OWSM server agent for BPEL process in Weblogic

Hello,
We are trying to protect a BPEL process (in Weblogic) with a OWSM server agent, but we couldn't find clear guidelines on that.
OWSM 10.1.3.x is in one machine, and Oracle BPEL 10.1.3.x is in another, with Weblogic 9.2.
Can anyone give us instructions or tips on how to do this, considering this scenario?
Thanks a lot.
Daniel Viero.

Dave, Andre,
It's unfortunate that you were given incorrect information.
Let's take this issue offline by contacting me directly.
OWSM agent support for .NET was taken out as .NET was going through multiple revisions while 10.1.3.1 was being developed, and the old agent wasn't compatible with the new .NET versions; and there were resource restrictions on our part to keep up with the new version support.
While on this topic, I would like to hear from you and others what their thoughts are around this kind of support in a future release.
1. We could add back .NET agent (similar to 4.0.3)
2. We could manage the policies for .NET through Oracle Enterprise Manager while letting the .NET framework enforce them. This will allow for centralized management of policies, while leveraging the security stack of .NET for enforcement.
Which approach would you prefer?
Thanks,
Vikas Jain
http://ws-security.blogspot.com

Similar Messages

  • BPEL Web Service with OWSM Server Agent  NOT AUTHENTICATING

    I have deployed OWSM Server Agent to enable WS-Security Username/Password Authentication following the steps in the below URL.
    http://www.oracle.com/technology/obe/fusion_middleware/owsm/secure%20soa/securing%20soa%20with%20owsm.htm
    Section: Creating and Installing an Oracle WSM Server Agent
    The OWSM agent configuration is working fine with individual Web Services.
    For BPEL, the authentication is not happening if we call the default endpoint from JAVA proxy or Soap UI e.g
    http://host.domainame:7777/orabpel/bpelprocess1/050101 - Authenticates as per the OWSM policy and WORKS FINE
    http://host.domainame:7777/orabpel/bpelprocess1 - Executes the process WITHOUT authenticating
    Any help would be appreciated.
    Thanks
    Shehzad

    Did you resolve this issue ? We are having same issue with one of our BPEL process ........ any help would be highly appreciated .....
    Thanks in Advance

  • After restart only one OWSM server agent is installed

    I have created two OWSM server agents. One for the home container, the other for a custom container. (SOA Suite 10.1.3.3 - Basic install)
    Whenever the Application Server is restarted, only the home container's server agent remains installed. I have to run wsmadmin.sh again to install the second agent before the custom container services are accessible again.
    Is there any way to avoid having to do this?

    Yes, there is a server agent for weblogic, see http://www.oracle.com/technology/software/products/web-services-manager/index.html to download it (see Third-Party Server Agents). The zip file also contains a pdf about the installation.
    Kind Regards,
    Andre

  • How to maintain List Of Values (LOV's) for BPEL Processes

    We are integrating two systems.Source and destination systems store data in different formats. For example State is stored as a string in source and its stored as an number in destination system. In BPEL we are trying to transform this information and send it to destination system so that it understands the incoming data.
    A sample of transformation we need to do is as shown below.
    State in Source     Sate in Destination
    Texas               1
    Nebraska          2
    But we have so many fields that we need to transform as we are doing for State.
    What is the best way of handling these domain mappings in BPEL. I want to know is there any efficient way we can handle this in BPEL as we do in J2EE applications(Maintaining them in Domain tables and making them available for all functionalities).
    We are looking to hold all these domain mappings at one place and use in all the processes we design.Can anyone suggest a better way to handle this for BPEL processes.

    Hi,
    I am using the lookup-xml for maintaining list of values.But dont know whats the problem unable to get the output.
    Example: this is just a sample one which i am testing.
    My xml file is placed in c folder with the name "StateList.xml" which contains the following info.
    <?xml version="1.0"?>
    <Countries>
    <Country><Abbreviation>CO</Abbreviation><FullName>CO</FullName></Country>
    <Country><Abbreviation>CT</Abbreviation><FullName>Connecticut</FullName></Country>
    <Country><Abbreviation>ID</Abbreviation><FullName>Idaho</FullName></Country>
    <Country><Abbreviation>NJ</Abbreviation><FullName>New Jersey</FullName></Country>
    <Country><Abbreviation>AP</Abbreviation><FullName>Andhra Pradesh</FullName></Country>
    </Countries>
    And in BPEL, in the transformation i am taking the input and assigning this lookup value to the output variable as follows :
    <ns1:result>
    <xsl:value-of select="orcl:lookup-xml('file:/c:/StateList.xml','/Countries/Country','Abbreviation','FullName',/ns1:HelloWorldPavanaProcessRequest/ns1:input)"/>
    </ns1:result>
    But unable to get the result.Kindly help me out in this.
    Regards,
    Pavana

  • Inbound security for BPEL processes

    Hello,
    I am trying to enable Inbound security for BPEL processes. i made changes to message-handlers.xml as specified in the document.
    However when i sent a test message using AXIS API, i am getting the below error.
    Error while invoking inbound message handler.
    An error has occurred while attempting to invoke the inbound message handler class "class com.collaxa.cube.security.Authenticator" for the message "". The exception reported was: Could not apply security [No username provided, security expects user]
    I am using one of User Ids specified in system-jazn-data.xml and I can see that input soap message has a usernametoken . Any Inputs please?
    Thanks

    If you want to use the BPEL tool you can simulate some load using the initiate option. There is a checkbox where you can specify the load you want to perform.
    Otherwise you need to use products such as Mercury (now HP) Load Runner. This is an expensive option but gives you very good output. The other option is to develop your own scripts to test the performance.
    cheers
    James

  • Error when deploying BPEL Process to Weblogic 11g

    Hi,
    I have just started to use JDev and SOA, so I am new to this.
    I have created numerous BPEL processes in JDev 11.1.1.5.0 which im trying to deploy to the SOA domain on Weblogic 10.3.4.0 however each time the same error appears:
    [09:24:35 AM] ---- Deployment started. ----
    [09:24:35 AM] Target platform is (Weblogic 10.3).
    [09:24:35 AM] Running dependency analysis...
    [09:24:36 AM] Building...
    [09:24:53 AM] Deploying profile...
    [09:24:53 AM] Updating revision id for the SOA Project 'Project1.jpr' to '1.0'..
    [09:24:54 AM] Wrote Archive Module to C:\JDeveloper\mywork\JETEST\Project1\deploy\sca_Project1_rev1.0.jar
    [09:24:54 AM] Deploying sca_Project1_rev1.0.jar to partition "default" on server soa_server1 [http://hostname:8001]
    [09:24:54 AM] Processing sar=/C:/JDeveloper/mywork/JETEST/Project1/deploy/sca_Project1_rev1.0.jar
    [09:24:54 AM] Adding sar file - C:\JDeveloper\mywork\JETEST\Project1\deploy\sca_Project1_rev1.0.jar
    [09:24:54 AM] Preparing to send HTTP request for deployment
    [09:24:54 AM] Creating HTTP connection to host:[http://hostname:8001]
    [09:24:54 AM] Sending internal deployment descriptor
    [09:24:54 AM] Sending archive - sca_Project1_rev1.0.jar
    [09:24:59 AM] Received HTTP response from the server, response code=500
    [09:24:59 AM] Error deploying archive sca_Project1_rev1.0.jar to partition "default" on server soa_server1 [http://hostname:8001]
    [09:24:59 AM] HTTP error code returned [500]
    [09:24:59 AM] Error message from server:
    There was an error deploying the composite on soa_server1: Deployment Failed: Error occurred during deployment of component: BPELProcess1 to service engine: implementation.bpel, for composite: Project1: ORABPEL-05250
    Error deploying BPEL suitcase.
    error while attempting to deploy the BPEL component file "/u01/app/oracle/product/Middleware/user_projects/domains/soa_domain/servers/soa_server1/dc/soa_65920eec-7e29-45fd-a66f-53dc157b8618"; the exception reported is: java.lang.NoClassDefFoundError: Could not initialize class com.collaxa.cube.util.JavaHelper
    This error contained an exception thrown by the underlying deployment module.
    Verify the exception trace in the log (with logging level set to debug mode).
    [09:24:59 AM] Check server log for more details.
    [09:24:59 AM] Error deploying archive sca_Project1_rev1.0.jar to partition "default" on server soa_server1 [http://hostname:8001]
    [09:24:59 AM] #### Deployment incomplete. ####
    [09:24:59 AM] Error deploying archive file:/C:/JDeveloper/mywork/JETEST/Project1/deploy/sca_Project1_rev1.0.jar
    (oracle.tip.tools.ide.fabric.deploy.common.SOARemoteDeployer)
    Can anyone help?
    Cheers

    I have created numerous BPEL processes in JDev 11.1.1.5.0 which im trying to deploy to the SOA domain on Weblogic 10.3.4.0 however each time the same error appears:Did you check server log? Exactly which class it is not able to find?
    Regards,
    Anuj

  • Oracle SFTP adapter Configuration for BPEL  process (11.1.1.3 )

    Hi All,
    Can someone tell me how to configure the FTP adapter for window's server.
    We already have a bpel process with FTP adapter but it is set up for unix server , we want to change the location to window's server.
    Can any one provide me with what changes need to be made at the ftp adapter level in jdeveloper and also on the weblogic console for the existing bpel process .
    Thanks in advance.

    Thanks a lot!
    Will follow the steps as mentioned in the link: SOA / BPM on Oracle Fusion Middleware: SOA Suite 11g - FTP Adapter
    I am confused about the path mentioned while configuring the adapter in jdev Physical path for windows  should be the ftp server path provided by client and it should begin with  \winserver\local    and not like \\winserver\local  ???
    +
    The configuration needs to be done on the weblogic console also as mentioned in the above link so for this FTP server - login details - host ,username /password , serverType is required.

  • Implementing Security for BPEL Process

    Hi,
    We have a requirement to add security layer to BPEL processes (BPEL 10.1.3.4) deployed on WL 9.2. Client has asked us to implement PKI for WL domain.
    Please guide me regarding the same.
    Regards,
    Prabodh Mitra
    P.S. we are not using OWSM due to some business reasons

    Hi,
    Can you please provide any docs related to implementing pki/ssl in a BPEL-WLS env ? I have tried, but in vain.
    These are the questions I have,
    1. BPEL is installed on a separate domain in WLS. How will we enable SSL here? Is it ok if we enable at admin server level ?
    2. Do we need to do some configuration on BPEL side as we do in OAS setup?
    Thanks in advance.
    Regards,
    AP

  • SOLVED: OWSM Server Agent deployment to 'home' not 'oc4j_soa'

    Hi
    I've just installed an OWSM agent to manage my web services. By default it has installed it on the oc4j_soa oc4j, which makes sense as this is where BPEL and ESB processes get deployed.
    However, my individual services, which I also want to secure are deployed to the 'home' oc4j. Can I change either where the web services are deployed or, additionally deploy an agent to this oc4j?
    Any help would be most appreciated.
    Chris
    Change: Actually, I have changed the oc4j instance where I deploy the services to now, so this is no longer an issue!
    Message was edited by:
    chriseb
    Message was edited by:
    chriseb

    Denis, Bas, Thanks for your replies.
    Was out of the office yesterday.....I think this may be the way i was testing this.
    If i try running my secured BPEL Process from the Test Page in OWSM or i try to initiate it from the BPEL Console it only works if i provide authentication info which is what i would expect ...however, if i try to initiate the secured BPEL process from another BPEL Process, i can invoke it without parsing any credentials!

  • Business Activity Monitoring for BPEL Processes

    Hello,
    IEP is capable of monitoring real time events, Real time business event collection and processing.
    In that case, can we use IEP to monitor BPEL process activities with activity data.
    One very big part, the ability to provide functionality for third parties (clients like Me) to register some sort of observer to capture live BPEL process activity, is missing.
    I'm trying to cover that big hole in my project. That's the reason I'm posting about BPEL process management capabilities and events.
    But I got no concrete answers for that. Not every business use can be provided by any generic system.
    I looked at CAM (which comes with Alaska build). But I couldn't get much info about entire picture.
    Other BPEL engines, the one I have used, has the functionality to do activity monitoring and process management. (IBM Process server, Apache ODE)
    Could any IEP, BPEL component developers answer any sort of solution to my use case?
    Thank you
    Raja

    I agree that this would be very useful. If anyone can provide additional insight it would be much appreciated.

  • Jdeveloper 10.1.3.4 Test Connection failed for BPEL Process Manager.

    Application Server: OK
    BPEL Process Manager Server: FAILED
    ESB Server: OK
    Verified and tried below steps:
    1. hw_services and orabpel and deploy_services are up and running
    2. Jdeveloper and Oracle SOA Suite Version is 10.1.3.4
    3. Tools->Preferences -> Web Browser and Proxy is disabled.
    4. Restarted hw_services and orabpel via Application server control for OC4J_SOA > hw_services/orabpel
    5. Able to connect the bpel process manager(BPELConsole) from Browser.
    6. But Not able deploy using ant tool as well as with Jdev Deploy option(no domains are displayed under deploy option in Jdev)
    7. Ant deployment throws error,
    A problem occured while connecting to server "testinstance.com" using port "7777": <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <HTML><HEAD>
    <TITLE>404 Not Found</TITLE>
    </HEAD><BODY>
    <H1>Not Found</H1>
    The requested URL /integration/services/deploy/deployHttpClientProcess.jsp was not found on this server.<P>
    <HR>
    <ADDRESS>Oracle-Application-Server-10g/10.1.3.4.0 Oracle-HTTP-Server Server at testsoa.art.com Port 7777</ADDRESS>
    </BODY></HTML>
    Went thru many threads under soa/bpel forums and couldn't find it worked.
    Appreciate your help

    Application Server Test     Passed
    BPEL Identity Service     Failed
    BPEL Domains     Not Run
    BPEL Server Mode      Not Run
    BPEL Notification Service     Not Run
    BPEL TaskManager Service     Not Run
    ESB Connection     Passed
    When I select "BPEL Identity Service     Failed" the error displayed as is below. But for the Not Run components it says "Not Executed".
    java.lang.Exception:Exception not handled by the Collaxa Cube system.
    An unhandled exception has been thrown in the Collaxa Cube system. The exception reported is: "ORABPEL-10555
    Identity Service Configuration error.
    Identity Service Configuration file has error.
         at oracle.tip.pc.services.identity.config.ISConfiguration.load(ISConfiguration.java:277)
         at oracle.tip.pc.services.identity.config.ISConfiguration.<clinit>(ISConfiguration.java:94)
         at oracle.bpel.services.workflow.task.impl.WorkflowUtil.setUserNameCaseSensitiveFlagOnServer(WorkflowUtil.java:1193)
         at oracle.bpel.services.workflow.task.impl.TaskService.<init>(TaskService.java:196)
         at oracle.bpel.services.workflow.task.impl.TaskService.<clinit>(TaskService.java:153)
         at oracle.bpel.services.common.InitializeServlet.init(InitializeServlet.java:56)
         at com.evermind.server.http.HttpApplication.loadServlet(HttpApplication.java:2379)
         at com.evermind.server.http.HttpApplication.findServlet(HttpApplication.java:4830)
         at com.evermind.server.http.HttpApplication.findServlet(HttpApplication.java:4754)
         at com.evermind.server.http.HttpApplication.initPreloadServlets(HttpApplication.java:4942)
         at com.evermind.server.http.HttpApplication.initDynamic(HttpApplication.java:1144)
         at com.evermind.server.http.HttpApplication.<init>(HttpApplication.java:741)
         at com.evermind.server.ApplicationStateRunning.getHttpApplication(ApplicationStateRunning.java:431)
         at com.evermind.server.Application.getHttpApplication(Application.java:586)
         at com.evermind.server.http.HttpSite$HttpApplicationRunTimeReference.createHttpApplicationFromReference(HttpSite.java:1987)
         at com.evermind.server.http.HttpSite$HttpApplicationRunTimeReference.<init>(HttpSite.java:1906)
         at com.evermind.server.http.HttpSite.initApplications(HttpSite.java:643)
         at com.evermind.server.http.HttpSite.setConfig(HttpSite.java:290)
         at com.evermind.server.http.HttpServer.setSites(HttpServer.java:270)
         at com.evermind.server.http.HttpServer.setConfig(HttpServer.java:177)
         at com.evermind.server.ApplicationServer.initializeHttp(ApplicationServer.java:2493)
         at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:1042)
         at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:131)
         at java.lang.Thread.run(Thread.java:595)
    Caused by: oracle.xml.parser.v2.XMLParseException: Start of root element expected.
         at oracle.xml.parser.v2.XMLError.flushErrors1(XMLError.java:320)
         at oracle.xml.parser.v2.NonValidatingParser.parseRootElement(NonValidatingParser.java:341)
         at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:303)
         at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:291)
         at oracle.tip.pc.services.identity.config.ISConfiguration.parseDocument(ISConfiguration.java:339)
         at oracle.tip.pc.services.identity.config.ISConfiguration.load(ISConfiguration.java:259)
         ... 23 more
    Exception: ORABPEL-10555
    Identity Service Configuration error.
    Identity Service Configuration file has error.
    Handled As: oracle.tip.pc.infra.exception.PCRuntimeException

  • Modifying Memory Optimization parameter for BPEL process in SOA 11g

    Hello
    I have turned on memory optimization parameter for my BPEL process in the composite.xml (11g)
    this is what I have in composite.xml:
    <property name="bpel.config.inMemoryOptimization">false</property>
    How do we modify this parameter in the EM console at runtime? I changed this property to "true" using the System MBean browser, but it wasn't taking effect. I thought the SOA server must be restarted (similar to what we used to do in 10g). But when I restart the SOA server, the parameter goes back to whatever the value was in the composite.xml ignoring the change I made in the System MBean browser
    Please share your thoughts.
    Thanks in advance.
    Raja

    Deploying a newer version is not an option, as the endpoints could change (not sure if it would in 11g, but in 10g it does) and also, our service consumers will be pointing to the older version.As mentioned above, if clients are using URL without version then call will be forwarded to default version of composite internally. No manual tweaking required for this. Just make sure that while deploying the new version you are marking it as default.
    Besides, we report on service metrics and having multiple versions just complicates things.Not at all. If you are not using versioning feature, you are really under utilizing the Oracle SOA 11g. Remember that metrics can be collected for a single composite with same effort, irrespective of the number of composite versions deployed. Only few product tables refer the version while storing composite name and rest all use only the composite name without version. I do not know how you are collecting service metrics but we use DB jobs for same it works perfectly with any number of composites having multiple versions deployed.
    The idea is to do some debugging and collect audit trail in case there is a production issue by disabling inMemoryOptimization parameter. This is a live production environment and deploying whenever we want is not even an option for us, unfortunately. Why not debug by increasing log level. Diagnostic logs are the best option to debug an issue even in production. For getting audit trail you may re-produce the issue in lower environments. I think no organization will allow re-deployments just for debugging some issue in production until and unless it is too critical issue to handle.
    Does this not supported in 11g? if it isn't, it does seem like a bug to me. You may always go ahead and raise a case with support.
    Regards,
    Anuj

  • How to establish WS Security for BPEL processes running on Web Logic

    We are running SOA Suite 10.1.3.4 on Web Logic Server 9.2.
    I have built BPEL processes and now want to implement WS Security for them, "Wssp1.2-Wss1.0-UsernameToken-Plain-X509-Basic256.xml" in particular. Have been researching but could not find any document for a Web Logic scenario; can any of you please give me some directions or blogs which might be helpul.
    Appreciate your help in advance.
    Thanks!

    Hi
    Check the Link
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/526bd490-0201-0010-038e-d3ff7eb1d16e
    Regards ,
    Venkat

  • OWSM server agent installation

    Is it possible to install WSM server agents in other oc4j instances than the home instance? How? We've tried to find an option in the agent.properties, but no luck... Worse still, the installation script depends on libraries in the home instance for communicating with opmn.... The documentation only mentions changing the property file...

    See this thread for the solution: How to secure web service deployed on a different servers using OWSM?

  • Using the SQL Server Agent for the first time

    I have set up several jobs to run automatically throughout the day. Each job just does one thing: executes an SSIS package.
    The packages themselves run perfect when I test them in Visual Studio 2005, but when the SQL Server Agent tries to run the job I am getting failed jobs.
    Is there any tutorials or walkthroughs that can teach my about using the SQL Server Agent? If I wanted extensive help troubleshooting my SQL Server Agent problems which part of the message boards would I post that too?
    Thanks for the info!

    Anyone?
    I really need some resources for SQL Server Agent 2005.
    Refer these links,
    http://technet.microsoft.com/en-us/library/ms141701(v=sql.90).aspx
    http://stackoverflow.com/questions/10489392/permissions-issue-running-ssis-package-from-sql-job
    Regards, RSingh

Maybe you are looking for