OIM 11g SPML Client - InvalidSecurity : error in processing the WS-Security

Hi,
Has anyone had any success creating a SPML client for interfacing with OIM 11g?
I used xelsysadm to login, but every time it errors, doesn't matter what SPML service i invoke, e.g.
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:ns1="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" >
<soap:Header>
<ns1:Security>
<ns1:UsernameToken>
*<ns1:Username>xelsysadm</ns1:Username>*
*<ns1:Password>Passw0rd</ns1:Password>*
</ns1:UsernameToken>
</ns1:Security>
</soap:Header>
<soap:Body xmlns:ns1="urn:oasis:names:tc:SPML:2:0">
*<ns1:listTargetsRequest />*
</soap:Body>
</soap:Envelope>
---> Errors
<env:Envelope
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Header/>
<env:Body>
<env:Fault
xmlns:ns0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<faultcode>ns0:FailedCheck</faultcode>
<faultstring>FailedCheck : failure in security check</faultstring>
<faultactor/>
</env:Fault>
</env:Body>
</env:Envelope>
any suggests or code much appreciated.

Prakash Gupta wrote:
You just have to add "?wsdl" at the end of String URLThanks for the reply, I tried that one, I'm getting the InvalidSecurity error, see below
<env:Fault xmlns:ns0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<faultcode>ns0:InvalidSecurity</faultcode>
*<faultstring>InvalidSecurity : error in processing the WS-Security security header</faultstring>*
<faultactor></faultactor>
</env:Fault>
I'm assuming this has something to do with the WS-Security setting. I used Microsoft WCF (WSHttpBinding) to consume the service,
see the code below
WSHttpBinding oimBinding = new WSHttpBinding();+
oimBinding.Security.Mode = SecurityMode.Message;
oimBinding.ReliableSession.Enabled = true;
oimBinding.TransactionFlow = false;
oimBinding.Security.Message.ClientCredentialType = MessageCredentialType.UserName;
EndpointAddress oimEndpoint = new EndpointAddress("http://169.254.248.95:14000/spml-xsd/SPMLService?WSDL");*
oimBinding.MaxReceivedMessageSize = Int32.MaxValue;
_oimServiceChannel = new ChannelFactory<SPMLRequestPortTypeChannel>(oimBinding, oimEndpoint);+
oimServiceChannel.Credentials.UserName.UserName = loginUser;+
oimServiceChannel.Credentials.UserName.Password = loginPassword;+
+SPMLRequestPortTypeChannel target = _oimServiceChannel.CreateChannel();+
target.SPMLListTargetsRequest(new SPMLListTargetsRequestInput());+
I'm not sure if WCF would make any difference in consuming a webservice... any way if you have any idea, code snipets much appreicated.

Similar Messages

  • Javax.xml.ws.soap.SOAPFaultException: InvalidSecurity : error in processing the WS-Security security header error while invoking FinancialUtilService using HTTP proxy client

    I am trying to invoke FinancialUtilService using HTTP proxy client. I am getting below error while i am trying to invoke this service. Using FusionServiceTester i am able to invoke service and upload file to UCM. Using oracle.ucm.fa_client_11.1.1.jar also i am able to upload file to UCM without any issue. But using HTTP proxy client i am facing below error. Can anyone please help me. PFA code i am using to invoke this service.
    javax.xml.ws.soap.SOAPFaultException: InvalidSecurity : error in processing the WS-Security security header
      at com.sun.xml.ws.fault.SOAP11Fault.getProtocolException(SOAP11Fault.java:197)
      at com.sun.xml.ws.fault.SOAPFaultBuilder.createException(SOAPFaultBuilder.java:122)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:125)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:95)
      at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:135)
      at $Proxy43.uploadFileToUcm(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at weblogic.wsee.jaxws.spi.ClientInstance$ClientInstanceInvocationHandler.invoke(ClientInstance.java:363)
      at $Proxy44.uploadFileToUcm(Unknown Source)
      at com.oracle.xmlns.apps.financials.commonmodules.shared.financialutilservice.FinancialUtilServiceSoapHttpPortClient.invokeUpload(FinancialUtilServiceSoapHttpPortClient.java:299)
      at com.oracle.xmlns.apps.financials.commonmodules.shared.financialutilservice.FinancialUtilServiceSoapHttpPortClient.main(FinancialUtilServiceSoapHttpPortClient.java:273)
    Process exited with exit code 0.
    Message was edited by: Oliver Steinmeier
    Removed attachment

    Hi Jani,
    Thanks for your reply.
    I am new to webservices and we are trying to do a POC on invoking FinancialUtilService using HTTP proxy client. I am following steps mentioned in attached pdf section "Invoking FinancialUtil Service using Web Service Proxy Client". I have imported certificate using below command. 
         keytool -import -trustcacerts -file D:\Retek\Certificate.cer -alias client -keystore D:\Retek\default-keystore.jks -storepass welcome1
    Invoking
        SecurityPolicyFeature[] securityFeature =
        new SecurityPolicyFeature[] { new
        SecurityPolicyFeature("oracle/wss11_saml_token_with_message_protection_client_policy")};
        financialUtilService_Service = new FinancialUtilService_Service();
        FinancialUtilService financialUtilService= financialUtilService_Service.getFinancialUtilServiceSoapHttpPort(securityFeature);
        // Get the request context to set the outgoing addressing properties
        WSBindingProvider wsbp = (WSBindingProvider)financialUtilService;
        WSEndpointReference replyTo =
          new WSEndpointReference("https://efops-rel91-patchtest-external-fin.us.oracle.com/finFunShared/FinancialUtilService", WS_ADDR_VER);
        String uuid = "uuid:" + UUID.randomUUID();
        wsbp.setOutboundHeaders( new StringHeader(WS_ADDR_VER.messageIDTag, uuid), replyTo.createHeader(WS_ADDR_VER.replyToTag));
        wsbp.getRequestContext().put(WSBindingProvider.USERNAME_PROPERTY, "fin_user1");
        wsbp.getRequestContext().put(WSBindingProvider.PASSWORD_PROPERTY,  "Welcome1");
        wsbp.getRequestContext().put(ClientConstants.WSSEC_RECIPIENT_KEY_ALIAS,"service");
        wsbp.getRequestContext().put(ClientConstants.WSSEC_KEYSTORE_LOCATION, "D:/Retek/default-keystore.jks");
        wsbp.getRequestContext().put(ClientConstants.WSSEC_KEYSTORE_PASSWORD, "welcome1" );
        wsbp.getRequestContext().put(ClientConstants.WSSEC_KEYSTORE_TYPE, "JKS" );
        wsbp.getRequestContext().put(ClientConstants.WSSEC_SIG_KEY_ALIAS, "client" );
        wsbp.getRequestContext().put(ClientConstants.WSSEC_SIG_KEY_PASSWORD, "password" );
        wsbp.getRequestContext().put(ClientConstants.WSSEC_ENC_KEY_ALIAS, "client" );
        wsbp.getRequestContext().put(ClientConstants.WSSEC_ENC_KEY_PASSWORD, "password" );
    SEVERE: WSM-00057 The certificate, client, is not retrieved.
    SEVERE: WSM-00137 The encryption certificate, client, is not retrieved due to exception oracle.wsm.security.SecurityException: WSM-00057 : The certificate, client, is not retrieved..
    SEVERE: WSM-00161 Client encryption public certificate is not configured for Async web service client
    SEVERE: WSM-00005 Error in sending the request.
    SEVERE: WSM-07607 Failure in execution of assertion {http://schemas.oracle.com/ws/2006/01/securitypolicy}wss11-saml-with-certificates executor class oracle.wsm.security.policy.scenario.executor.Wss11SamlWithCertsScenarioExecutor.
    SEVERE: WSM-07602 Failure in WS-Policy Execution due to exception.
    SEVERE: WSM-07501 Failure in Oracle WSM Agent processRequest, category=security, function=agent.function.client, application=null, composite=null, modelObj=FinancialUtilService, policy=oracle/wss11_saml_token_with_message_protection_client_policy, policyVersion=null, assertionName={http://schemas.oracle.com/ws/2006/01/securitypolicy}wss11-saml-with-certificates.
    oracle.wsm.common.sdk.WSMException: WSM-00161 : Client encryption public certificate is not configured for Async web service client
      at oracle.wsm.security.policy.scenario.executor.Wss11SamlWithCertsScenarioExecutor.sendRequest(Wss11SamlWithCertsScenarioExecutor.java:173)
      at oracle.wsm.security.policy.scenario.executor.SecurityScenarioExecutor.execute(SecurityScenarioExecutor.java:545)
      at oracle.wsm.policyengine.impl.runtime.AssertionExecutor.execute(AssertionExecutor.java:41)
      at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.executeSimpleAssertion(WSPolicyRuntimeExecutor.java:608)
      at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.executeAndAssertion(WSPolicyRuntimeExecutor.java:335)
      at oracle.wsm.policyengine.impl.runtime.WSPolicyRuntimeExecutor.execute(WSPolicyRuntimeExecutor.java:282)
      at oracle.wsm.policyengine.impl.PolicyExecutionEngine.execute(PolicyExecutionEngine.java:102)
      at oracle.wsm.agent.WSMAgent.processCommon(WSMAgent.java:915)
      at oracle.wsm.agent.WSMAgent.processRequest(WSMAgent.java:436)
      at oracle.wsm.agent.handler.WSMEngineInvoker.handleRequest(WSMEngineInvoker.java:393)
      at oracle.wsm.agent.handler.wls.WSMAgentHook.handleRequest(WSMAgentHook.java:239)
      at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.processRequest(TubeFactory.java:220)
      at weblogic.wsee.jaxws.tubeline.FlowControlTube.processRequest(FlowControlTube.java:98)
      at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:604)
      at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:563)
      at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:548)
      at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:445)
      at com.sun.xml.ws.client.Stub.process(Stub.java:259)
      at com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:152)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:115)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:95)
      at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:135)
      at $Proxy43.uploadFileToUcm(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at weblogic.wsee.jaxws.spi.ClientInstance$ClientInstanceInvocationHandler.invoke(ClientInstance.java:363)
      at $Proxy44.uploadFileToUcm(Unknown Source)
      at com.oracle.xmlns.apps.financials.commonmodules.shared.financialutilservice.FinancialUtilServiceSoapHttpPortClient.invokeUpload(FinancialUtilServiceSoapHttpPortClient.java:111)
      at com.oracle.xmlns.apps.financials.commonmodules.shared.financialutilservice.FinancialUtilServiceSoapHttpPortClient.main(FinancialUtilServiceSoapHttpPortClient.java:86)
    Caused by: oracle.wsm.security.SecurityException: WSM-00161 : Client encryption public certificate is not configured for Async web service client
      at oracle.wsm.security.policy.scenario.processor.Wss11X509TokenProcessor.insertClientEncCertToWSAddressingHeader(Wss11X509TokenProcessor.java:979)
      at oracle.wsm.security.policy.scenario.processor.Wss11X509TokenProcessor.build(Wss11X509TokenProcessor.java:206)
      at oracle.wsm.security.policy.scenario.executor.Wss11SamlWithCertsScenarioExecutor.sendRequest(Wss11SamlWithCertsScenarioExecutor.java:164)
      ... 30 more
    Caused by: oracle.wsm.security.SecurityException: WSM-00057 : The certificate, client, is not retrieved.
      at oracle.wsm.security.jps.WsmKeyStore.getJavaCertificate(WsmKeyStore.java:534)
      at oracle.wsm.security.jps.WsmKeyStore.getCryptCert(WsmKeyStore.java:570)
      at oracle.wsm.security.policy.scenario.processor.Wss11X509TokenProcessor.insertClientEncCertToWSAddressingHeader(Wss11X509TokenProcessor.java:977)
      ... 32 more
    SEVERE: WSMAgentHook: An Exception is thrown: WSM-00161 : Client encryption public certificate is not configured for Async web service client
    File upload failed
    javax.xml.ws.WebServiceException: javax.xml.rpc.JAXRPCException: oracle.wsm.common.sdk.WSMException: WSM-00161 : Client encryption public certificate is not configured for Async web service client
      at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.processRequest(TubeFactory.java:231)
      at weblogic.wsee.jaxws.tubeline.FlowControlTube.processRequest(FlowControlTube.java:98)
      at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:604)
      at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:563)
      at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:548)
      at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:445)
      at com.sun.xml.ws.client.Stub.process(Stub.java:259)
      at com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:152)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:115)
      at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:95)
      at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:135)
      at $Proxy43.uploadFileToUcm(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at weblogic.wsee.jaxws.spi.ClientInstance$ClientInstanceInvocationHandler.invoke(ClientInstance.java:363)
      at $Proxy44.uploadFileToUcm(Unknown Source)
      at com.oracle.xmlns.apps.financials.commonmodules.shared.financialutilservice.FinancialUtilServiceSoapHttpPortClient.invokeUpload(FinancialUtilServiceSoapHttpPortClient.java:111)
      at com.oracle.xmlns.apps.financials.commonmodules.shared.financialutilservice.FinancialUtilServiceSoapHttpPortClient.main(FinancialUtilServiceSoapHttpPortClient.java:86)
    Caused by: javax.xml.rpc.JAXRPCException: oracle.wsm.common.sdk.WSMException: WSM-00161 : Client encryption public certificate is not configured for Async web service client
      at oracle.wsm.agent.handler.wls.WSMAgentHook.handleException(WSMAgentHook.java:395)
      at oracle.wsm.agent.handler.wls.WSMAgentHook.handleRequest(WSMAgentHook.java:248)
      at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.processRequest(TubeFactory.java:220)
      ... 19 more

  • 11g - InvalidSecurity : error in processing the WS-Security security header

    In 11g, I am calling a service which has the username_token_service_policy attached. In the partnerlink, I have the username_token_client_policy & have also set the binding properties for the username & password.
    I get the remote fault, InvalidSecurity : error in processing the WS-Security security header
    In the log of the service being called, I see WSM-00069 : The security header is missing.
    I also tried setting the http username, password in the em console for the reference also setting up the key store & nothing is working for me.
    Any pointers would be great.
    Also how can I see the SOAP header in the console or in the log file. Is there a log level to be setup. Right now I see only the payload in the em console.
    Edited by: user739955 on Mar 24, 2010 3:57 PM

    try this
    try the below
    2.     Add a partner link and enter the WSDL location of the secured web service.
    3.     Open the composite.xml from the Application Navigator
    4.     Right click on the external reference service and select “Configure WS policies”
    5.     Under the security tab, click add button and select “oracle/ wss_username_token_client_policy”
    6.     Now Open the property Inspector window and click the add button under “Binding properties” tab.
    7.     Include the “oracle.webservices.auth.username”
    value
    8.     Include the “oracle.webservices.auth.password”
    value
    Once you are done with above steps BPEL should be ready to invoke secure Web Service.
    remeber check the name of the properties check above in my comments
    Edited by: Vivek Ganta on Mar 24, 2010 5:20 PM

  • InvalidSecurity : error in processing the WS-Security security header

    Hello,
    I am facing the exact problem as mentioned in
    11g - InvalidSecurity : error in processing the WS-Security security header
    I have a Bpel exposed as a Webservice proxy. But whenever I invoke the same I get the following error message.
    InvalidSecurity : error in processing the WS-Security security header
    What do I do???

    Hello,
    I have attached username_token_service_policy to my Bpel and username_token_client_policy to the client.
    Thanks

  • FaultString: InvalidSecurity : error in processing the WS-Security security

    Hi,
    I am using OIM 11.1.1.5 trying to invoke web service which validates user name using java client.
    But getting exception related to ws-security header.
    faultCode: {http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}InvalidSecurity
    faultSubcode:
    faultString: InvalidSecurity : error in processing the WS-Security security header
    faultActor:
    faultNode:
    faultDetail:
    {http://xml.apache.org/axis/}stackTrace:InvalidSecurity : error in processing the WS-Security security header
    at org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:221)
    at org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:128)
    at org.apache.axis.encoding.DeserializationContext.endElement(DeserializationContext.java:1087)
    at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(Unknown Source)
    at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(Unknown Source)
    at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(Unknown Source)
    at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(Unknown Source)
    at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(Unknown Source)
    at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
    at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
    at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
    at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(Unknown Source)
    Does any one faced similar issue. Any poiner will be a great help.
    Thanks,
    Pallavi

    The error was generated on the endpoint and indicates that the SOAP request message had incorrect WS-Security information in its headers. The SOAP response message you included doesn't contain specific information about what is wrong (we wouldn't want to reveal too much to hackers, of course!).
    Without seeing the SOAP request message and the WS-SecurityPolicy that the endpoint requires, it's impossible to tell what's wrong.
    Other important information:
    - what version of WLS are you running?
    - is the endpoint a WLS JAX-WS or a WLS JAX-RPC web service?
    - is WS-Security configured using native WLS WS-Security (e.g. @Policy) or using OWSM WS-Security (i.e. @SecurityPolicy)?
    - what specific policy is being used to enforce security at the endpoint (the advertised WSDL for the endpoint should contain this)

  • "error in processing the WS-Security security header" - calling ws OIPM

    Hi All,
    We are trying to integrate Ebiz and OIPM, when we send request from ebiz to AxfSolutionMediatorService WebService we are getting below error
    InvalidSecurity : error in processing the WS-Security security header
    <ns2:exception xmlns:ns2="http://jax-ws.dev.java.net/" class="javax.xml.ws.soap.SOAPFaultException" note="To disable this feature, set com.sun.xml.ws.fault.SOAPFaultBuilder.disableCaptureStackTrace system property to false">
    <message>InvalidSecurity : error in processing the WS-Security security header</message>
    <ns2:stackTrace>
    <ns2:frame class="oracle.imaging.common.WSSecurityHandler" file="WSSecurityHandler.java" line="134" method="throwSOAPFaultException"/>
    <ns2:frame class="oracle.imaging.common.WSSecurityHandler" file="WSSecurityHandler.java" line="119" method="processHeader"/>
    <ns2:frame class="oracle.imaging.axf.ws.AxfSolutionMediatorWS" file="AxfSolutionMediatorWS.java" line="66" method="getUserPrincipal"/>
    <ns2:frame class="oracle.imaging.axf.ws.AxfSolutionMediatorWS" file="AxfSolutionMediatorWS.java" line="54" method="execute"/>
    <ns2:frame class="sun.reflect.GeneratedMethodAccessor2261" line="unknown" method="invoke"/>
    <ns2:frame class="sun.reflect.DelegatingMethodAccessorImpl" file="DelegatingMethodAccessorImpl.java" line="25" method="invoke"/>
    <ns2:frame class="java.lang.reflect.Method" file="Method.java" line="597" method="invoke"/>
    <ns2:frame class="weblogic.wsee.jaxws.WLSInstanceResolver$WLSInvoker" file="WLSInstanceResolver.java" line="92" method="invoke"/>
    <ns2:frame class="weblogic.wsee.jaxws.WLSInstanceResolver$WLSInvoker" file="WLSInstanceResolver.java" line="74" method="invoke"/>
    <ns2:frame class="com.sun.xml.ws.server.InvokerTube$2" file="InvokerTube.java" line="151" method="invoke"/>
    <ns2:frame class="com.sun.xml.ws.server.sei.EndpointMethodHandlerImpl" file="EndpointMethodHandlerImpl.java" line="268" method="invoke"/>
    <ns2:frame class="com.sun.xml.ws.server.sei.SEIInvokerTube" file="SEIInvokerTube.java" line="100" method="processRequest"/>
    <ns2:frame class="com.sun.xml.ws.api.pipe.Fiber" file="Fiber.java" line="866" method="__doRun"/>
    <ns2:frame class="com.sun.xml.ws.api.pipe.Fiber" file="Fiber.java" line="815" method="_doRun"/>
    <ns2:frame class="com.sun.xml.ws.api.pipe.Fiber" file="Fiber.java" line="778" method="doRun"/>
    <ns2:frame class="com.sun.xml.ws.api.pipe.Fiber" file="Fiber.java" line="680" method="runSync"/>
    <ns2:frame class="com.sun.xml.ws.server.WSEndpointImpl$2" file="WSEndpointImpl.java" line="403" method="process"/>
    <ns2:frame class="com.sun.xml.ws.transport.http.HttpAdapter$HttpToolkit" file="HttpAdapter.java" line="532" method="handle"/>
    <ns2:frame class="com.sun.xml.ws.transport.http.HttpAdapter" file="HttpAdapter.java" line="253" method="handle"/>
    <ns2:frame class="com.sun.xml.ws.transport.http.servlet.ServletAdapter" file="ServletAdapter.java" line="140" method="handle"/>
    <ns2:frame class="weblogic.wsee.jaxws.WLSServletAdapter" file="WLSServletAdapter.java" line="171" method="handle"/>
    <ns2:frame class="weblogic.wsee.jaxws.HttpServletAdapter$AuthorizedInvoke" file="HttpServletAdapter.java" line="708" method="run"/>
    <ns2:frame class="weblogic.security.acl.internal.AuthenticatedSubject" file="AuthenticatedSubject.java" line="363" method="doAs"/>
    <ns2:frame class="weblogic.security.service.SecurityManager" file="SecurityManager.java" line="146" method="runAs"/>
    <ns2:frame class="weblogic.wsee.util.ServerSecurityHelper" file="ServerSecurityHelper.java" line="103" method="authenticatedInvoke"/>
    <ns2:frame class="weblogic.wsee.jaxws.HttpServletAdapter$3" file="HttpServletAdapter.java" line="311" method="run"/>
    <ns2:frame class="weblogic.wsee.jaxws.HttpServletAdapter" file="HttpServletAdapter.java" line="336" method="post"/>
    <ns2:frame class="weblogic.wsee.jaxws.JAXWSServlet" file="JAXWSServlet.java" line="95" method="doRequest"/>
    <ns2:frame class="weblogic.servlet.http.AbstractAsyncServlet" file="AbstractAsyncServlet.java" line="99" method="service"/>
    <ns2:frame class="javax.servlet.http.HttpServlet" file="HttpServlet.java" line="820" method="service"/>
    <ns2:frame class="weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction" file="StubSecurityHel
    per.java" line="227" method="run"/>
    <ns2:frame class="weblogic.servlet.internal.StubSecurityHelper" file="StubSecurityHelper.java" line="125" method="invokeServlet"/>
    <ns2:frame class="weblogic.servlet.internal.ServletStubImpl" file="ServletStubImpl.java" line="300" method="execute"/>
    <ns2:frame class="weblogic.servlet.internal.TailFilter" file="TailFilter.java" line="26" method="doFilter"/>
    <ns2:frame class="weblogic.servlet.internal.FilterChainImpl" file="FilterChainImpl.java" line="56" method="doFilter"/>
    <ns2:frame class="oracle.security.jps.ee.http.JpsAbsFilter$1" file="JpsAbsFilter.java" line="111" method="run"/>
    <ns2:frame class="java.security.AccessController" file="AccessController.java" line="native" method="doPrivileged"/>
    <ns2:frame class="oracle.security.jps.util.JpsSubject" file="JpsSubject.java" line="313" method="doAsPrivileged"/>
    <ns2:frame class="oracle.security.jps.ee.util.JpsPlatformUtil" file="JpsPlatformUtil.java" line="413" method="runJaasMode"/>
    <ns2:frame class="oracle.security.jps.ee.http.JpsAbsFilter" file="JpsAbsFilter.java" line="94" method="runJaasMode"/>
    <ns2:frame class="oracle.security.jps.ee.http.JpsAbsFilter" file="JpsAbsFilter.java" line="161" method="doFilter"/>
    <ns2:frame class="oracle.security.jps.ee.http.JpsFilter" file="JpsFilter.java" line="71" method="doFilter"/>
    <ns2:frame class="weblogic.servlet.internal.FilterChainImpl" file="FilterChainImpl.java" line="56" method="doFilter"/>
    <ns2:frame class="oracle.dms.servlet.DMSServletFilter" file="DMSServletFilter.java" line="136" method="doFilter"/>
    <ns2:frame class="weblogic.servlet.internal.FilterChainImpl" file="FilterChainImpl.java" line="56" method="doFilter"/>
    <ns2:frame class="weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction" file="WebAppServletContext.java" line="3715" method="wrapRun"/>
    <ns2:frame class="weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction" file="WebAppServletContext.java" line="3681" method="run"/>
    <ns2:frame class="weblogic.security.acl.internal.AuthenticatedSubject" file="AuthenticatedSubject.java" line="321" method="doAs"/>
    <ns2:frame class="weblogic.security.service.SecurityManager" file="SecurityManager.java" line="120" method="runAs"/>
    <ns2:frame class="weblogic.servlet.internal.WebAppServletContext" file="WebAppServletContext.java" line="2277" method="securedExecute"/>
    <ns2:frame class="weblogic.servlet.internal.WebAppServletContext" file="WebAppServletContext.java" line="2183" method="execute"/>
    <ns2:frame class="weblogic.servlet.internal.ServletRequestImpl" file="ServletRequestImpl.java" line="1454" method="run"/>
    <ns2:frame class="weblogic.work.ExecuteThread" file="ExecuteThread.java" line="209" method="execute"/>
    <ns2:frame class="weblogic.work.ExecuteThread" file="ExecuteThread.java" line="178" method="run"/>
    </ns2:stackTrace>
    </ns2:exception>
    The request which we are sending is
    <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><soap:Header><Security xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"><UsernameToken> <Username>AXF</Username> <Password>AXF</Password> </UsernameToken> </Security></soap:Header><soap:Body><execute xmlns="http://service.axf.imaging.oracle/"><request xmlns=""><commandNamespace>UCM_Managed_Attachments</commandNamespace><conversationId></conversationId><requestParameters></requestParameters><role>guest</role><solutionNamespace>UCM_Managed_Attachments</solutionNamespace><systemName>Oracle</systemName><userContext><entry><key>RESP_ID</key><value>50554</value></entry><entry><key>RESP_APPL_ID</key><value>200</value></entry><entry><key>ORG_ID</key><value>204</value></entry><entry><key>USR_ID</key><value>1318</value></entry></userContext><username>operations</username></request></execute></soap:Body></soap:Envelope>
    Thanks in Advance,
    Rakesh.

    I know you've probably solved this but I'll post our working soap message below for others.
    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:imag="http://imaging.oracle/">
    <soapenv:Header xmlns:ns0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
    <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
    <wsse:UsernameToken>
    <wsse:Username>Username</wsse:Username>
    <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">Password</wsse:Password>
    </wsse:UsernameToken>
    </wsse:Security>
    </soapenv:Header>
    <soapenv:Body>
    <imag:getDocument>
    <documentId>4.IPM_004280</documentId>
    <sectionSet>
    <flags>HISTORY</flags>
    <flags>FIELDVALUES</flags>
    </sectionSet>
    </imag:getDocument>
    </soapenv:Body>
    </soapenv:Envelope>

  • Access UCM faile Invalid Security: error in processing the WS-Security

    I have an application host in weblogic that need to access remote UCM. but it failed with the following error:
    Got Invalid Security: error in processing the WS-Security header
    I read document and realized that:
    "- If the service policy on Content Server login service is set to oracle/wss_saml_or_username_token_service_policy, then the client policy should be set to oracle/wss10_saml_token_client_policy
    - If the service policy on Content Server login service is set to oracle/wss11_saml_or_username_token_with_message_protection_service_policy then the client policy should be set to oracle/wss11_saml_token_with_message_protection_client_policy"
    This is true as this application was able to access an UCM with policy oracle/wss_saml_or_username_token_service_policy
    However, I have to switch to a new UCM instance which configure policy set is oracle/wss_saml_bearer_or_username_token_service_policy
    I tried to change the policyset in the weblogic of client side to be oracle/wss_saml_token_bearer_client_policy but did not work
    Is there anyway I can make the connection to work?
    Thanks

    Hi ,
    As far as I know and going by documentation WCC supports only 2 of the following WS Security policies :
    oracle/wss11_saml_token_with_message_protection_service_policy
    oracle/wss11_username_token_with_message_protection_service_policy
    More details are provided in the following documentation :
    http://docs.oracle.com/cd/E14571_01/doc.1111/e10807/web_services004.htm
    Thanks,
    Srinath

  • OIM 11g Server Configuration Wizard Error - Cannot Connect to Oracle DB

    I appreciate any and all suggestions or thoughts on how to best continue troubleshooting this error that I am describing below.
    I am attempting to install Oracle Identity and Access Management Suite 11g on a Windows 7 machine…in following the installation guides I have successfully installed the following Oracle Components
    - Oracle Database 11.2.0.1.0
    - Created Schemas using RCU 11.1.1.3.3
    - Oracle WebLogic Server 10.3.3.0
    - Oracle SOA 11.1.1.2.0
    - Oracle SOA 11.1.1.3.0 (Patch Set)
    - Oracle IAM SUITE 11.1.1.3.0
    Following the above installations, I created a new WebLogic Domain and as the next step am running the OIM Configuration Wizard to configure the OIM Server, however I am unable to setup a connection to the Oracle DB via the OIM Configuration Wizard. I am getting an error message when attempting to setup the connection to the Oracle Database using the OIM 11g Server Configuration Wizard:
    ERROR:*
    INST:6102 Unable to connect to the database with the given credentials.
    *+[DETAILS] Check the values. Make sure the Database is up and running and connect string, user name, and password are correct.+*
    INST:6102 Unable to connect to the database with the given credentials.
    *+[DETAILS] Check the values. Make sure the Database is up and running and connect string, user name, and password are correct.+*
    When installing the Oracle Database 11gR2 I used the following install configuration:
    Oracle base: C:\MyApps\Oracle
    Software location: C:\MyApps\Oracle\DB_HOME\11.2.0\dbhome_1
    Database file location: C:\MyApps\Oracle\DB_HOME\oradata
    Database Edition: Personal Edition (3.27 GB)
    Character Set: Unicode (AL32UTF8)
    Global database name: orcl.dev.com
    Administrative Password: Password1
    Confirm Password: Password1
    When creating my Schemas using RCU 11.1.1.3.3 I used the following Database Connection Details
    DB TYPE: Oracle Database
    HOST NAME: localhost
    PORT: 1521
    SERVICE NAME: orcl.dev.com
    USERNAME: sys
    PASSWORD: Password1
    ROLE: SYSDBA
    I used a Prefix of “DEV” when creating the schemas so Schema Owners DEV_OIM and DEV_MDS where created. Also, I configured to use the same password for all Schemas: “Password1″. So the password for DEV_OIM and DEV_MDS should be the same, “Password1″.
    REPRODUCING THE ERROR
    To reproduce the error, when I launch the Oracle Identity Management 11g Configuration Wizard I am first brought to the “Welcome” Screen. I click the [Next>] button.
    Next, I am on the “Components to Configure” screen where I select OIM Server and OIM Design Console and click the [Next>] button. (NOTE I have also tested by simply selecting only the OIM Server)
    Next, I am on the “Database” screen where I enter the connection information
    Connection String: localhost:1521:orcl.dev.com
    (NOTE I have also tested using localhost:1521:orcl)
    OIM Schema User Name: DEV_OIM
    OIM Schema Password: Password1
    MDS Schema User Name: DEV_MDS
    MDS Schema Password: Password1
    When I click the [Next>] button after entering the Database Connection details I encounter the following two errors (1 error for each logon DEV_OIM and DEV_MDS)
    INST:6102 Unable to connect to the database with the given credentials.
    INST:6102 Unable to connect to the database with the given credentials.
    TROUBLESHOOTING
    NOTE: I can successfully start the Oracle DB Services and connect via the Enterprise Console, SQL Plus, and JDBCTest Java Client…I just cannot get past this connection error in the OIM Server Configuration Wizard.
    JDBCTest.java TEST CLIENT
    NOTE: THIS IS THE JAVA TEST CLIENT THAT I AM USING TO TEST DATABASE CONNECTIVITY THRU A SPECIFIED JDBC URL AND DRIVER THAT WORKS SUCCESSFULLY.*
    import java.sql.Connection;
    import java.sql.DatabaseMetaData;
    import java.sql.DriverManager;
    import java.sql.ResultSet;
    public class JDBCTest {
    public static void main(String[] args) throws Exception {
    String url = "jdbc:oracle:thin:@localhost:1521:orcl";
    String driver = "oracle.jdbc.OracleDriver";
    String user = "DEV_OIM";
    String password = "Password1";
    try {
    Class.forName(driver);
    Connection conn = DriverManager.getConnection(url, user, password);
    // Get the MetaData
    DatabaseMetaData metaData = conn.getMetaData();
    // Get driver information
    System.out.println("");
    System.out.println("#########################################");
    System.out.println("# ***DRIVER INFORMATION***");
    System.out.println("#");
    System.out.println("# Driver Name = " + metaData.getDriverName());
    System.out.println("# Driver Version = " + metaData.getDriverVersion());
    System.out.println("#");
    System.out.println("#########################################");
    System.out.println("");
    System.out.println("");
    // Get database information
    System.out.println("#########################################");
    System.out.println("# ***DATABASE INFORMATION***");
    System.out.println("#");
    System.out.println("# Database Product Name = " + metaData.getDatabaseProductName());
    System.out.println("# Database Product Version = " + metaData.getDatabaseProductVersion());
    System.out.println("#");
    System.out.println("#########################################");
    System.out.println("");
    System.out.println("");
    // Get schema information
    ResultSet schemas = metaData.getSchemas();
    System.out.println("#########################################");
    System.out.println("# ***SCHEMA INFORMATION***");
    System.out.println("#");
    System.out.println("# Schemas:");
    while (schemas.next()) {
    System.out.println("# " + schemas.getString(1));
    System.out.println("#########################################");
    System.out.println("");
    System.out.println("");
    // Get table information
    System.out.println("Tables");
    ResultSet tables = metaData.getTables("", "", "", null);
    while (tables.next()) {
    System.out.println(tables.getString(3));
    conn.close();
    } catch (Exception ex) {
    ex.printStackTrace();
    *"lsnrctl status" COMMAND TEST SUCCESSFUL*
    When the Listener Service is on I get the following output using lsnrctl status command
    C:\> lsnrctl status
    LSNRCTL for 32-bit Windows: Version 11.2.0.1.0 - Production on 21-SEP-2010 15:59:43
    Copyright (c) 1991, 2010 Oracle. All rights reserved.
    STATUS of the LISTENER
    Alias LISTENER
    Version TNSLSNR for 32-bit Windows:Version 11.2.0.1.0 - Production
    Start Date 21-SEP-2010 14:43:57
    Uptime 0 days 1 hr. 15 min. 46 sec
    Trace Level off
    Security ON: Local OS Authentication
    SNMP OFF
    Listener Parameter File C:\MyApps\Oracle\DB_HOME\11.2.0\dbhome_1\NETWORK\ADMIN\listener.ora
    Listener Log File c:\myapps\oracle\diag\tnslsnr\\listener\alert\log.xml
    Listening Endpoints Summary…
    (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1521)))
    Services Summary…
    Service “CLRExtProc” has 1 instance(s).
    Instance “CLRExtProc”, status UNKNOWN, has 1 handler(s) for this service…
    Service “orcl.dev.com” has 1 instance(s).
    Instance “orcl”, status READY, has 1 handler(s) for this service….
    Service “orclXDB.dev.com” has 1 instance(s).
    Instance “orcl” status READY, has 1 handler(s) for this service…
    The command completed successfully

    Whenever installing oracle databases, i install the software only first. Then i setup the listener. Then i create a database instance using the dbca tool. This way all the information is added to the pre-existing listener configurations rather than trying to create the listener afterwards. Also, during the dbca database creation, i supply a full service name such as orcl.hostname and use the service name in future configurations where it asked. This usually solves any issues of the listener or database not being found correctly.
    -Kevin

  • SECU1075: An error was discovered processing the wsse:Security header

    I have designed a console application as a web service client which is able to talk with webservice; however instead of using
    a console application, I've written a DLL that is called from a Winform app and  I am getting following error message.
    Error message System.Web.Services.Protocols.SoapException: SECU1075: An error was discovered processing the <wsse:Security>
    header
       at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response,
    Stream responseStream, Boolean asyncCall)   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
       at ErcotNodalDll.NodalClient.NodalService.MarketTransactions(RequestMessage RequestMessage) in C:\Pb10_Devl\KeyStone\Dark
    Angel\Visual Studio\ErcotNodalDll\ErcotNodalDll\Web References\NodalClient\Reference.cs:line 98
       at ErcotNodalDll.Program.submitPayload(String certificate, HeaderType header, RequestType request, PayloadType payload)
    in C:\Pb10_Devl\KeyStone\Dark Angel\Visual Studio\ErcotNodalDll\ErcotNodalDll\Class1.cs:line 243
       at ErcotNodalDll.Program.createBidSetData(String[] parms) in C:\Pb10_Devl\KeyStone\Dark Angel\Visual Studio\ErcotNodalDll\ErcotNodalDlA
    first chance exception of type 'System.Web.Services.Protocols.SoapException' occurred in System.Web.Services.dll
    I'm told the problem is that the DLL can not find the policycache.config file thus doesn't know how to handle security for the
    html.
    Anybody know what I need to do to call the webservice
    from DLL instead of console application?

    You use WSE3 and not WCF (which is this forum main focus). One idea is to consider WCF.
    Also:
    - the client proxy should have a SetPolicy() method which you can use to set the policy
    - use Fiddler to check which message the client sends and which one it gets back. Then compare these to a workign client message.
    http://webservices20.blogspot.com/
    WCF Security, Interoperability And Performance Blog

  • Error: var g_objCurrentFormData_Error : There has been an error while processing the form

    Hi,.
    I have a InfoPath 2010 form which was published to SharePoint 2010.  I migrated the content db to SQL Server 2012 and I have converted the Sharepoint 2010 (windows based) to the SharePoint 2013 claims based site. I have not fully upgraded the site to
    2013 version (Version upgrade to SP 2013) is not done..
    In the InfoPath 2010 form, which is available in SP 2013. I have a button and on click of it, i have the below code:
    XPathNavigator domNav = MainDataSource.CreateNavigator();
    XPathNavigator fldUserurl = domNav.SelectSingleNode("/my:myFields/my:TaskUrl", this.NamespaceManager);
    if (!string.IsNullOrEmpty(fldUserurl.Value))
    string urlToDecode = HttpUtility.UrlDecode(fldUserurl .Value);
    HttpContext.Current.Response.Write("<script type='text/javascript'>window.open('" + urlToDecode + "','_self','left=20,top=20,width=500,height=500,toolbar=1,resizable=0');</script>");
    HttpContext.Current.Response.Flush();
    HttpContext.Current.Response.End();
    The above code works fine in SharePoint 2010, however after moving the Site to SP 2013 Claims mode, I am getting the error as
    "var g_objCurrentFormData_Error = [[[12,"There has been an error while processing the form.","","","guid"]],[],0,"","",1033,"","",["0","","","","","",0,0,"",0,false],"","0",false,"",0,"","http:\u002f\u002ftest-t1.com\u002fs\u002fTestApplication","ltr","http:\u002f\u002ftest-t1.com\u002fs\u002fTestApplication",6.35202885373882E+17"
    In the SP Logs, i found the below:
    Unhandled exception processing request for PostbackPage Microsoft.Office.InfoPath.Server.Util.InfoPathFatalException: Exception of type 'Microsoft.Office.InfoPath.Server.Util.InfoPathFatalException' was thrown.   
     at Microsoft.Office.InfoPath.Server.Util.GlobalStorage.get_CurrentFormId()   
     at Microsoft.Office.InfoPath.Server.Util.GlobalStorage.get_CurrentContext()   
    How to fix this?
    Thanks

    Hi Venkatzeus,
    please let us know your sharepoint 2013 latest cumulative update, if possible please make sure it is March 2013 update or above.
    as i know, between 2010 infopath and 2013 there are difference, perhaps if you can debug your form it may help.
    most probably there are environment settings difference between 2010 sharepoint and 2013 sharepoint. such as the data connection size/length, that causing it failed, or the form data is NULL.
    http://infopathdebugger.codeplex.com/
    http://www.infopathdev.com/forums/t/26330.aspx
    http://social.technet.microsoft.com/Forums/en-US/5c9d2fce-0fd8-439c-a636-bf856eb76e15/how-to-retrieve-term-store-management-values?forum=sharepointgeneralprevious
    Regards,
    Aries
    Microsoft Online Community Support
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • InfoPath form, rich text fields, "There was a form postback error" InvalidOperationException, There has been an error while processing the form

    Using InfoPath 2013 browser enabled form.
    I am getting the above error on ALL Infopath Designed Rich Text fields, where the "Cannot be blank" attribute is set.
    To reproduce it, I create a custom list and custom list form with InfoPath 2013. I add 2 Rich Text fields and enable "cannot be blank". To raise the error, I put some data in the RT field. Skip to another field (so focus is changed and a postback
    occurs), then back to original field to delete the contents (to raise the validation).
    I originally thought it was associated with the HTMLCHKR.DLL not being registered (and I have re-registered it just in case), but the exception I get from the ULS logs reads (it is from a list AFTER I have re-registered the DLL):
    There was a form postback error. (User: 0#.w|myDomain\jc, Form Name: Template, IP: , Request: h t t p ://MyWebApp/MySite/Lists/rtAfterHtmlCHkrReg/Item/newifs.aspx?List=2212ff41-77b4-445b-931b-d7e538c9da91&Source=h t t p://MyWebApp/MySite/Lists/rtAfterHtmlCHkrReg/AllItems.aspx&RootFolder=&Web=3db49106-bdca-47bb-b4cd-a549d2d86aa7,
    Form ID: urn:schemas-microsoft-com:office:infopath:list:-AutoGen-2015-01-16T21:51:48:853Z, Type: InvalidOperationException, Exception Message: No content generated as the result of the operation.) 8cc5e09c-3665-903b-575a-faaac506c40a
    I noticed that errors associated with the HTMLCHKR.DLL not being registered would have some sort of COM exception (example: TYPE_E_LIBNOTREGISTERED or REGDB_E_CLASSNOTREG)
    I also should mention that this problem started happening about 3 weeks ago. We have extended the web application to handle HTTPS on the intranet zone (we had a reverse proxy project that did not eventuate) - would that cause something? How can I do further
    checking?

    Hi,
    I have done a test in my SharePoint, and I met the same issue with you.
    I created a custom list and custom list form with InfoPath 2013. I added 2 Rich Text fields and enabled "cannot be blank".  I put some content in the RT field, then delete the contents, I got the error message:"there has been an
    error while processing the form."
    Here is a similar post said that executing the command: regsvr32 "C:\Program Files\Common Files\Microsoft Shared\
    OFFICE14\htmlchkr.dll" will solve the issue.
    https://social.msdn.microsoft.com/Forums/en-US/eb2e0f6e-c8e4-4e92-ac5e-a09d72759eda/rich-text-field-error-in-webform?forum=sharepointcustomizationprevious
    But I just disabled "cannot be blank", and it solved the issue.
    Best Regards,
    Lisa Chen
    Lisa Chen
    TechNet Community Support

  • Outlook 2013 - Password change breaks S/MIME Certs "An error occurred in the underlying security system. Key not valid for us in specified state."

    AD password change comes up, user changes password.
    Tries to send signed or encrypted email with a Comodo S/MIME certificate, and gets the following error:
    ""An error occurred in the underlying security system.  Key not valid for us in specified state."
    I now have two reports of this error - one on Windows 7, and one on Windows 8.0 (remote user).
    The one on Windows 8.0, we tried removing their S/MIME cert from Outlook/Windows and re-adding, this did NOT resolve the issue.
    Plan was originally to have the 8.0 user ship their machine in, and wipe it, since nothing else could fix it and I wasn't finding anyone else with the same issue.  Now that I've got a second user with the same issue, its looking like a bug/issue and
    not a random glitch.
    Thanks in advance for any and all help with this!

    Hi,
    Thank you for your question.
    I am trying to involve someone familiar with this topic to further look at this issue.
    Thanks,
    Melon Chen
    Forum Support
    Come back and mark the replies as answers if they help and unmark them if they provide no help.
    If you have any feedback on our support, please click
    here

  • OIM 11g OID connector install error

    Hi,
    I'm trying to install the OID connector (OID_904140.zip) for OIM 11g (11.1.1.5), but it fails and I get this error message on my screen:
    "A system error occurred.
    Contact the Oracle Identity Manager System Administrator."
    I have unzipped the OID_904140.zip into /home/oracle/Oracle/Middleware/Oracle_IDM1/server/ConnectorDefaultDirectory/
    ..and the ldap.jar and ldapbp.jar to the subfolder targetsystems-lib/OID_904140/
    I can load it, but when I press install something fails. The log tells me this:
    [2012-06-08T05:37:24.153-07:00] [oim_server1] [NOTIFICATION] [IAM-5010000] [oracle.iam.reconciliation.impl.config] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88d26e01c38a3469:747267b6:137cc114f1d:-8000-0000000000000123,0] [APP: oim#11.1.1.3.0] Generic Information: Unable to delete, as profile does not exist : /db/OID User moving forward ...
    [2012-06-08T05:37:24.157-07:00] [oim_server1] [NOTIFICATION] [IAM-5012124] [oracle.iam.reconciliation.impl.config] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88d26e01c38a3469:747267b6:137cc114f1d:-8000-0000000000000123,0] [APP: oim#11.1.1.3.0] Failed to load profile from MDS /db/OID User. Error is oracle.mds.core.MetadataNotFoundException: MDS-00013: no metadata found for metadata object "/db/OID User".
    [2012-06-08T05:37:24.157-07:00] [oim_server1] [NOTIFICATION] [IAM-5012124] [oracle.iam.reconciliation.impl.config] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88d26e01c38a3469:747267b6:137cc114f1d:-8000-0000000000000123,0] [APP: oim#11.1.1.3.0] Failed to load profile from MDS /db/OID User_backup. Error is oracle.mds.core.MetadataNotFoundException: MDS-00013: no metadata found for metadata object "/db/OID User_backup".
    [2012-06-08T05:37:24.165-07:00] [oim_server1] [NOTIFICATION] [IAM-5012122] [oracle.iam.reconciliation.impl.config] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88d26e01c38a3469:747267b6:137cc114f1d:-8000-0000000000000123,0] [APP: oim#11.1.1.3.0] Reading configurations from the database for object name OID User
    [2012-06-08T05:37:24.212-07:00] [oim_server1] [NOTIFICATION] [IAM-5010000] [oracle.iam.reconciliation.impl.config] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88d26e01c38a3469:747267b6:137cc114f1d:-8000-0000000000000123,0] [APP: oim#11.1.1.3.0] Generic Information: tos not null
    [2012-06-08T05:37:24.326-07:00] [oim_server1] [ERROR] [] [XELLERATE.WEBAPP] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 88d26e01c38a3469:747267b6:137cc114f1d:-8000-0000000000000123,0] [APP: oim#11.1.1.3.0] Class/Method: tcActionBase/execute encounter some problems: EJB Exception: ; nested exception is: [[
    java.lang.NoSuchMethodError: org/eclipse/persistence/queries/SQLCall.setParameters(Ljava/util/Vector;)V; nested exception is: java.rmi.RemoteException: EJB Exception: ; nested exception is:
    java.lang.NoSuchMethodError: org/eclipse/persistence/queries/SQLCall.setParameters(Ljava/util/Vector;)V javax.ejb.EJBException: EJB Exception: ; nested exception is:
    java.lang.NoSuchMethodError: org/eclipse/persistence/queries/SQLCall.setParameters(Ljava/util/Vector;)V; nested exception is: java.rmi.RemoteException: EJB Exception: ; nested exception is:
    java.lang.NoSuchMethodError: org/eclipse/persistence/queries/SQLCall.setParameters(Ljava/util/Vector;)V
    java.rmi.RemoteException: EJB Exception: ; nested exception is:
    java.lang.NoSuchMethodError: org/eclipse/persistence/queries/SQLCall.setParameters(Ljava/util/Vector;)V
    at weblogic.ejb.container.internal.EJBRuntimeUtils.throwRemoteException(EJBRuntimeUtils.java:108)
    at weblogic.ejb.container.internal.BaseRemoteObject.handleSystemException(BaseRemoteObject.java:857)
    at weblogic.ejb.container.internal.BaseRemoteObject.handleSystemException(BaseRemoteObject.java:809)
    at weblogic.ejb.container.internal.BaseRemoteObject.postInvoke1(BaseRemoteObject.java:518)
    This looks interesting to me, but I can't really make sense of it:
    Failed to load profile from MDS /db/OID User_backup. Error is oracle.mds.core.MetadataNotFoundException: MDS-00013: no metadata found for metadata object "/db/OID User_backup".
    Any ideas, what has gone wrong?
    Thanks and regards,
    Henrik
    Edited by: user1154522 on Jun 8, 2012 6:50 AM

    Hi Henrik,
    Trying to help:
    1-Go and take a look into CIH table into OIM Schema.
    1.2-If OID is there, chech: CIH_STATUS column.
    1.3-If it's recorded into this table. Try to follow OIM Connector Unistall guide and do it again.
    Link: http://docs.oracle.com/cd/E28271_01/doc.1111/e14308/conn_mgmt.htm#CIHBDFEB
    section: 6.9.3 Setting Up the Uninstall Connector Utility
    I hope this helps,
    Thiago Leoncio.

  • OIM 11g server start up error

    Hi All,
    I am seeing below error when I start OIM server, any help ?
    <Jun 13, 2011 1:20:24 PM EDT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
    <Jun 13, 2011 1:20:24 PM EDT> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
    <Jun 13, 2011 1:20:25 PM EDT> <Warning> <EJB> <BEA-010065> <MessageDrivenBean threw an Exception in onMessage(). The exception was:
    java.lang.NullPointerException.
    java.lang.NullPointerException
    at oracle.iam.platform.context.ContextManager.loadfromProxy(ContextManager.java:279)
    at oracle.iam.platform.context.ContextManager.loadContext(ContextManager.java:179)
    at oracle.iam.platform.async.impl.ContextUtil.reloadExecutionContext(ContextUtil.java:54)
    at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:53)
    at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
    Truncated. see log file for complete stacktrace
    >
    <Jun 13, 2011 1:20:25 PM EDT> <Warning> <EJB> <BEA-010065> <MessageDrivenBean threw an Exception in onMessage(). The exception was:
    java.lang.NullPointerException.
    java.lang.NullPointerException
    at oracle.iam.platform.context.ContextManager.loadfromProxy(ContextManager.java:279)
    at oracle.iam.platform.context.ContextManager.loadContext(ContextManager.java:179)
    at oracle.iam.platform.async.impl.ContextUtil.reloadExecutionContext(ContextUtil.java:54)
    at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:53)
    at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
    Truncated. see log file for complete stacktrace
    >
    <Jun 13, 2011 1:20:25 PM EDT> <Warning> <EJB> <BEA-010065> <MessageDrivenBean threw an Exception in onMessage(). The exception was:
    java.lang.NullPointerException.
    java.lang.NullPointerException
    at oracle.iam.platform.context.ContextManager.loadfromProxy(ContextManager.java:279)
    at oracle.iam.platform.context.ContextManager.loadContext(ContextManager.java:179)
    at oracle.iam.platform.async.impl.ContextUtil.reloadExecutionContext(ContextUtil.java:54)
    at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:53)
    at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
    Truncated. see log file for complete stacktrace
    >
    <Jun 13, 2011 1:20:25 PM EDT> <Warning> <EJB> <BEA-010216> <The Message-Driven EJB: oimKernelQueueMDB is throwing exception when processing the messages. Delivery failed after 11 attempts. The EJB container will suspend the message delivery for 5 seconds before retry.>
    <Jun 13, 2011 1:20:30 PM EDT> <Warning> <EJB> <BEA-010065> <MessageDrivenBean threw an Exception in onMessage(). The exception was:
    java.lang.NullPointerException.
    java.lang.NullPointerException
    at oracle.iam.platform.context.ContextManager.loadfromProxy(ContextManager.java:279)
    at oracle.iam.platform.context.ContextManager.loadContext(ContextManager.java:179)
    at oracle.iam.platform.async.impl.ContextUtil.reloadExecutionContext(ContextUtil.java:54)
    at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:53)
    at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
    Truncated. see log file for complete stacktrace
    >
    <Jun 13, 2011 1:20:30 PM EDT> <Warning> <EJB> <BEA-010216> <The Message-Driven EJB: oimKernelQueueMDB is throwing exception when processing the messages. Delivery failed after 21 attempts. The EJB container will suspend the message delivery for 10 seconds before retry.>
    <Jun 13, 2011 1:20:40 PM EDT> <Warning> <EJB> <BEA-010065> <MessageDrivenBean threw an Exception in onMessage(). The exception was:
    java.lang.NullPointerException.
    java.lang.NullPointerException
    at oracle.iam.platform.context.ContextManager.loadfromProxy(ContextManager.java:279)
    at oracle.iam.platform.context.ContextManager.loadContext(ContextManager.java:179)
    at oracle.iam.platform.async.impl.ContextUtil.reloadExecutionContext(ContextUtil.java:54)
    at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:53)
    at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
    Truncated. see log file for complete stacktrace
    >
    <Jun 13, 2011 1:20:40 PM EDT> <Warning> <EJB> <BEA-010216> <The Message-Driven EJB: oimKernelQueueMDB is throwing exception when processing the messages. Delivery failed after 31 attempts. The EJB container will suspend the message delivery for 20 seconds before retry.>

    Hi,
    For the first error and looking from WebLogic perspective "<EJB> <BEA-010065> <MessageDrivenBean threw an Exception in onMessage(). The exception was: java.lang.OutOfMemoryError." because MAXPERMSIZE in the start<servername>.cmd|SH is configured to small for the application. Normal solution should be increase MAXPERMSIZE . But you are also getting this "<BEA-010216> <The Message-Driven EJB: oimKernelQueueMDB is throwing exception when processing the messages." I recommend you to open an SR in Oracle Metalink to solve these errors.
    regards,
    Thiago L Guimaraes.

  • Error While processing the COBRA qualified Life event

    Hi All,
    We have setup the Termination Life event as a COBRA qualifying life event.
    Also setup the a new monthly payroll as the default payroll and set the benefit assignment to Yes at BG level.
    I created an employee on 18 aug 2010 , processed new hire life event and enrolled that employee into the COBRA plan named "Be well Medical Plan".
    Then When I terminated the employee as on 18oct2010, While Processing The Termination life event, I am getting an Error saying “When determining pay periods, a payroll Id is required. This error has occurred in the following package : ben_distribute_rates.get_periods_between. "
    When I searched for this error in metalink ,it says it does not have a payroll id ,but when I check on 19oct2010 using the People->Total Comp Participation->Person Benefits Assignment window, he has got the default payroll attached to his benefits assignment.
    Could you please help me to reslove this issue?
    Your help is greatly appreciated.
    Thank you,
    Anuradha

    Hi Anuradha,
    This error comes in many scenarios and there are bug fixes also for them. Please check on all patches available for you apps patchset level having the file benelmen.pkb. You may find a fix for it. (This was a common issue sometime back with suspended/terminated assignments) Also, I suggest logging a SR with oracle asap if your terminated assignment and also the benefits assignment have the correct payrolls attached.
    Regards,
    Vinayaka

Maybe you are looking for