);
temp sys.aq$_jms_text_message;
v_recipients dbms_aq.aq$_recipient_list_t;
Begin
temp:=sys.aq$_jms_text_message.construct;
v_recipients(1) := sys.aq$_agent('istante',null,0);
v_recipients(2) := sys.aq$_agent('test',null,0);
     v_message_properties.recipient_list := v_recipients;
xml_complete :=
          '<?xml version="1.0"?><row>' ||
          '<EMPNO>' || :new.EMPNO || '</EMPNO>' ||
          '<ENAME>' || :new.ENAME || '</ENAME>' ||
          '<JOB>' || :new.JOB || '</JOB>' ||
          '<MGR>' || :new.MGR || '</MGR>' ||
          '<HIREDATE>' || :new.HIREDATE || '</HIREDATE>' ||
          '<SAL>' || :new.SAL || '</SAL>' ||
          '<COMM>' || :new.COMM || '</COMM>' ||
          '<DEPTNO>' || :new.DEPTNO || '</DEPTNO>' ||
          '</row>' ;
          temp.set_text(xml_complete);
dbms_aq.enqueue(queue_name => 'bam_ttq',
          enqueue_options => v_enqueue_options,
          message_properties => v_message_properties,
          payload => temp,
          msgid => v_msgid );
End ;
BAM Setup
     Administrator - Fix the classpaths for oc4j jar files for Oracle (AS JMS and OJMS) Message source type using the OC4J_Install_location. If you are using production App Server you need to add extra classpath entry <App Server Location>\opmn\lib\optic.jar
     Architect - Create a new Enterprise message source of type Oracle (AS JMS and OJMS)
Initial Context Factory:      com.evermind.server.rmi.RMIInitialContextFactory
JNDI Service Provider URL:      o     For Standalone oc4j: ormi://machine name/
Where machine name is OC4J installed host
o     For Production App Server: opmn:ormi://<machine name>:<opmn request port>:home
Where machine name is App server installed host, opmn request port could be found from looking at opmn.xml in <App server install location>/opmn/conf
TopicConnectionFactory Name:      java:comp/resource/BAMTTT/TopicConnectionFactories/bam_ttq_tab
Topic Name:      java:comp/resource/BAMTTT/Topics/bam_ttq
JMS Message Type:      TextMessage
Durable Subscriber Name (Optional):      Istante
Message Selector (Optional):
Client ID (Optional):      ClientID
Name     Flow name     Type     Max size     Formatting
row.     row.     String     4000     (none).
     Enterprise Link Design Studio create a basic plan with
o     Oracle BAM Enterprise Message Receiver, selecting the message source you created in above step.
o     Display sink Grid
     Create file jndi.properties in C:\Program Files\Oracle BAM\j2re1.4.1_01\lib with entries
java.naming.security.principal=admin
java.naming.security.credentials=welcome1 (App server/Oc4j password)
Running
     Start OC4J
     To enqueue messages update or insert records in EMP table connected to database as scott user
Insert into emp values (&empno,'FORD','ANALYST',7566,sysdate,60000,3000,20);
     Run update on the enterprise plan
In above sample no parsing of the data is done, its got as one single string.
OJMS setup
Configuring JMS
http://www.oracle.com/technology/books/pdfs/2352_Ch06_FINAL.pdf
Oracle® Application Server Containers for J2EE Services Guide 10g Release 2 (10.1.2) for Windows or UNIX
http://iasdocs/iasdl/101200doc/web.1012/b14012/toc.htm

SAML2 Service Provider not writing artifact key to cache

I have been following http://biemond.blogspot.com/2009/09/sso-with-weblogic-1031-and-saml2.html to attempt to get Single Sign On working.
I created 2 new WebLogic 10.3.3 domains using an RDBMS Security Store (They are both pointing to the same RDBMS Security Store). I went through the guide, and after some time and troubleshooting was able to complete all the steps. I then created a very very basic JSF2 application that basically has a secured blank page. I set up this URL in the Service Provider configuration so that when I attempt to browse to the url http://localhost:7002/saml-test/ (7002 is the port I assigned the second server, it is not ssl) it does successfully attempt to redirect to the Identity Provider for authentication. However; when it redirects I get a 403 Forbidden Error.
Based on the logs it appears that the Service Provider is writing the artifact key to "the cache" (logs aren't specific, but I'm assuming DemoIdentity.jks?). But when the Identity Provider attempts to retrieve the key from the cache it finds nothing and returns null, causing an exception. I also attempted to view the DemoIdentity.jks contents by using:
keytool -list -keystore DemoIdentity.jks -storepass DemoIdentityKeyStorePassPhrase
And the key specified in the logs is not there. I also looked at all the data in the RDBMS database and could not find the key there. I'm assuming I am just missing some basic understanding of what is going on here, but I've been pulling my hair out with this thing for a week, and have had no luck figuring it out.
Below are the logs: (Note: I removed some of the leading debug info like time and date to save space)
Service Provider Logs:
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667020> <BEA-000000> <SAML2Filter: Processing request on URI '/saml-test/index.xhtml'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667020> <BEA-000000> <getServiceTypeFromURI(): request URI is '/saml-test/index.xhtml'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667020> <BEA-000000> <getServiceTypeFromURI(): request URI is not a service URI>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667020> <BEA-000000> <getServiceTypeFromURI(): returning service type 'SPinitiator'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667020> <BEA-000000> <SP initiating authn request: processing>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667036> <BEA-000000> <SP initiating authn request: partner id is null>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667036> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667036> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667036> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore Checking if the Keystore file was modified>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667052> <BEA-000000> <put: item with key _0x55e0aecb9df9ad1a2061c408ed8fb7a6 is saved in cache.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667052> <BEA-000000> <SP initiating authn request: use partner binding HTTP/Artifact>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <put: item with key AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI= is saved in cache.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <store saml object org.opensaml.saml2.core.impl.AuthnRequestImpl@1d0397d, BASE64 encoded artifact is AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI=>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <post artifact: false>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <local ARS binding location: http://localhost:7001/saml2/idp/sso/artifact>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <post form template url: null>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <URL encoded artifact: AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI%3D>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <URL encoded relay state: null>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667067> <BEA-000000> <artifact is sent in http url:http://localhost:7001/saml2/idp/sso/artifact?SAMLart=AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI%3D>
Identity Provider Logs:
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <SAML2Servlet: Processing request on URI '/saml2/idp/sso/artifact'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <getServiceTypeFromURI(): request URI is '/saml2/idp/sso/artifact'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <getServiceTypeFromURI(): service URI is '/idp/sso/artifact'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <getServiceTypeFromURI(): returning service type 'SSO'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <Request URI: /saml2/idp/sso/artifact>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <Method: GET>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <Query string: SAMLart=AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI%3D>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <     Accept: */*>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <     Accept-Language: en-us>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <     User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 3.0.04506.648; MS-RTC LM 8; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 3.0.04506.30; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727)>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <     Accept-Encoding: gzip, deflate>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <     Host: localhost:7001>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <     Connection: Keep-Alive>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyStore Checking if the Keystore file was modified>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <ssl client key:Sun RSA private CRT key, 512 bits
modulus: 7817332509587397552890028336578207339286770598290114724527725719770879356379795125511472689827439136630867724827096844273172334826513804343303721031800247
public exponent: 65537
private exponent: 2389560434022984500008330220587930903580143665342415250567830833638555718851227441135738538593823573280638974177840057994863001694333515217638747428107137
prime p: 89878601557891020780681845905770729690536603261106674473148151816104280723703
prime q: 86976570330283066459007767878319559738265898367448286741620259855280595939649
prime exponent p: 49531492934775012550710075660752268859317797579709015700240960055270126903855
prime exponent q: 86241336493473679108071803409323587446354469591404733468585827031687427955905
crt coefficient: 20900431671220180283467175612491957186643034513437468583594091501365673934630, ssl client cert chain:[Ljava.security.cert.Certificate;@17de8c5>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <get BASE64 encoded artifact from http request, value is:AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI=>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667083> <BEA-000000> <ArtifactResolver: sha-1 hash value of remote partner id is '0x0a6b8a4b62a8fc4312f59b578c8e615540467de7'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <ArtifactResolver: found remote partner 'WebSSO-SP-Partner-0' with entity ID 'saml2AP'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <ArtifactResolver: returning partner: [email protected]ba20>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <partner entityid issaml2AP, end point index is:0>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <find end point:[email protected]6886, binding location is:http://localhost:7001/saml2/sp/ars/soap>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <got samlp:ArtifactResolve signing key:Sun RSA private CRT key, 512 bits
modulus: 7817332509587397552890028336578207339286770598290114724527725719770879356379795125511472689827439136630867724827096844273172334826513804343303721031800247
public exponent: 65537
private exponent: 2389560434022984500008330220587930903580143665342415250567830833638555718851227441135738538593823573280638974177840057994863001694333515217638747428107137
prime p: 89878601557891020780681845905770729690536603261106674473148151816104280723703
prime q: 86976570330283066459007767878319559738265898367448286741620259855280595939649
prime exponent p: 49531492934775012550710075660752268859317797579709015700240960055270126903855
prime exponent q: 86241336493473679108071803409323587446354469591404733468585827031687427955905
crt coefficient: 20900431671220180283467175612491957186643034513437468583594091501365673934630>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667099> <BEA-000000> <weblogic.security.service.internal.SAMLKeyServiceImpl.getKeyInfo>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667114> <BEA-000000> <<?xml version="1.0" encoding="UTF-8"?><samlp:ArtifactResolve xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_0x419833daa9699be237eb505d62fe5ab2" IssueInstant="2012-09-17T13:47:47.099Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">saml2CMP</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_0x419833daa9699be237eb505d62fe5ab2">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="ds saml samlp"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>QBOav/grXIftH9szz7jigjkJSXe5oeTUe+mecOWQs44=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
C9bKLG5yYjU0UvLj0nlN8KJJfRoQiGzse8ZeSVOR2nHicx3M3YQjGgzNJdDIiC69FoUitEOBNAHg
oYfLcc/5Uw==
</ds:SignatureValue>
</ds:Signature><samlp:Artifact>AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI=</samlp:Artifact></samlp:ArtifactResolve>>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667114> <BEA-000000> <open connection to send samlp:ArtifactResolve. partner id:saml2AP, endpoint url:http://localhost:7001/saml2/sp/ars/soap>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667114> <BEA-000000> <isClientPasswordSet:false>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667114> <BEA-000000> <connect to remote ARS.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667114> <BEA-000000> <SoapSynchronousBindingClient.sendAndReceive: begin to send SAMLObject to server.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667114> <BEA-000000> <SoapSynchronousBindingClient.sendAndReceive: sending completed, now waiting for server response.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667317> <BEA-000000> <SAML2Servlet: Processing request on URI '/saml2/sp/ars/soap'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667317> <BEA-000000> <getServiceTypeFromURI(): request URI is '/saml2/sp/ars/soap'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667317> <BEA-000000> <getServiceTypeFromURI(): service URI is '/sp/ars/soap'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667317> <BEA-000000> <getServiceTypeFromURI(): returning service type 'ARS'>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667317> <BEA-000000> <ArtifactResolutionService.process: get SoapHttpBindingReceiver as receiver and SoapHttpBindingSender as sender.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667333> <BEA-000000> <remove: key AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI= does not exist in cache.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667333> <BEA-000000> <retrieve: no message was found in cache with the messageHandle, return null.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667333> <BEA-000000> <SoapHttpBindingSender.sendResponse: Set HTTP headers to prevent HTTP proxies cache SAML protocol messages.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667333> <BEA-000000> <SoapHttpBindingSender.send: the SOAP envelope to be sent is :
>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '17' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667333> <BEA-000000> <<?xml version="1.0" encoding="UTF-8"?><soap11:Envelope xmlns:soap11="http://schemas.xmlsoap.org/soap/envelope/"><soap11:Body><samlp:ArtifactResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_0xd927ce91bb367412a50520dc7695df1e" InResponseTo="_0x419833daa9699be237eb505d62fe5ab2" IssueInstant="2012-09-17T13:47:47.333Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">saml2CMP</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/><samlp:StatusMessage>[Security:096502]There is no saml message in returned samlp:ArtifactResponse.</samlp:StatusMessage></samlp:Status></samlp:ArtifactResponse></soap11:Body></soap11:Envelope>>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <SoapSynchronousBindingClient.sendAndReceive: response code from server is: 200>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <SoapSynchronousBindingClient.sendAndReceive: get a HTTP_OK response, now receive a SOAP envelope message.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <SoapSynchronousBindingClient.sendAndReceive: found XMLObject in envelope, return it.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <http url connection disconnect.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <<?xml version="1.0" encoding="UTF-8"?><samlp:ArtifactResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_0xd927ce91bb367412a50520dc7695df1e" InResponseTo="_0x419833daa9699be237eb505d62fe5ab2" IssueInstant="2012-09-17T13:47:47.333Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">saml2CMP</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/><samlp:StatusMessage>[Security:096502]There is no saml message in returned samlp:ArtifactResponse.</samlp:StatusMessage></samlp:Status></samlp:ArtifactResponse>>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <get samlp:ArtifactResponse and verify it.>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <saml version:2.0>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <inResponseTo:_0x419833daa9699be237eb505d62fe5ab2>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <status code: urn:oasis:names:tc:SAML:2.0:status:Success>
#<SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889667349> <BEA-000000> <status message: [Security:096502]There is no saml message in returned samlp:ArtifactResponse.>
####<Sep 17, 2012 9:47:49 AM EDT> <Debug> <SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889669802> <BEA-000000> <[Security:096577]Failed to receive AuthnRequest document from the requester.>
####<Sep 17, 2012 9:47:49 AM EDT> <Debug> <SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889669802> <BEA-000000> <Caused by: [Security:096502]There is no saml message in returned samlp:ArtifactResponse.>
####<Sep 17, 2012 9:47:49 AM EDT> <Debug> <SecuritySAML2Service> <AdminServer> <[ACTIVE] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1347889669802> <BEA-000000> <exception info
com.bea.security.saml2.service.SAML2Exception: [Security:096577]Failed to receive AuthnRequest document from the requester.
     at com.bea.security.saml2.service.sso.SSOServiceProcessor.receive(SSOServiceProcessor.java:301)
     at com.bea.security.saml2.service.sso.SSOServiceProcessor.processAuthnRequest(SSOServiceProcessor.java:118)
     at com.bea.security.saml2.service.sso.SSOServiceProcessor.process(SSOServiceProcessor.java:100)
     at com.bea.security.saml2.service.sso.SingleSignOnServiceImpl.process(SingleSignOnServiceImpl.java:50)
     at com.bea.security.saml2.cssservice.SAML2ServiceImpl.process(SAML2ServiceImpl.java:161)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.common.security.utils.ThreadClassLoaderContextInvocationHandler.invoke(ThreadClassLoaderContextInvocationHandler.java:27)
     at $Proxy26.process(Unknown Source)
     at com.bea.security.saml2.servlet.SAML2Servlet.service(SAML2Servlet.java:34)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:183)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3686)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused By: com.bea.security.saml2.binding.BindingHandlerException: [Security:096502]There is no saml message in returned samlp:ArtifactResponse.
     at com.bea.security.saml2.artifact.impl.AbstractArtifactResolver.getSamlMsg(AbstractArtifactResolver.java:459)
     at com.bea.security.saml2.artifact.impl.AbstractArtifactResolver.resolve(AbstractArtifactResolver.java:304)
     at com.bea.security.saml2.binding.impl.ArtifactBindingReceiver.resolve(ArtifactBindingReceiver.java:77)
     at com.bea.security.saml2.binding.impl.ArtifactBindingReceiver.receiveRequest(ArtifactBindingReceiver.java:40)
     at com.bea.security.saml2.service.sso.SSOServiceProcessor.receive(SSOServiceProcessor.java:295)
     at com.bea.security.saml2.service.sso.SSOServiceProcessor.processAuthnRequest(SSOServiceProcessor.java:118)
     at com.bea.security.saml2.service.sso.SSOServiceProcessor.process(SSOServiceProcessor.java:100)
     at com.bea.security.saml2.service.sso.SingleSignOnServiceImpl.process(SingleSignOnServiceImpl.java:50)
     at com.bea.security.saml2.cssservice.SAML2ServiceImpl.process(SAML2ServiceImpl.java:161)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.common.security.utils.ThreadClassLoaderContextInvocationHandler.invoke(ThreadClassLoaderContextInvocationHandler.java:27)
     at $Proxy26.process(Unknown Source)
     at com.bea.security.saml2.servlet.SAML2Servlet.service(SAML2Servlet.java:34)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:183)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3686)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>

Hi user13435437,
The key=AAQAAApriktiqPxDEvWbV4yOYVVARn3nNdPnLeD3F4z6gSCUJyQg8b2cZZI= is the SAMLArtifact id, it has nothing to do with any of the public/private keys of the managed servers.
My scenario is a little bit different: Weblogic working as SP and ADFS2 as IdP. What I would recommend you s to use the HTTP-POST & HTTP-REDIRECT binding instead of the Artifact one.
But if you want to remain with this binding maybe you should check the "Authentication Request Cache Timeout" attribute.
Hope it helps,
Luis

Livecycle hosted service provider

Similar Messages

Maybe you are looking for