OSB: Associate work manager for a proxy service

Hi,
Can anyone please tell me how to associate workmanager(already present in the weblogic admin console) to a proxy service?
Thanks.
Kalpana.

In the proxy service configurations you will find "Dispatch Policy" there you can associate work managers with the proxy service

Similar Messages

OWSM user name token service policy for a proxy service at OSB

Hi Friends,
I am facing an issue while trying for the OWSM user name token service policy Authentication for a proxy service at OSB. I am using the PS4 SOA suite with AIA foundation pack. very first I am login into the EM console and choose the domain<soaosb_domain> form web logic domain I moved to security->security provide configuration. Inside the security provide configuration we have to key store section and I expand that and we have a configure button inside the keys tore. I click that button and it open a new page. In that page I got the Java key store (JKS) as the default key store and in the access Attributes I keep the default key store path and fill password and confirm password fields. Then in Identity certificates I fill the signature key and Encryption key with key Alias as 'orakey' and same password which I am mentioned at access Attributes. I got the message like the key store is created successfully. Then I restarted the server and again I am login into the EM console and choose the domain<soaosb_domain> form web logic domain I moved to security. In security I choose the credentials. In credentials we have create key. In the create key I add the key as hari-key and provide the hari as a user and his password.
While trying to test the proxy service i am getting the [OSB Security - OWSM: 387253] Failed to initialize OWSM Credential Manager. Please validate the Key store Configuration.
can anyone please look at this and suggest me how can I proceed for this.
Thanks
Hari

anyone please respond to the above request.
Thanks
Hari

OSB & WLST: changing operational settings for a proxy service via WLST

Hi all,
we are trying to change the operational settings for a proxy service via WLST.
In details we would like to change the "Logs" level (Monitoring section).
We have a lot of deployed services and our 'deployer people' need an automatic way (via WLST for example) for doing that instead of using the OSB console.
Thanks in advance
ferp

Hi,
OSB is the Oracle Service Bus. Oracle Service Bus is a configuration-based, policy-driven enterprise service bus.
The OSB is deployed into an Oracle WebLogic Server instance.
OSB uses also WLST functionality provided by WebLogic Server.
Best regards
ferp

How to restrict acess to a single user for a proxy service in OSB

how to restrict acess to a single user for a proxy service in OSB

A.     Go to Proxy Service and Click on the Security tab
B.     Click on Transport Acess Control Policies to Edit.
C.     Click on Add Conditions to Restrict the users.
D.     In the Predicate List Select the User Category
E.     Give the User Name to which you want to give access.

Using Identity Management for Securing Web Services

My goal is to associate my services with an Oracle Internet Directory. I made some attempts to set up SAML authentication for the web services, but it didn't have the right outcome.
(My identity management server and OID is up and running and I have successfully made authentication modules for other web applications)
Here is what I did:
1. I wrote a simple java file, used jdeveloper tools to create and deploy it as a web service to OC4J. I associated an identity management server with this service through OC4J web tools as security provider.
2. I made a data control for the web service and put it in an ADF application . (client)
3. I deployed the client project(2) to OC4J.
I could use the web service through the page.
Then
I secured the webservice to expect SAML for authentication.
Surprisingly, the client could still communicate with the webservice, Why? Shouldn't it have rejected the request because of the problem in SAML token? (The proxy and the data control were not secured, and didn't provide any SAML tokens)
4.
I added login page to my client project (through ADF security wizard). It used idenity management for authentication successfully. login process completes and web service data control is displayed.
5. I want the authentication information to be propagated through the page so that the web service receives the data and uses Identity Management.
I know I should add <property name="oracle.security.wss.propagate.identity" value ="true"/>
to one of the configuration files, but don't know where exactly.
Best Regards,
Farbod

It doesnt matter whether the service is invoked as part of your larger process or not, if it is performing any business critical operation then it should be secured.
The idea of SOA / designing services is to have the services available so that it can be orchestrated as part of any other business process.
Today you may have secured your parent services and tomorrow you could come up with a new service which may use one of the existing lower level services.
If all the services are in one Application server you can make the configuration/development environment lot easier by securing them using the Gateway.
Typical probelm with any gateway architecture is that the service is available without any security enforcement when accessed directly.
You can enforce rules at your network layer to allow access to the App server only from Gateway.
When you have the liberty to use OWSM or any other WS-Security products, i would stay away from any extensions. Two things to consider
The next BPEL developer in your project may not be aware of Security extensions
Centralizing Security enforcement will make your development and security operations as loosely coupled and addresses scalability.
Thanks
Ram

Setting monitoring level for a Proxy Service programmatically

Hi there -
We've successfully created a Weblogic ALSB domain from scratch using WLST.
Now we'd like to adjust the monitoring level of our Proxy Services programmatically.
Are there any code samples illustrating how to achieve that?
The setServiceLogLevel() method of the ServiceConfigurationMBean looks promising, but I couldn't get it working and there doesn't seem to be any documentation in the API for this one or sample code available elsewhere.
Any hints are appreciated!
Cheers,
Jan

Anybody having luck using the setService*Level methods?
wls:/test/domainRuntime/DomainServices/ServiceConfiguration> ls('o')
-r-x setServiceLogLevel Void : com.bea.wli.config.Ref,com.bea.wli.sb.management.configuration.operations.LogSeverityLevel
-r-x setServiceLoggingEnabled Void : com.bea.wli.config.Ref,Boolean(isEnabled)
-r-x setServiceMonitoringEnabled Void : com.bea.wli.config.Ref,Boolean(isEnabled)
-r-x setServicePipelineAlertLevel Void : com.bea.wli.config.Ref,com.bea.wli.sb.management.configuration.operations.AlertSeverityLevel
-r-x setServicePipelineAlertingEnabled Void : com.bea.wli.config.Ref,Boolean(isEnabled)
-r-x setServiceReportingStatus Void : com.bea.wli.config.Ref,Boolean(isEnabled)
-r-x setServiceSLAAlertLevel Void : com.bea.wli.config.Ref,com.bea.wli.sb.management.configuration.operations.AlertSeverityLevel
Or where to find the documentation for com.bea.wli.sb.management.configuration.operations.LogSeverityLevel and the likes?
Looks like something internal, though:
wls:/test/domainRuntime/DomainServices/ServiceConfiguration> import com.bea.wli.sb.management.configuration.operations
Traceback (innermost last):
File "<console>", line 1, in ?
ImportError: No module named operations
Cheers,
Jan

Different workmanager for different proxy service

Hi All,
I want to use two seperate workmanager for my two proxy service, one of them will be ignore stuck thread = true and alternate will be false.
but when I am using them all time its using only one.
I am testing one more scenario, i have another proxy service which is using another Oracle AQ for polling, and i configured the dispatch policy default.
the expected behaviour was to see the stuck thread. but when I monitor the thread list. I am finding the second thread regarding DEQUQUE also comes in same workload manager.
Is there any way to use different workload manager for different services.
Regards,
Abhishek

Hi Ashish,
I Can give you one more option you no need to create different Material master records .
1. You main tain Material Usage Indicater at order level path is Spro ->IMG> Sales and distribution-->Sales --> Sales documents ---> Sales documents Header ---> Define Usage Indicators.
You can Define Material usage 1.Delux rooms 2.Non Delux rooms.
2. You take field Material Usage in to Price condition table, put the table in the access sequence of Service price condition type and finally maintain condition record with Material Usage key combination.(Here you can maintain different rates for delux and nondelux.
3. Now if you enter Material Usage as Delux while creating order the system will take the price based on the key field, If you enter Non delux it will pick up specific price.
4.You can put Material usage field in incompletionlog
I hope it will Help you
Regard,
Murali.

OSB - Setting http Authorization header with Proxy Service

Hi,
I have the following scenario:
PS1 -> PS2 -> BS (with a SA configured to pass through)
I need to set the Authorization http header based on some information in payload, so:
PS1 receives the payload and route to PS2, where username/password are extracted and using a java call out the base64 hash is generated.
In the PS2 route i'm trying to set the Authorization header using the set Transport Headers option.
When i do a request to test this operation, osb show me a beautiful CredentialNotFound exception.
I have tryied to set the Authorization header in the route on the PS1, without success.
Someone can help me ?

I can't set the Proxy Service to do the authentication. I will try to explain better:
I have a Business Service which have a Service Account associated to pass through the Authorization header to the service provider do the validation.
I front of this business service i have a Proxy Service which route the requests to the BS.
All partners send this Authorization header, but now, i have one that will not send no matter what.
The username and passwrod will come into the payload (and will be variable).
In some point before the proccess i need to extract the information from payload and set the Authorization header.
Ty for you time.
Edited by: GSanches on 09/07/2010 09:59

Work around for radio tuner service not working

A work around for the lack of radio tuner service that has appearently hit Itunes versions lower than 11.
We all hope that Apple will restore Radio Tuner Service for us legacy products users soon, but I've been thrown under the bus more than once by Apple in the last 25 yrs to put much hope in that (I started with an Apple III w/a Z80 card running C/PM, yeah I'm that old)
Have your iTunes and your favorite browser open.
In your browser go to http://vtuner.com/setupapp/guide/asp/BrowseStations/startpage.asp
This will give you a list of Genre's, etc of streaming internet stations.
When you select a genre you'll get a list of stations that shows station ID, what type of feed codec and data rate.
Select any of the AAC or MP3 feeds.
Select play.
This will send a small download file to your computer containing the selected feeds URL.
Your computer will ask what app to use to open the file, select iTunes.
This will automatically open a file called Internet Songs at the end of Playlists in iTunes (if you don't already have one), and will install the URL there.
All the stations you selected will now be permanently stored in Internet Songs.
Viola, your very own custom personal internet radio playlist!
GT
Dual Core 2Ghz G5, 9.22/10.4.11/10.5.8

Apperently iTunes 11 is not affected (Apple stil makes iTunes11 for the 14 yr old Microsoft XP OS, but not for anything PPCs can run. Go figure)
"Next door" to Steve was metaphoric, he lived in Los Altos, about 15 miles away, but he cast a big shadow!
On 9.2.1/10.4.11 differences, some time in the past someone selected 'save file' and checked the box 'don't ask again' on your computers dialog box. That's why you're not given a choice wih the file downloads. I would think that selection should be able to be reversed.
iTunes 9.2.1/OS10.4.11 puts those downloaded URLs into the Music Libary of iTunes, no matter if it's opened directly, or you click on the file on your desktop. You can create a new playlist, highlight the selection in the Music Libary, and drag it to your new playlist to keep alll the steaming URLs together. NOTE, this only creates an alias, the URL copied by iTunes must remain in the Music Libary. You can then delete the the files on the desktop, if you want. I did multiple stations this way in 9.2.1, they all show in either the new playlist created, or in the Music Libary, and remain after the desktop files are deleted and trash emptied.
You can switch sations by double clicking them. Another note, all the URLs were all from vtune.
I hope this helps.
PS, I forgot how clunky Tiger is compared to Leopard...

Session management for a web service

I am building a web service where the user will need to login and the application will need to maintain a persistent session. I am using Apache Axis2 for client/server communication via SOAP/XML. What would the simplest and most common way of doing this? I know I could implement session management from scratch similarly to how a browser does it, using cookies, but I'd rather use standard Java libraries for this. Am I correct in assuming that even though I'm using Axis2, the solution doesn't really have anything to do with Axis2 since Axis2 is basically just a way for the client/server to send messages to each other?
I've read a lot of information online about this, but there's so much information that it's hard to know where to start. Basically I'm just looking for someone to point me in the right direction on what classes to use and so on. I just need a simple username password authentication and session management system for a web service.

Container Managed Authentication. Does everything you need.

SAP JAM work pattern for SAP C4C Service ticket

Can anybody familiar with the SAP JAM Work pattern for SAP Cloud for Customer Service tickets answer these questions?
My client would like to use SAP JAM groups in Service tickets in the following way:
C4C service agents raise service tickets which are then worked on by back-office departments (who don't have access to C4C but will collaborate on ticket resolution via SAP JAM)
Back-office departments work on a high volume of tickets so having one JAM group per ticket is not practical. Instead we would like to have one JAM group per department
Departmental JAM groups should be created in JAM independently from C4C
Upon ticket creation in C4C, the service agent should be able to select the relevant departmental JAM group to collaborate and start a discussion topic
The agent should be able to easily pick up any update/reply from the back office team on the topic he created
Is the scenario above supported? In particular, how can one predefine/auto-select which JAM group is assigned to a service ticket?

Can anybody familiar with the SAP JAM Work pattern for SAP Cloud for Customer Service tickets answer these questions?
My client would like to use SAP JAM groups in Service tickets in the following way:
C4C service agents raise service tickets which are then worked on by back-office departments (who don't have access to C4C but will collaborate on ticket resolution via SAP JAM)
Back-office departments work on a high volume of tickets so having one JAM group per ticket is not practical. Instead we would like to have one JAM group per department
Departmental JAM groups should be created in JAM independently from C4C
Upon ticket creation in C4C, the service agent should be able to select the relevant departmental JAM group to collaborate and start a discussion topic
The agent should be able to easily pick up any update/reply from the back office team on the topic he created
Is the scenario above supported? In particular, how can one predefine/auto-select which JAM group is assigned to a service ticket?

Using work manager for third party connections

Folks we are trying implement work manager to
Allthough WL is self tuning, and you could "increase the internal socket pool", you have to fully understand the implications of this.
-It increases the # of threads, which ultimately degrades performance, due to the amount of context switching which would have to occur (this is at the application layer)... in general
-It will require additional memory, of which, we'd need to account for this, otherwise, it can run the WL instance out of memory, if we're in a fault condition
Let me explain this "fault" condition a little further...
There's a BIG difference between a 3rd party being down, and a 3rd party being able to respond to our request, but unable to process it in a timely fashion (i.e. they're overloaded, or the tcp connection is happening properly, but the application response from the 3rd party isn't properly responding/working in a timely fashion). We've seen this condition on a # of occasions and need to be able to have a max limit or governor on each 3rd party... of which, my understanding of WL work managers allows for this (I do have to note, I am not experienced with these, and my knowledge is only with what I've had time to read on). Ultimately, I'm trying to prevent the condition I've seen in a # of serious "slow downs" or hang-ups within the application... we should NOT be able to have 3rd party calls hamper the performance or availability of our application

Note that you can reduce the context switching by 'pinning' certain CPUs to handle, for example, the network interrupts.
You can use (on Linux): cat /proc/interrupts (shows information related to hard interrupts).
From http://middlewaremagic.com/weblogic/?p=8133
"In a multi-processor environment, interrupts are handled by each processor. Two principles have proven to be most efficient when it comes to interrupt handling:
Bind processes that cause a significant amount of interrupts to a CPU. CPU affinity enables the system administrator to bind interrupts to a group or a single physical processor (of course, this does not apply on a single CPU system). To change the affinity of any given IRQ, go into /proc/irq/<number of respective irq>/ and change the CPU mask stored in the file smp_affinity. To set the affinity of IRQ 19 (which in the above example is the network interface card) to the first CPU, we can use echo 2 > /proc/irq/19/smp_affinity."
To configure a work manager properly, you have to throttle the maximum threads and the capacity. The maximum number of threads are the number of threads
that are allowed to run simultaneously. Usually, you set this equal to some resource (such as the number of connections in a data source). This to prevent
contention for that resource (otherwise the thread would be waiting for the resource and thus consuming CPU cycles by polling if can go or not). When the maximum
is reached no other threads are spawned to run. The request that comes in is put into a piece of work and stays that way until an execute thread comes available
to process that work. The number of work instances you allow in your heap can be set by the capacity constraint (which thus throttles the memory consumption).
When the capacity is reached, new requests are rejected.

Java.lang.OutOfMemoryError when editing a routing note for a Proxy Service?

Hi,
Does anyone know why I am getting a java.lang.OutOfMemoryError in the AqualLogic Service Bus logs which freezes the browser (IE) when I try to edit a route node of a proxy service? I can change the name of the node but when I try to edit the node itself, the interface freezes and the out of memory thrown by the Service Bus. I have tried restarting the server etc..... The java memory allocated should already be adequate as it is set to 512Mb. All I can think of doing next is to uninstall the Service Bus and reinstall.
The logs I am getting can be seen below.....
Welcome, weblogic Connected to : servicebus Home WLS Console Logout Help AskBEA
weblogic session Created 9/01/08 13:46 No Conflicts 3 Change(s) 1 Active Session(s)
The source of this error is com.bea.portlet.adapter.scopedcontent.ActionLookupFailedException: java.lang.OutOfMemoryError at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.executeAction(ScopedContentCommonSupport.java:699) at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.renderInternal(ScopedContentCommonSupport.java:268) at com.bea.portlet.adapter.scopedcontent.StrutsStubImpl.render(StrutsStubImpl.java:107) at com.bea.netuix.servlets.controls.content.NetuiContent.preRender(NetuiContent.java:288) at com.bea.netuix.nf.ControlLifecycle$6.visit(ControlLifecycle.java:427) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:708) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:720) at com.bea.netuix.nf.ControlTreeWalker.walk(ControlTreeWalker.java:183) at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:361) at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:339) at com.bea.netuix.nf.Lifecycle.runOutbound(Lifecycle.java:186) Caused by: java.lang.OutOfMemoryError
Thanking you in advance for any help/insight.

Okay, I fixed the "Incompatible initial and maximum heap sizes specified" issue now. The problem was that in the lh.bat script the parameter -Xmx128M was hardcoded and overwrote my own -Xmx setting.
I now set JAVA_OPTS to "-Xms1400m -Xmx1400m" which is the maximum that Java accepts without complaining about too little memory. However, I still get the OutOfMemoryError and in addition to that I now also get this error:
com.waveset.util.Shutdown: Sorry! This repository has been shut down by an administrator. Please try to get another instance.
I've googled already but found only two sites and those weren't really helpful. So, any help is very much appreciated!
Thanks,
David

Can't Find Custom Work Manager For Resource Adapter

I'm creating an inbound resource adapter and wish to throttle the number of connections via a custom work manager.
If I understand the BEA docs, I can declare and define a resource adapter's work manager inside of its entry in weblogic-ra.xml .
For example:
<?xml version = "1.0"?>
<weblogic-connector xmlns="http://www.bea.com/ns/weblogic/90">
<jndi-name>InboundRA</jndi-name>

<work-manager>
     <name>CustomWM</name>
     <max-threads-constraint>
<name>maxthreads</name>
     <count>3</count>
     </max-threads-constraint>
</work-manager>
However, upon startup I see :
<BEA-002919> <Unable to find a WorkManager with name CustomWM . Dispatch policy CustomWM will map to the default WorkManager for the application appsdirCustom_ear> .
So it uses the default work manager.

Well, I did it again. Solved my own problem two hours after I posted it. Which, I guess, is better than not solving it.
I mistakenly thought that the <work-manager> entry in weblogic-ra.xml is a declaration. It is apparently a reference.
I declared a WorkManager of the same name in the WLS 9 console, restarted the server, and it appears that I am now using the custom work manager.
The max-threads constraint also works.

Work Manager and the Invocation Service - Items Queued?

Hi,
After reading the user guide & javadocs and searching this forum, I can't find documentation on how an Invocation Service works behind the scenes. I'm implementing a WorkManager (which sits atop an incovation service) with the goal of using some nodes in my Coherence cluster as essentially a distributed thread pool for parallel execution of work.
I want to know:
a) How work items are queued when all threads dedicated to the WorkManager are in use. I assume a cache is spawned to handle this, but if a queue is used, how do I configure the depth?
b) Can thread count be throttled dynamically? The post linked below seems to have tried it, but is there no cleaner way since the service is configured prior to startup? Maybe this has changed since 3.4.
How Can a Service's Configuration Be Modified Dynamically
Thanks

To answer Luk's question - yes the change in thread count took affect without me having to restart the service. I have only changed cache service thread counts via JMX but I assume invocation services would be the same.
Roberto,
Regarding the queue size - I suspect this is limited by the amount of heap your process has. Presumably Coherence uses some sort of queue structure internally to hold the requests and this is likely only limited by memory - or maybe number of entries if it uses an int for its size.
I am sure if you try hard enough you could blow the queue size if you could somehow push a sufficiently large number of slow running tasks into the server and even eaiser if your invocables contained a lot of data themselves so they took up more heap.
It would be very simple to write a test the just fires in invocables at a fast enough rate and see what happens.
JK

OSB: Associate work manager for a proxy service

Similar Messages

Maybe you are looking for