Policy File for WebService

I try to access a flex web service
<mx:WebService id="xxx" wsdl="
http://xxxxxx/sap/bc/srt/rfc/sap/AABBCC?wsdl"
showBusyCursor="true">
The system of the Web Service is not the same as "my system"
(where the SWF file is obtained from). Therefore I do need to load
the policy (crossdomain.xml): Security.loadPolicyFile( "
http://xxxxxx/sap/a/bc/crossdomain.xml").
For some reasons I can not put the crossdomain file on ROOT level,
so I have to load it explicitly.
My problem: How (which event) can I accomplish that the file
is loaded PRIOR(!) the <mx:WebService> tag is parsed and run.
My problem is, I do still get the security error, although I load
the file. I have cross-checked it with an alert message, the reason
is: None of the events I have placed the loading in, is completed
before the wsdl file is loaded.
Any idea how to overcome the problem?
Thanks

How can I create java string object in wlst?
I have to upload xacml document by using this object.
I have created MBean of type Realm by using following command:
wls:/DefaultDomain/edit/Deployments !> create('object','Realms')
object has been successsfully created but when I use the following command
xacmlFile = open('role-policy','object')
following error occurs:
IOError: Unknown open mode: object
Can any one tell me how can I remove this error?

Similar Messages

Unable to locate unrestricted policy files for the Sun JCE for download

My platform:
java version "1.6.0_26"
Java(TM) SE Runtime Environment (build 1.6.0_26-b03)
Oracle JRockit(R) (build R28.1.4-7-144370-1.6.0_26-20110617-2130-windows-x86_64, compiled mode)
I am unable to locate the Unlimited Strength Jurisdiction JCE files.
According to BouncyCastle for Java 1.6:
..."you must download the unrestricted policy files for the Sun JCE if you want the provider to work properly. The policy files can be found at the same place as the JDK download. Further information on this can be found in the Sun documentation on the JCE."

The version at the very bottom of http://www.oracle.com/technetwork/java/javase/downloads/index.html should work.

Policy files for Browsers

I've got an applet that I want to run in a browser, but I need to set up a policy file for it. I was wondering where this policy file should go and what it should be called so that the browser finds and uses it? Is there any difference between the location of a policy file for Internet Explorer and Netscape?
Thanks for your help,
David

My understanding is that if your applet is signed (even by a self-signed certificate), it gets its permission from the browser's security manager. Take a look at my file I/O demo at the link shown below:
http://home.attbi.com/~aokabc/FileIO/FileIOdemo.htm
You'll find more info about signing an applet in the first few links on the page. This demo is self-signed and require no change whatsoever in the user's policy file -- the browser (IE and NN4+) must be correctly set to run the demo (a pain in the butt).
V.V.

Java: Where are JCE Unlimited Strength Jurisdiction Policy Files for Java for Mac OS X 10.7?

I need to install the JCE Unlimited Strength Jurisdiction Policy Files for Java 1.6 under Mac OS X 10.7. I know where to get then from the Sun/Oracle Java download site, but want to make sure that these will work on the Mac. Or, are there Mac specific versions somewhere?

There's a jce.jar file in /System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/, so it appears that they're already in place, but that's just a WAG.

Where can I download the unrestricted policy files for the JCE?

I'm getting errors because I don't have the unrestricted policy files for the JCE. I've checked Sun's website, but I can't find them anywhere. Can someone provide me a link?

At the bottom of the JDK download page - http://java.sun.com/j2se/1.5.0/download.jsp

Got error when trying to generate Java proxy jar file for webservice

Hi,
I am having a warning message when trying to generate java proxy jar file on weblogic8.1
webservice test web app, the message is as follows:
"Warning Failed to generate client proxy from WSDL definition for this service.
Prescription Please verify the <types> section of the WSDL."
in the mean time, on weblogic starting terminal, I saw the following exceptions,
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\AlphaLength4Deserializer.java:36: cannot resolve symbol
symbol : class FacetUtils
location: package binding
weblogic.xml.schema.binding.FacetUtils.checkLengthFacet(__typed_obj,4L);
^
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\OSIFieldAnonTypeDeserializer.java:36: cannot resolve symbol
symbol : class FacetUtils
location: package binding
weblogic.xml.schema.binding.FacetUtils.checkMaxLengthFacet(__typed_obj,69L);
^
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\AlphaLength2Deserializer.java:36: cannot resolve symbol
symbol : class FacetUtils
location: package binding
weblogic.xml.schema.binding.FacetUtils.checkLengthFacet(__typed_obj,2L);
^
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\FreeFormAnonTypeDeserializer.java:36: cannot resolve symbol
symbol : class FacetUtils"
Can anybody help me about this issue? I attached WSDL file, also United Airlines
got an enterprise weblogic license deal with BEA, any help will be highly appreciated.
Thanks!!!
Naichen
[ModifyPNRWSContract.wsdl]

Hi Naichen,
I was able to successfully run both the autotype and clientgen Ant task, on the
WSDL you provided. The code behind those Ant tasks are pretty much what the WebLogic
Web Services test page run. Are you using WLS 8.1 SP2? If not, you might want
to try with that version.
Regards,
Mike Wooten
"Naichen Liu" <[email protected]> wrote:
>
>
>
Hi,
I am having a warning message when trying to generate java proxy jar
file on weblogic8.1
webservice test web app, the message is as follows:
"Warning Failed to generate client proxy from WSDL definition for this
service.
Prescription Please verify the <types> section of the WSDL."
in the mean time, on weblogic starting terminal, I saw the following
exceptions,
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\AlphaLength4Deserializer.java:36: cannot resolve symbol
symbol : class FacetUtils
location: package binding
weblogic.xml.schema.binding.FacetUtils.checkLengthFacet(__typed_obj,4L);
^
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\OSIFieldAnonTypeDeserializer.java:36: cannot resolve
symbol
symbol : class FacetUtils
location: package binding
weblogic.xml.schema.binding.FacetUtils.checkMaxLengthFacet(__typed_obj,69L);
^
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\AlphaLength2Deserializer.java:36: cannot resolve symbol
symbol : class FacetUtils
location: package binding
weblogic.xml.schema.binding.FacetUtils.checkLengthFacet(__typed_obj,2L);
^
C:\DOCUME~1\u252738\LOCALS~1\Temp\wlwproxy37508.jar1533409921\com\ual\www\rcc\cb
t\schema\modifypnr\FreeFormAnonTypeDeserializer.java:36: cannot resolve
symbol
symbol : class FacetUtils"
Can anybody help me about this issue? I attached WSDL file, also United
Airlines
got an enterprise weblogic license deal with BEA, any help will be highly
appreciated.
Thanks!!!
Naichen

Enable userName Token profile in Java client policy file

My stand-alone java client invokes a .Net web service which implements wse 3.0. userName Token. However, when I ran my client program with the policy file which I converted from .Net config policy. I got errors. How could I make this right?
[java] java.rmi.RemoteException: SOAPFaultException - FaultCode [{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] FaultString [Header http://schemas.xmlsoap.org/ws/2004/08/addressing:Action for ultimate recipient is required but not present in the message.] FaultActor [http://192.168.254.102/TestImageserver2007/DLImageService.asmx]No Detail; nested exception is:
[java]      javax.xml.rpc.soap.SOAPFaultException: Header http://schemas.xmlsoap.org/ws/2004/08/addressing:Action for ultimate recipient is required but not present in the message.
[java] fetchMostRecent() Failed...
[java]      at digimarc.foto.webservice.clientstub.ImageServiceSoap_Stub.imagingFolioFetchMostRecent(ImageServiceSoap_Stub.java:137)
[java]      at digimarc.foto.webservice.Client.main(Client.java:40)
[java] Caused by: javax.xml.rpc.soap.SOAPFaultException: Header http://schemas.xmlsoap.org/ws/2004/08/addressing:Action for ultimate recipient is required but not present in the message.
[java]      at weblogic.wsee.codec.soap11.SoapCodec.decodeFault(SoapCodec.java:311)
[java]      at weblogic.wsee.ws.dispatch.client.CodecHandler.decodeFault(CodecHandler.java:114)
[java]      at weblogic.wsee.ws.dispatch.client.CodecHandler.decode(CodecHandler.java:99)
[java]      at weblogic.wsee.ws.dispatch.client.CodecHandler.handleFault(CodecHandler.java:87)
[java]      at weblogic.wsee.handler.HandlerIterator.handleFault(HandlerIterator.java:248)
[java]      at weblogic.wsee.handler.HandlerIterator.handleResponse(HandlerIterator.java:218)
[java]      at weblogic.wsee.ws.dispatch.client.ClientDispatcher.handleResponse(ClientDispatcher.java:159)
[java]      at weblogic.wsee.ws.dispatch.client.ClientDispatcher.dispatch(ClientDispatcher.java:114)
[java]      at weblogic.wsee.ws.WsStub.invoke(WsStub.java:89)
[java]      at weblogic.wsee.jaxrpc.StubImpl._invoke(StubImpl.java:331)
[java]      at digimarc.foto.webservice.clientstub.ImageServiceSoap_Stub.imagingFolioFetchMostRecent(ImageServiceSoap_Stub.java:132)
Policy file used:
<?xml version="1.0" ?>
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
xmlns:wssp="http://www.bea.com/wls90/security/policy"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:wls="http://www.bea.com/wls90/security/policy/wsee#part">

<wssp:Security>
<wssp:userNameToken>
<wssp:userName>weblogic</wssp:userName>
<wssp:password type="TEXT">weblogic</wssp:password>
</wssp:userNameToken>
</wssp:Security>
</wsp:Policy>
.Net config policy file:
<policies xmlns="http://schemas.microsoft.com/wse/2005/06/policy">
<extensions>
<extension name="kerberosSecurity" type="Microsoft.Web.Services3.Design.KerberosAssertion, Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
<extension name="kerberos" type="Microsoft.Web.Services3.Design.KerberosTokenProvider, Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
<extension name="usernameForCertificateSecurity" type="Microsoft.Web.Services3.Design.UsernameForCertificateAssertion, Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
<extension name="x509" type="Microsoft.Web.Services3.Design.X509TokenProvider, Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
<extension name="requireActionHeader" type="Microsoft.Web.Services3.Design.RequireActionHeaderAssertion, Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
<extension name="usernameOverTransportSecurity" type="Microsoft.Web.Services3.Design.UsernameOverTransportAssertion, Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
</extensions>
<policy name="AuthorizationPolicy">
<kerberosSecurity establishSecurityContext="false" requireSignatureConfirmation="false" messageProtectionOrder="SignBeforeEncrypt" requireDerivedKeys="false" ttlInSeconds="300">
<token>
<kerberos targetPrincipal="host/nbcis1" impersonationLevel="Identification" />
</token>
<protection>
<request signatureOptions="IncludeAddressing, IncludeTimestamp, IncludeSoapBody" encryptBody="true" />
<response signatureOptions="IncludeAddressing, IncludeTimestamp, IncludeSoapBody" encryptBody="true" />
<fault signatureOptions="IncludeAddressing, IncludeTimestamp, IncludeSoapBody" encryptBody="false" />
</protection>
</kerberosSecurity>
<requireActionHeader />
</policy>
<policy name="InteropPolicy">
<usernameOverTransportSecurity />
<requireActionHeader />
</policy>
<policy name="NamePolicy">
<usernameOverTransportSecurity >
<clientToken>
<username username="nbdls\joejoe" password="ImAGe!" />
</clientToken>
</usernameOverTransportSecurity>
<requireActionHeader />
</policy>
</policies>

Thanks Carlo for the suggestion. That helps to overcome my huge hurdle. The username and password were sent successfully in the SOAP header to .Net web service.
However, there is still some errors on the java client side. I am getting:
[java] java.rmi.RemoteException: SOAPFaultException - FaultCode [{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] FaultString [Header http://schemas.xmlsoap.org/ws/2004/08/addressing:Action for ultimate recipient is required but not present in the message.] FaultActor [http://192.168.254.102/TestImageserver2007/DLImageService.asmx]No Detail; nested exception is:
[java]      javax.xml.rpc.soap.SOAPFaultException: Header http://schemas.xmlsoap.org/ws/2004/08/addressing:Action for ultimate recipient is required but not present in the message.
[java]      at digimarc.foto.webservice.clientstub.ImageServiceSoap_Stub.imagingFolioFetchMostRecent(ImageServiceSoap_Stub.java:137)
[java]      at digimarc.foto.webservice.Client.main(Client.java:58)
[java] Caused by: javax.xml.rpc.soap.SOAPFaultException: Header http://schemas.xmlsoap.org/ws/2004/08/addressing:Action for ultimate recipient is required but not present in the message.
[java]      at weblogic.wsee.codec.soap11.SoapCodec.decodeFault(SoapCodec.java:311)
[java]      at weblogic.wsee.ws.dispatch.client.CodecHandler.decodeFault(CodecHandler.java:114)
[java]      at weblogic.wsee.ws.dispatch.client.CodecHandler.decode(CodecHandler.java:99)
[java]      at weblogic.wsee.ws.dispatch.client.CodecHandler.handleFault(CodecHandler.java:87)
[java]      at weblogic.wsee.handler.HandlerIterator.handleFault(HandlerIterator.java:248)
[java]      at weblogic.wsee.handler.HandlerIterator.handleResponse(HandlerIterator.java:218)
[java]      at weblogic.wsee.ws.dispatch.client.ClientDispatcher.handleResponse(ClientDispatcher.java:159)
[java]      at weblogic.wsee.ws.dispatch.client.ClientDispatcher.dispatch(ClientDispatcher.java:114)
[java]      at weblogic.wsee.ws.WsStub.invoke(WsStub.java:89)
[java]      at weblogic.wsee.jaxrpc.StubImpl._invoke(StubImpl.java:331)
[java]      at digimarc.foto.webservice.clientstub.ImageServiceSoap_Stub.imagingFolioFetchMostRecent(ImageServiceSoap_Stub.java:132)
[java]      ... 1 more
The statement:
"Action for ultimate recipient is required but not present in message". What is missing?
This is what I have in my java client:
FileInputStream [] inbound_policy_array = new FileInputStream[1];
inbound_policy_array[0] = new FileInputStream("Auth.xml");
FileInputStream [] outbound_policy_array = new FileInputStream[1];
outbound_policy_array[0] = new FileInputStream("Auth.xml");
//create service and port
ImageService imageService = new ImageService_Impl(args[0]);
//specify an array of policy files for the request and response of a
//particular operation
ImageServiceSoap array_of_policy_port = imageService.getImageServiceSoap("ImagingFolioFetchMostRecent", inbound_policy_array, outbound_policy_array);
//create credential provider and set it to the Stub
List credProviders = new ArrayList();
//client side UsernameToken credential provider
CredentialProvider cp = new ClientUNTCredentialProvider("nsbbdl\\joejoe", "ImAGes!");
credProviders.add(cp);
Stub stub = (Stub)array_of_policy_port;
stub._setProperty(WSSecurityContext.CREDENTIAL_PROVIDER_LIST, credProviders);
try {
ApplicantDataFolio adf = array_of_policy_port.imagingFolioFetchMostRecent("1001917");
} catch (Throwable e) {
}

Override JCE default (limited strength) jurisdiction policy files

Hi!
I am writing an applet, which has to decrypt encrpyted file with some simetric algorithm, e.g. PBEWithMD5AndTripleDes. Due llimitations of key lengths in default (limited strength) jurisdiction policy files for JCE I cannot use for example TripleDES with 168 bit key or. Blowfish with 400 bit key.
I know I can obtain Unlimited version of these files from java.sun.com and replace this files in JDK/JRE installation directory. That's ok for us at server side, but disaster at client (applet) side, because we must modify installation of JRE on every computer where user want to use applet and update it every time when JRE is being updated.
So me question is: is there any way to distribute unlimited jurisdiction files with an applet (I know how to include *.jar files) and make it work? For example via endorsed mechanism, setting some security property, reloading JCE?
Thanks for help!

You can't override them. Since the restriction apply only to the JCE, your best bet is to use the lightweight API from Bouncy Castle which does not use the JCE.

Java Web Start and Policy File

Hi,
I've a problem for Java Web Start (JWS) in working with Policy File.
I like to apply a policy file for a JWS application to fine tune the secuirty setting instead of granting permission in JWS.
For an applet environment, I can apply policy file like this:
appletviewer -J"-Djava.security.policy=all.policy" writeFile.html
However, in JWS environment, I try to apply in JNLP file as below but fail:
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="1.0+"
codebase="http://130.18.52.226:8080/testing/"
>
<information>
<title>JWS JFrame App</title>
<vendor>Java Developer Connection</vendor>
<homepage href="http://java.sun.com/jdc" />
<description>Demonstration of JNLP</description>
<icon href="hsbc.gif" width="32" height="32" />
</information>
<resources>
<j2se version="1.3*" />
<property name="java.security.manager" value="x" />
<property name="java.security.policy" value="testing.policy"/>
<jar href="testing.jar"/>
</resources>
<application-desc main-class="JWSJFrameApp" />
</jnlp>
The error message like this:
Java Web Start Console, started Tue Sep 03 09:59:36 CST 2002
Java 2 Runtime Environment: Version 1.3.0 by Sun Microsystems Inc.
java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.manager write)
java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.policy write)
Could anyone please help on this!
Many thanks!
Regards,
Simon Ho

There are two problems with what you are trying to do.
First, setting a property PROP=VALUE in the jnlp file does not mean that java will be launched -DPROP=VALUE, instead, javawebstart will call System.setProperty(PROP,VALUE) before your apps main() is called. The difference is, the property will not be set at the time the VM is initialized.
Second, the javaws security policy will not allow you to set arbitrary properties in an unsigned application. Only properties begining with "jnlp." or "javaws." (and possibly a few other specific props known to the native javaws code) can be set in an application unless <all-permissions> is specified and the app is signed.

Signed applets (are policy files needed!)

I have experienced on a number of different machines that a signed applet that the client trusts (via clicking on yes to the prompt asking to trust the applet), is able to access the local resources with NO policy file on the client machine. I'm using JRE 1.4.1_02
Is this the expected behavior?
I sure hope it is because how in the world can you install applications to many clients and update their policy file? you can't via the web! BUT why am I reading that you have to have a policy file even if you sign an applet. I want to get rid of using Netscape security model but I can not update many client machine policy files... Please help!!! thanks. Is signing an applet all you have to do to access local machines, I sure hope so! Thanks in advance.

I've done some more research specifically a very good article at http://developer.java.sun.com/developer/technicalArticles/Security/applets/index.html. I'll try to highlight the more interesting comments that I found. At least for the JRE 1.3 there appears to be a new class loader, sun.plugin.security.PluginClassLoader that allows a signed jar file (once trusted by the client) to have access to local resources.
Code signed using the private key of the signer can be run on client machines once the public key corresponding to the signer is deemed as trusted on the respective machine.
Applet security in browsers strives to prevent untrusted applets from performing potentially dangerous operations, while simultaneously allowing optimal access to trusted applets.
There is no simply way to deploy and use customized policy files, a policy will have to be set by files based on the JRE installation. Customized class loaders or security managers cannot be installed easily.
Policy files are difficult or at least not very straightforward for normal users, which could be thousands of machines where an applet is deployed.
The java plug-in (I believe its 1.3 and later) provides a workaround although its recommended to use policy files wherever practical and applicable. (This implies to me that using the plug-in, all that is required is to sign the jar file to have access to local resources).
RSA-signed applets can be deployed using the Java plug-in. (which can run in an identical way for Netscape and IE).
In order for a plug-in enhanced browser to trust an applet and grant it all privileges or a set of fine-grained permissions (as specified in a J2EE policy file), the user has to preconfigure his or her cache of trusted signer certificates (the .keystore file in JRE 1.3) to add the applet's signer to it. However, this solution does not scale well if the applet needs to be deployed on thousands of client machines, and may not always be feasible because users may not know in advance who signed the applet that they are trying to run. A NEW CLASS LOADER, sun.plugin.security.PluginClassLoader in the Java Plug-in 1.3, OVERCOMES THE LIMITATIONS MENTIONED ABOVE.
I hope this helps, I've been looking for this solution for quite some time, trying to understand why singed applets work with no policy files for version 1.4... Talk to you later, Jay.

Including non-existent permissions in a policy file

I noticed that if I, in a policy file, specify a permission which implementation is not available to the VM, no error occurs and it seems like the bogus permission is simply ignored.
I use -Djava.security.manager and -Djava.security.policy=my.policy.
For example, if I specify a permission that was added in J2SE 5.0 in a policy file used with a J2SE 1.4.2 JVM (from Sun), I get no errors. This is good, since it means that I can use the same policy file for all JVM versions that I have to support. However, I was not able to find anything about this in the documentation.
Can I trust all compliant JVMs to work like this, or is this specific to Sun's implementations? Is this mentioned in the documentation/spec somewhere?
Thanks...

if you want to give read permissions for all the files in conf:
permission java.io.FilePermission "\\dvp\\conf\\-","read";
Hope this help!

Cross-Domain Policy File

I just made an IRC client for Android + iOS, and now I'm having issues porting it to the browser. I've built flash games where the server hosts the Policy Domain File, obviously with an IRC client that's not going to happen in all instances.
I'm wondering why the browser version can run perfectly fine under CS6's debug mode, but when it's been deployed to the browser it can't seem to connect? What settings would I have to do [if at all possible] to replicate this debug mode [in CS6] inside the browser?
Thanks!

In the browser, are you running it via Flash Player or are you making an AIR for web app?
The browser is the strictest sandbox Flash can run in. The infamous #2048 is a generic security violation. You're doing something your current sandbox doesn't allow. The most obvious thing to verify is on the SWF output settings make sure your sandbox is set to access network files, not access local files. Otherwise you'll get that error.
Outside that it's going to be looking for a socket policy file. I won't even get into creating these because your endpoint is an IRC server. Unless you're running your own IRC server you're not going to get some IRC server host to install a socket policy file for you so that point is moot. Without the socket policy file you're in some tough territory that will require some advanced debugging.
My suggestion would be to get Fiddler so you can actually see the request and response packets being sent to and from Flash inside your browser. You will definitely see Flash make a request and the response will give you clues on what's happening just before you receive the #2048 security error. You may see it request the policy file and then the server returns nothing or an invalid response and then Flash gives you the error. If that happens you may be out of luck.
Here's fiddler (I'd update your .NET to the latest and use V4 instead of V2):
http://www.fiddler2.com/fiddler2/version.asp
Here's another Adobe post of someone having a #2048 error while using fiddler to diagnose it:
http://forums.adobe.com/message/4668901#4668901
The fiddler site has some documentation. It's a pretty great tool for analyzing packet traffic (using the "select process" target will limit the packets to a browser you select (or any other app)). You may need to enable decrypting HTTPS traffic if you're using a SecureSocket. There's all instructions there on helping you diagnose and watch the inner workings of all requests/responses to track down the issue quickly.
Lastly I would uninstall Fiddler after you're done with it and reinstall it later when you need it. Especially if you enable HTTPS decryption. It must install some fake certificates to allow itself to intercept traffic. You'll just clutter up your certificates with junk certs if you keep fiddler installed. It's a very quick install/uninstall and the software itself is very widely used and regarded. It's not a trust thing, it's a cleanliness thing.

Policy Annotation in WebServices Impl file for JAX-WS WebServices

Hi All ,
I am trying to implement JAX-WS WebServices that support https transport .To do so I added the following annotation *@Policy(uri = "policy:Wssp1.2-2007-Https-BasicAuth.xml)* in my Jws Implementation file for the JAX-WS WebServices but I got parsing error.Can anyone please confirm that JAX-WS supports the policy annotation in Impl file.If it is supported can a link/pointer/example could be given to implement https enabled JAX-WS WebService and the required configuration in wsdl file.
Thanks and Regards

For 11g, install the examples with a custom installation (have to specify that check mark that is not checked by default).
The look here:
<MIDDLEWARE_HOME>\wlserver_10.3\samples\server\examples\src\examples\webservices\wss1.1

Webservice client : different wsdl file for test/production environment

In an ADF application, I need call a web service in model project
In my company, we have 2 environments : test and production.
This webservice is deploye in test server and production server.
So there are 2 different wsdl file for test/production.
I want to make my ADF Application portable cross the 2 environments.
An environment variable can indicate in which environment the ADF application run.
According to this variable, application choose which wsdl/endpoint to call.
If I use "web service Data control" wizard, how can I achieve this?
If I use "webservice proxy" wizard, how can I achieve this?
Thanks!!!!!!

Hi,
I have a model project with ws proxy client and on this proxy I added an adf ws connection called CustomerExperience
then I can do this.
// a test to try to overrule the adf ws connection from EM
Context ctx = null;
try {
ctx = ADFContext.getCurrent().getConnectionsContext();
WebServiceConnection wsc = (WebServiceConnection) ctx.lookup("CustomerExperience");
CustomerExperience customerExperience = wsc.getJaxWSPort(CustomerExperience.class);
} catch (NamingException e) {
LOGGER.severe("got web service loading fault: "+ e.getMessage());
throw new JboException( messages.getString("NOM-999"),
"NOM-999",
null );
I exported this to an adf jar and added this to a webapp.
On runtime the ws connection is not dectected by the webapp so need to copy this ws conn to the connections of the webapp. This works
but can I change it from wlst instead of EM , is this possible?
I don't see the WS connection in wlst (oracle common) adf_listURLConnection('CE_Portal')
thanks

[svn:osmf:] 17499: Partial fix for FM-990: prevent RTE when attempting smoothing for an image where a policy file was not available

Revision: 17499
Revision: 17499
Author:   [email protected]
Date:     2010-08-27 11:05:22 -0700 (Fri, 27 Aug 2010)
Log Message:
Partial fix for FM-990: prevent RTE when attempting smoothing for an image where a policy file was not available
Ticket Links:
    http://bugs.adobe.com/jira/browse/FM-990
Modified Paths:
    osmf/trunk/framework/OSMF/org/osmf/elements/ImageElement.as

Revision: 17499
Revision: 17499
Author:   [email protected]
Date:     2010-08-27 11:05:22 -0700 (Fri, 27 Aug 2010)
Log Message:
Partial fix for FM-990: prevent RTE when attempting smoothing for an image where a policy file was not available
Ticket Links:
    http://bugs.adobe.com/jira/browse/FM-990
Modified Paths:
    osmf/trunk/framework/OSMF/org/osmf/elements/ImageElement.as

Policy File for WebService

Similar Messages

Maybe you are looking for