OWSM Gateway Policy - Clock Skew

Hi,
We have a difference between our system clock and an incoming SOAP message header timestamp.
<wsu:Created> is well in advance of our system clock. Is there any way we can apply clock-skew setting to OWSM to stop the failure? Can't find anything in documentation.
Any help would be appreciated.
Thanks

Hi,
Anybody got any ideas on this please? We have logged a call with Oracle Support, but were hoping someone on the forum may have encountered this? Obvious answer would be to synch clocks, but that is not possible unfortunately!
Thanks

Similar Messages

Multiple OWSM Gateway's running against 1 Policy Server

Is it a supported configuration to have multiple OWSM Gateways running against one policy server?
Thanks,
Michael

It won't trash the applications (see http://java.sun.com/j2se/1.4.2/compatibility.html to get 100% proof). If you install a new version, this will be used by default (if you just use "java"). Of course you can still use other JREs / SDKs when you explicitely use the version ("c:\Programme\j2sdk1.4.2_04\bin\java").

Use Service URL from OWSM Gateway in Service Registry

Hi,
Is there a scenario in which the Service URL from the OWSM gateway is used in the UDDI registry?
Eg:
WebService <--------> OWSM Gateway <----------> OSR (UDDI)
Any information on this is much appreciated
Regards

Hi Vikas,
Well..you don't registrate a gateway in uddi.
When you registrate a service in owsm, it will generate a new wsdl for you. This wsdl you just need to registrate in uddi just like any other service with wsdl-interface.
So the authentication fields aren't in uddi configered either...those are just a policy step in owsm. Overthere you can decide how to propegate the values of username/password etc

OWSM gateway : Message not encrypted error

Hi,
I have a BPEL process which invokes a web service via partner link. Both BPEL and service are secured with OWSM gateway.In the policy defined for BPEL I'm doing Sign Message And Encrypt using XPath expression( which is working). In the policy for webservice I'm doing a Decrypt and Verify Signature . But its not invoking the service and throws a Client:GenericFault saying Message is not encrypted.
In fact the logs from BPEL after encryption shows encrypted data. But logs in service does not contain the same data.
Am I doing something wrong? Should I copy something ? I'm using the same keystore for both the policies. The version is 10.1.3.1
Please help me
Thanks
Meer

All of them are running with Win XP SP2 at work. NAT-Traversal: is Disabled. DMZ is enabled. Thanks

SOS~!!!About OWSM Gateway Question

Hi,
I've used the OWSM (SOA SUITE 10.1.3.1-linux)to do the following:
1) Created a Gateway Component
2)set policy
3)Registered a Service
4)Commited the policy
Service URL: http://b.cn.oracle.com:3115/gateway/services/SID0003004
Service WSDL URL: http://b.cn.oracle.com:3115/gateway/services/SID0003004?wsdl
I can access my original service,however failed by it.
the error info is "Oracle Web Services Manager Gateway C0003001: No policies found for service "SID0003004". Make sure the service is registered correctly and the gateway policies are up to date."

Hi,
Take a look at Re: OWSM gateway issue It might help.
Regards,
Mathias

OWSM customize policy step sign message

Hi,
is it possible to customize the OWSM policy step "sign message" ?
- to set the attribute mustUnderstand of the element wsse:Security to 0 (default is 1)
- to add the timestamp wsu:Expires to the security header (in addition to the wsu:Created timestamp)
Bye,
Markus

Hi Vikas,
Thanks for the reply.
I suspect that the "fiddling with the Outgoing Transport Protocol that is between OWSM Gateway and actual service" as mentioned in my original post is probably the same as "creating a custom transport messenger between gateway and service" as mentioned by you.
Any pointers to get me going, e.g. what interfaces te implement, classes to extend, how to register and manage with OWSM?
Thanks and best regards,
Sjoerd

OWSM Custom Policy Step: use of the setProcessingStage() method?

Hello,
When creating a Custom Policy Step for use in an OWSM pipeline the API provides the option to set the processing stage. Possible values are STAGE_PREREQUEST, STAGE_REQUEST, STAGE_RESPONSE and so on.
Can anyone tell me the use of setting the processing stage. Would it allow me to literally take the message request to a different stagewhat, e.g. what should happen when in the Request Stage I set it to STAGE_RESPONSE?
I have tried this and cannot see any effect.
Thanks, Sjoerd

Hi Vikas,
Thanks for the reply.
I suspect that the "fiddling with the Outgoing Transport Protocol that is between OWSM Gateway and actual service" as mentioned in my original post is probably the same as "creating a custom transport messenger between gateway and service" as mentioned by you.
Any pointers to get me going, e.g. what interfaces te implement, classes to extend, how to register and manage with OWSM?
Thanks and best regards,
Sjoerd

Schema validation in owsm gateway.

Hi all,
Could any one of you tell me how to validate the incoming message payload against the schema in the owsm gateway.
Thanks & regards,
Manoj Nair.

Hi Chintan,
I have OWSM Extensibility Guide for creating Custom Policy step, but i couldn't able to findout any thing..Iam very new to owsm, i really don't know how to create the custom policy step with help of this guide.. You have any information on how to create the custom step, for those who are new to owsm.
This is pertaining to validating the payload of the request pipeline using the xml shema.
I awaiting for your reply......
Thanks..

Unable to acess BPEL WSDL from OWSM Gateway

Hello all,
I'm trying to register a BPEL Process as a service on a OWSM gateway.
The BPEL WSLD is as follows:
<definitions name="WR01" targetNamespace="http://xmlns.oracle.com/WR01">
−
     <types>
−
     <schema attributeFormDefault="qualified" elementFormDefault="qualified" targetNamespace="http://xmlns.oracle.com/WR01">
−
     <element name="WR01ProcessRequest">
−
     <complexType>
−
     <sequence>
<element name="input" type="string"/>
</sequence>
</complexType>
</element>
−
     <element name="WR01ProcessResponse">
−
     <complexType>
−
     <sequence>
<element name="result" type="string"/>
</sequence>
</complexType>
</element>
</schema>
−
     <xsd:schema>
<xsd:import namespace="http://xmlns.oracle.com/pcbpel/adapter/db/top/WR01" schemaLocation="WR01.xsd"/>
</xsd:schema>
</types>
−
     <message name="WR01RequestMessage">
<part name="payload" element="ns1:Input"/>
</message>
−
     <message name="WR01ResponseMessage">
<part name="payload" element="ns1:Input"/>
</message>
−
     <portType name="WR01">
−
     <operation name="process">
<input message="tns:WR01RequestMessage"/>
<output message="tns:WR01ResponseMessage"/>
</operation>
</portType>
−
     <binding name="WR01Binding" type="tns:WR01">
<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
−
     <operation name="process">
<soap:operation style="document" soapAction="process"/>
−
     <input>
<soap:body use="literal"/>
</input>
−
     <output>
<soap:body use="literal"/>
</output>
</operation>
</binding>
−
     <service name="WR01">
−
     <port name="WR01Port" binding="tns:WR01Binding">
<soap:address location="http://dcmsinusapp02.dc.local:7780/orabpel/default/WR01/1.0"/>
</port>
</service>
−
     <plnk:partnerLinkType name="WR01">
−
     <plnk:role name="WR01Provider">
<plnk:portType name="tns:WR01"/>
</plnk:role>
</plnk:partnerLinkType>
</definitions>
The WSDL generated from the service registation on the gateway is as follows:
<definitions name="WR01" targetNamespace="http://xmlns.oracle.com/WR01">
−
     <types>
−
     <schema attributeFormDefault="qualified" elementFormDefault="qualified" targetNamespace="http://xmlns.oracle.com/WR01">
−
     <element name="WR01ProcessRequest">
−
     <complexType>
−
     <sequence>
<element name="input" type="string"/>
</sequence>
</complexType>
</element>
−
     <element name="WR01ProcessResponse">
−
     <complexType>
−
     <sequence>
<element name="result" type="string"/>
</sequence>
</complexType>
</element>
</schema>
−
     <xsd:schema>
<xsd:import namespace="http://xmlns.oracle.com/pcbpel/adapter/db/top/WR01" schemaLocation="WR01.xsd"/>
</xsd:schema>
</types>
−
     <message name="WR01RequestMessage">
<part name="payload" element="ns1:Input"/>
</message>
−
     <message name="WR01ResponseMessage">
<part name="payload" element="ns1:Input"/>
</message>
−
     <portType name="WR01">
−
     <operation name="process">
<input message="tns:WR01RequestMessage"/>
<output message="tns:WR01ResponseMessage"/>
</operation>
</portType>
−
     <binding name="WR01Binding" type="tns:WR01">
<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
−
     <operation name="process">
<soap:operation style="document" soapAction="process"/>
−
     <input>
<soap:body use="literal"/>
</input>
−
     <output>
<soap:body use="literal"/>
</output>
</operation>
</binding>
−
     <service name="WR01">
−
     <port name="WR01Port" binding="tns:WR01Binding">
<soap:address location="http://dcmsinusapp02.dc.local:7780/gateway/services/SID0003002"/>
</port>
</service>
−
     <plnk:partnerLinkType name="WR01">
−
     <plnk:role name="WR01Provider">
<plnk:portType name="tns:WR01"/>
</plnk:role>
</plnk:partnerLinkType>
</definitions>
When i test the acess using OWSM console or try and consume it on JDeveloper I get the following error:
java.io.IOException: The document 'http://dcmsinusapp02.dc.local:7780/gateway/services/WR01.xsd' contains HTML tags.
Reason is:
404 Not Found
OracleJSP: java.io.FileNotFoundException:
Set the init-param debug_mode to "true" to see the complete exception message
This file not found exception is related to /gateway/services/WR01.xsd of course.
I've mostly followed the OWSM documentation in order to register the service.
Am I doing anything wrong referencing xsd's or something similar?
Thanks in advance

Answer to my own question:
BPEL processes exposed via OWSM can't be used from JDEV ws proxy generator
But the real question is: how do I prevent relative paths to xsd's on bpel wsdl?
Any pointers?
Thanks

How to pass Username from OWSM Security policy in Oracle Apps Adapter .jca file

My BPEL process uses Oracle Applications Adapter. The following is the .jca file for the Adapter. The Username is initialized statically to "sysadmin" when I created the Adapter.Is it possible to pass in the username from the OWSM Security policy for the username value below? If so how to do? I appreciate your response.
<adapter-config name="EBSAdapter" adapter="Apps" wsdlLocation="../WSDLs/EBSAdapter.wsdl" xmlns="http://platform.integration.oracle/blocks/adapter/fw/metadata">
<connection-factory UIConnectionName="EBS1" location="eis/Apps/EBS1" UIConcurrentPgmName="" UIOracleAppType="DBOBJECT"/>
<endpoint-interaction portType="EBSAdapter_ptt" operation="EBSAdapter">
    <interaction-spec className="oracle.tip.adapter.apps.AppsStoredProcedureInteractionSpec">
      <property name="SchemaName" value="APPS"/>
      <property name="PackageName" value="INTG"/>
      <property name="ProcedureName" value="GET_USER_PROFILE1"/>
      <property name="IRepInternalName" value="PLSQL:INTG:WEBCENTER_GET_USER_PROFILE1"/>
      <property name="Username" value="sysadmin"/>
      <property name="Responsibility" value="System Administrator"/>
    </interaction-spec>
</endpoint-interaction>
</adapter-config>

1. Go to Invoke activity
2. Click on Properties tab.
3. click Add
4. Add this property "jca.apps.Username" and map it with either variable or expression.
5. Populate variable defined at previous step with some valid username value at runtime.
hope this helps.
Regards,
Karan
Oracle Fusion Middleware Blog

Error When Sending Service Request Through OWSM Gateway

We are trying to test using OWSM Gateways and Server Agents to sign and then verify messages being passed to a web service on a server. We have been able to get this to work with a simple HelloWorld type service without any problems. We then followed the exact same steps to do this with an actual service and it is not working.
We run the test from the "Test Page" inside the ccore GUI. We first test the connection directly to the service and receive a message about it missing the WS Security header. This is somewhat expected. Then, we send through the gateway which is set up to sign the message and pass along the header and receive the same error message:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"><env:Header/><env:Body><env:Fault xmlns="http://schemas.oblix.com/ws/2003/08/Faults"><faultcode xmlns="">:GenericFault</faultcode><faultstring xmlns="">WS-Security process failure:FAULT CODE: InvalidSecurity FAULT MESSAGE: Missing WS Security header in the SOAP message</faultstring><faultactor xmlns=""></faultactor></env:Fault></env:Body></env:Envelope>
We have checked the OWSM logs and can see that both times the server agent receives the request. The gateway logs, however, do not show any requests or responses even though the message should have gone through it. We do see these messages in the logs when testing our HelloWorld service with the same sign/verify settings. A review of the gateway.log file shows the following message displayed each time we submit a test to the malfunctioning service:
2007-10-18 10:30:22,263 INFO [AJPRequestHandler-HTTPThreadGroup-54] gateway.WSDLRegistry - Exception occured in updateWSDL
We have until tomorrow to get this issue resolved before development presses to move forward without OWSM security and we cannot have that. Your immediate assistance is required. Thank you.

Some additional research has been done here and it seems that web services created with SOAP 1.1 (such as the HelloWorld service) work just fine. The problem is with services created with SOAP 1.2. Are there separate configurations or changes that need to be made for SOAP 1.2 services?

OWSM GATEWAY PROBLEM .xsd error

Hi,
I am working on OWSM gateways.I deployed a mail web service and tried to virtualise it using OWSM gateways. I have registered the service . When i use the link for service wsdl generated by OWSM in internet explorer i can see the wsdl file but when do the same using test page in OWSM i get the following error.
java.io.IOException: The document 'http://localhost:8888/gateway/services/alshirawiMail.xsd' contains HTML tags.
Also i have only tried with web services but when i try to virtualise THE WHOLE BPEL PROCESS i get error like
java.io.IOException: The document 'http://localhost:8888/gateway/services/rule_doesnot_work.xsd' contains HTML tags.
Please reply.
Thanks and regards.
Vishnu
Message was edited by:
user607746

Hi
The problem with xsd resolved but now when i invoke the service from test page i am getting this error.
<env:Envelope
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">null
<env:Body>
<env:Fault
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<faultcode>env:Server</faultcode>
<faultstring>ORABPEL-08021 Cannot find partner wsdl. parnterLink "OWSM_SYNC_BPEL_PROCESS" is not found in process "OWSM_SYNC_BPEL_PROCESS" (revision "1.0") Please check the deployment descriptor of the process to find the correct partnerLink name. </faultstring>
null</env:Fault>
</env:Body>
</env:Envelope>

OWSM Gateway intercept by URL

Hi everybody. As I'm diving deeper into OWSM (10.1.3) the question is raised: is it possible to install OWSM Gateway and configure it in the way that this gateway will listen not only on gateway URL (generated from Register Service) but also on original service endpoint without having changed all my client code to point to gateway URL instead of original service endpoint. If this is not possible then how to prevend client apps from calling service endpoint directly?
Edited by: Baan, Jos on 23-feb-2010 15:56

Can anyone post any help from Oracle?

OWSM: Gateway is not ready to process requests

OWSM: Gateway is not ready to process requests
After I registered a service in a gateway with OWSM and when I intialize a client call using gateway virtualized URL fro BPEL, the first time call I always get the following fault. It is like a "wake-up" call. I had to initialize second call imediately following the first call get through gateway.
Can anyone help me to figure out how to keep the OWSM Gateway "awake" all the time and avoid first call gateway failure?
Thanks
<fault>
-<remoteFault xmlns="http://schemas.oracle.com/bpel/extension">
-<part name="code">
<code>Client.GenericFault
</code>
</part>
-<part name="summary">
<summary>Gateway is not ready to process requests
</summary>
</part>
-<part name="detail">
<detail>
<detail/>
</detail>
</part>
</remoteFault>
</fault>

Can anyone post any help from Oracle?

How to set clock skew property at client side when invoking web services

Hello,
now we're using weblogic 11g, we want to set the clock skew properties.
in server side, we "Create a Web Service security" to set the "Clock Skew" property, change it value from 60000 to 120000, then we invoke the web service from stand-alone client on another machine, the clock skew between the server machine an client machine is 80000. but it still throw exception:
javax.xml.ws.soap.SOAPFaultException: Message Created time past the current time even accounting for set clock skew+
at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.processResponse(TubeFactory.java:241)+
we think we still need set the clock skew at client side. in webloigc8.1 doc(http://download.oracle.com/docs/cd/E13222_01/wls/docs81/webserv/client.html), we find there's properties such as "weblogic.webservice.security.clock.precision" we can set in client side, but in weblogic 10.3 doc, we can't find these properties.
now how to set the clock skew at stand-alone client in weblogic 11g?
Thanks!
Fred

Hello,
now we're using weblogic 11g, we want to set the clock skew properties.
in server side, we "Create a Web Service security" to set the "Clock Skew" property, change it value from 60000 to 120000, then we invoke the web service from stand-alone client on another machine, the clock skew between the server machine an client machine is 80000. but it still throw exception:
javax.xml.ws.soap.SOAPFaultException: Message Created time past the current time even accounting for set clock skew+
at weblogic.wsee.jaxws.framework.jaxrpc.TubeFactory$JAXRPCTube.processResponse(TubeFactory.java:241)+
we think we still need set the clock skew at client side. in webloigc8.1 doc(http://download.oracle.com/docs/cd/E13222_01/wls/docs81/webserv/client.html), we find there's properties such as "weblogic.webservice.security.clock.precision" we can set in client side, but in weblogic 10.3 doc, we can't find these properties.
now how to set the clock skew at stand-alone client in weblogic 11g?
Thanks!
Fred

OWSM Gateway Policy - Clock Skew

Similar Messages

Maybe you are looking for