Policy requires confidentialityenc key : 0

Hi,
I published a package as WebService(J2EE 1.4 JAX-RPC) by JDeveloper 10.1.3.2.0.4066, deploied it to Oracle Application Server10g 10.1.3
Then I created JKS keystore as shown in example:
http://www.oracle.com/technology/products/jdev/howtos/1013/wssecure/10gwssecurity_howto.html
Set SecureWebService, in AuthenticationOptions used X509DigitalCertificate, in OutboundConfidentiality set UsePublicKeyToEncrypt same as in KeystoreOptions encryption key alias
I deploied Keystore.deploy.
And when I test web service in Oracle Application Server, it shows:
<env:Fault
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<faultcode>wsse:InvalidSecurity</faultcode>
<faultstring>Policy requires confidentialityenc key : 0</faultstring>
<faultactor/>
</env:Fault>
Please help me to solve this problem.
Regards, Tim

Somebody from Oracle JDeveloper, please advice

Similar Messages

  • UserPrincipal.ChangePassword thinks the password does not meet the password policy requirements.

    I am working with C# 3.5.  My goal is to have a simple program to allow a user change their Active Directory user password via a web page.  I have a console application to initially test the commands to active directory and I am running into a problem.
    my domains password policy is as follows.
    Enforce password history 24 passwords remembered
    Minimum password length 7 characters
    Password must meet complexity requirements Enabled
    Store passwords using reversible encryption Disabled
    The error I am getting is "The password does not meet the password policy requirements. Check the minimum password length, password complexity and password history requirements. (Exception from HRESULT: 0x800708C5)"
    I believe the new password I am using does meet the policy requirements and I can't seem to get this program to work.  All I want to build is a simple program to allow a user to change their Active Directory user password.
    My test code is below.
    using System;
    using System.Collections.Generic;
    using System.Linq;
    using System.Text;
    using System.DirectoryServices.AccountManagement;
    using System.DirectoryServices;
    namespace ActiveDirectoryHacking
    class Program
    static void Main(string[] args)
    PrincipalContext adPrincipalContext = new PrincipalContext(ContextType.Domain, "192.168.1.26", "OU=Staff,DC=SFdev,DC=org", "John.Doe", "Initial Complex P234dfword");
    Console.WriteLine("Validate user {0}", adPrincipalContext.ValidateCredentials("John.Doe", "Initial Complex P234dfword"));
    UserPrincipal user = UserPrincipal.FindByIdentity(adPrincipalContext, "John.Doe");
    Console.WriteLine(user.DistinguishedName);
    user.ChangePassword("Initial Complex P234dfword", "e$213434sDKS really? www.microsoft.com");
    //user.SetPassword("Initial Complex P234dfword");
    user.Save();
    Console.WriteLine("Press a key to exit.");
    Console.ReadKey();
    The .SetPassword works if I use a user with Domain Admin access but it appears the John.Doe is unable to change their own password with the .ChangePassword method.
    The output until the exception is the following
    Validate user True
    CN=John Doe,OU=Staff,DC=SFdev,DC=org
    I have no clue why any password I select for the new password does not work.

    I looked into the password policy and this is what I have learned.  There is a major difference between undefined and defined in policies plus making sure the defined policies are set with values that will provide the desired results.
    Since this is a development domain and is used for testing I have tweaked the password policy to allow me to develop and test against the domain with a little bit more freedom than a production domain.
    I have changed the policy to the following settings. 
    Enforce password history 0 passwords remembered
    Maximum password age 0 days
    Minimum password age 0 days
    Minimum password length 7 characters
    Password must meet complexity requirements Disabled
    Store passwords using reversible encryption Disabled
    Now, I am able to run my program against the domain testing the password change utility.  My error was leaving some of the policy settings as not defined and not understanding what that really means for each setting.  For development of a password change utility I need the flexibility to test and the relaxed policy changes allows me to run the program many times without having to work with test data that works around a more restricted policy.

  • PPTP "MPPE required, but keys are not available"

    Dear all
    Since last reboot of my server I got following errormessage in VPN Logfile when user tries to connect to the server trough PPTP:
    MPPE required, but keys are not available. Possible plugin problem?
    Anyone have an idea, what could be wrong ?
    May as another information: After restart of the server I had problem, that VPN Server was not started, because the L2TP definitions where not correct... Logfile told me. So I have redefined the PPTP and L2TP setting, but disabled the L2TP login, because I have definied this "only" for test purposes. All definitions where made with Server Administrator.
    Before restart of Server Login trough PPTP was working quite well...
    I forgott to say, that the Server (Leopard 10.5.1) is an OD Master, which is working quite well (until now). The authentication type for PPTP is set to MS-CHAP (Kerberos is grayed out, I don't know why)
    Cheers Daniel
    Message was edited by: Daniel Lang

    Here I have now some logfiles from vpnd... may this helps to see the problem I have overseen:
    Wed Dec 12 02:21:21 2007 : Directory Services Authentication plugin initialized
    Wed Dec 12 02:21:21 2007 : Directory Services Authorization plugin initialized
    Wed Dec 12 02:21:21 2007 : PPTP incoming call in progress from 'xxx.xxx.xxx.xxx'...
    Wed Dec 12 02:21:21 2007 : PPTP connection established.
    Wed Dec 12 02:21:21 2007 : using link 0
    Wed Dec 12 02:21:21 2007 : Using interface ppp0
    Wed Dec 12 02:21:21 2007 : Connect: ppp0 <--> socket[34:17]
    Wed Dec 12 02:21:21 2007 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x5045e9f1> <pcomp> <accomp>]
    Wed Dec 12 02:21:21 2007 : rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0xfb9005f> <pcomp> <accomp> <callback CBCP>]
    Wed Dec 12 02:21:21 2007 : lcp_reqci: rcvd unknown option 13
    Wed Dec 12 02:21:21 2007 : lcp_reqci: returning CONFREJ.
    Wed Dec 12 02:21:21 2007 : sent [LCP ConfRej id=0x0 <callback CBCP>]
    Wed Dec 12 02:21:21 2007 : rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0xfb9005f> <pcomp> <accomp>]
    Wed Dec 12 02:21:21 2007 : lcp_reqci: returning CONFACK.
    Wed Dec 12 02:21:21 2007 : sent [LCP ConfAck id=0x1 <mru 1400> <magic 0xfb9005f> <pcomp> <accomp>]
    Wed Dec 12 02:21:24 2007 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x5045e9f1> <pcomp> <accomp>]
    Wed Dec 12 02:21:24 2007 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x5045e9f1> <pcomp> <accomp>]
    Wed Dec 12 02:21:24 2007 : sent [LCP EchoReq id=0x0 magic=0x5045e9f1]
    Wed Dec 12 02:21:24 2007 : sent [CHAP Challenge id=0x82 <ea8c6372a227309685ab6c0a36d64aec>, name = "server.anywhere.com"]
    Wed Dec 12 02:21:24 2007 : rcvd [LCP code=0xc id=0x2 0f b9 00 5f 4d 53 52 41 53 56 35 2e 31 30]
    Wed Dec 12 02:21:24 2007 : sent [LCP CodeRej id=0x2 0c 02 00 12 0f b9 00 5f 4d 53 52 41 53 56 35 2e 31 30]
    Wed Dec 12 02:21:24 2007 : rcvd [LCP code=0xc id=0x3 0f b9 00 5f 4d 53 52 41 53 2d 30 2d 50 43 31 36 37]
    Wed Dec 12 02:21:24 2007 : sent [LCP CodeRej id=0x3 0c 03 00 15 0f b9 00 5f 4d 53 52 41 53 2d 30 2d 50 43 31 36 37]
    Wed Dec 12 02:21:24 2007 : rcvd [LCP EchoRep id=0x0 magic=0xfb9005f]
    Wed Dec 12 02:21:24 2007 : rcvd [CHAP Response id=0x82 <41....0>, name = "testuser"]
    Wed Dec 12 02:21:24 2007 : DSAuth plugin: Could not retrieve key agent account information.
    Wed Dec 12 02:21:24 2007 : sent [CHAP Success id=0x82 "S=4020C83B....A M=Access granted"]
    Wed Dec 12 02:21:24 2007 : CHAP peer authentication succeeded for testuser
    Wed Dec 12 02:21:24 2007 : DSAccessControl plugin: User 'testuser' authorized for access
    Wed Dec 12 02:21:24 2007 : MPPE required, but keys are not available. Possible plugin problem?
    Wed Dec 12 02:21:24 2007 : sent [LCP TermReq id=0x4 "MPPE required but not available"]
    Wed Dec 12 02:21:24 2007 : rcvd [CCP ConfReq id=0x4 <mppe +H +M +S +L -D +C>]
    Wed Dec 12 02:21:24 2007 : rcvd [IPCP ConfReq id=0x5 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins1 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins3 0.0.0.0>]
    Wed Dec 12 02:21:24 2007 : rcvd [LCP TermAck id=0x4 "MPPE required but not available"]
    Wed Dec 12 02:21:24 2007 : Connection terminated.
    Wed Dec 12 02:21:24 2007 : Connect time 0.1 minutes.
    Wed Dec 12 02:21:24 2007 : Sent 0 bytes, received 0 bytes.
    Wed Dec 12 02:21:25 2007 : PPTP disconnecting...
    Wed Dec 12 02:21:25 2007 : PPTP disconnected
    2007-12-12 02:21:25 CET --> Client with address = 192.168.yyy.yyy has hungup

  • CDG-01141 ERROR: Module Component Table Usage ...  Table usage ... requires primary key column for referential integrity

    For some strange reason when I modified a form, (commented out some code in a when-window-activated trigger) I now get the following error.
    CDG-01141 ERROR: Module Component Table Usage GR1130A.CUSTOMER.GR_CUSTOMER.GC: Table usage GR_CUSTOMER requires primary key column for referential integrity
    I am sure this is not related to my change, but do not know what may have caused this or how to fix it.
    Anyone seen this error before? been able to fix it?
    Thanks!
    Windows 7
    Oracle Database 10g Enterprise Edition Release 10.2.0.3.0
    Designer Version 6.5.95.4.8

    You know that Developer/Designer 6i is not certified for Windows 7, right? Also, your version is not the latest one, so you can try to install the latest patch set first.
    >Table usage GR_CUSTOMER requires primary key column for referential integrity
    Check if there is a PK in the table definition (not in the database, but in Designer).

  • MPPE required, but keys are not available.

    I am trying connect my home computer to my office(MAcOS x Server)
    error on MacOS X Server Log
    Tue Sep 26 20:16:59 2006 : sent [CHAP Success id=0x1e "S=A1ED1D0E3ABF7A4187D8F43458C7C0C5F487B9AE M=Access granted"]
    Tue Sep 26 20:16:59 2006 : DSAccessControl plugin: User 'ppina' authorized for access
    Tue Sep 26 20:16:59 2006 : MPPE required, but keys are not available. Possible plugin problem?
    Tue Sep 26 20:16:59 2006 : sent [LCP TermReq id=0x2 "MPPE required but not available"]
    Tue Sep 26 20:16:59 2006 : rcvd [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]
    Tue Sep 26 20:17:00 2006 : rcvd [LCP TermAck id=0x2]
    Tue Sep 26 20:17:00 2006 : Connection terminated.
    Tue Sep 26 20:17:00 2006 : Connect time 0.0 minutes.
    Tue Sep 26 20:17:00 2006 : Sent 0 bytes, received 0 bytes.
    Tue Sep 26 20:17:00 2006 : PPTP disconnecting...
    Tue Sep 26 20:17:00 2006 : PPTP disconnected
    2006-09-26 20:17:00 WEST --> Client with address = 172.16.12.119 has hungup

    run this
    code:
    sudo vpnaddkeyagentuser
    authenticate as your admin and then if it does not give an error you should be all set.
    See this http://docs.info.apple.com/article.html?artnum=107915 for more info (it talks about an LDAP server but when I tried to add that 'user' to my LDAP server it did not help, so I added it locally (which is what the above command does) and then viola!)
    Peter
    PowerMac G5 Dual 2.5Ghz   Mac OS X (10.4.6)   Server

  • Logging into guest account requires network key?

    Airport Extreme guest account login from my Windows XP laptop requires a network key and not a password as I expected.  Anyone know why and how to fix this?  Thank you.

    Everything up to date on the XP machine? 
    If you are using WPA2 Personal, or WPA/WPA2 Personal security on the Guest Network, then your normal "password" of 8 characters or more should work.
    If the XP machine really does require the "key", which is a long code of numbers and letters, you can locate that on your Mac as follows:
    Open Macintosh HD > Applications > Utilities > AirPort Utility
    Click Manual Setup
    Do NOT look at the AirPort Utility window in the center portion of the screen
    Look up to the very top of the computer screen to locate the AirPort Utility menu items to the right of the Apple icon
    Click the Base Station menu
    Click Equivalent Network Password and the "key" will be displayed for both your "main" and "guest" networks
    You might want to note that when you enable the Guest Network, the bandwidth is split between your Main and Guest Networks, so you would only want to enable the Guest Network when you really have "guests"

  • AddApplication Method requires public key to create child app. Connection Factory expects child app public key alias to contain app id

    I'm working on implementing the AddApplication method so I can create child apps for my java web application. 
    The AddApplication method schema requires a public key. I'm assuming this must be different than the public key associated with the parent app, as it failed when I tried that, so I've created a new one.
    The ConnectionFactory code that will later access this public key to connect expects the public key to have an alias that is:
    {appid}.keyname
    This creates a chicken/egg scenario. The public key I'm using to create the child app cannot have an alias that includes the app id, as it hasn't been created yet.
    Can someone tell me how other folks are doing this? Or what the intended process is?
    Do I have to create one public key for use in creating the child app, then create another one once I have the child app id, and update the app with it?
    Thanks!

    Hi Joanne,
    I am reviewing the Java SDK source in an effort to understand how they are abstracting the Master/Child methods provided by the HealthVault platform XML API. I will provide an answer as soon as I have it.
    Thanks
    -Sean

  • Reinstalling software after computer crash, requiring activation key

    Hi, want to know how to receive a product key for the license of my adobe cs3 package which I bought approx 3 years ago, Im a student and
    require this information, the reason for this is that after my computer crash I have had to buy new one and wanting to reinstall my software.

    Hi, want to know how to receive a product key for the license of my adobe cs3 package which I bought approx 3 years ago, Im a student and
    require this information, the reason for this is that after my computer crash I have had to buy new one and wanting to reinstall my software.
    From your registered products on your account, the disc package, some place where you wrote it down and kept it safe. If non of this applies and you didn't take care of your serial, then nobody can help you, not even support. They don't know, either, what you haven't told Adobe in teh past.
    Mylenium

  • IMac Pro drops internet connection requires WPA2 Key

    My mac pro connects to our wireless internet, but when I turn it back on from sleep mode it has lost connection and requires a WPA2 password to reconnect! I don't know where to find this key... but when I restart this mac it is connected to the wireless again! Help!

    Welcome to the discussions!
    Can you confirm if both your Extreme and Express are "n" capable devices? It's easy to make a mistake setting up the "extend" feature, so we should start by checking your settings for both devices. Please post back to confirm.

  • SPS-SourceObjectDN - Policy Required-Setting

    Hi,
    A problem arose with SourceObjectDN
    Attribute-http://msdn.microsoft.com/en-us/library/cc220373.aspx
    In sharePoint 2013, the Policy of  attribute   Name : SPS-SourceObjectDN is
    Required  ???
    Its Value is Blank  from AD.
    I cannot  Save and Close Profile Property Page in sharePoint 2013.
    See 3 screens below, even I cannot delete this attribute.
    Any suggestion Appreciated ?
    See Screen-1
    Screen-2
    Screen-3
    http://sdrv.ms/1idrQUe
    Unable to even delete it.
    Rgds/-

    UPSS can only be running on one server in the farm bound to a particular UPA.
    Here is the error you're seeing:
    Data adapter failed during OnLoad: The remote server returned an error: (500) Internal Server Error. The User Profile Manager object could not be loaded. ---> UserProfileApplicationNotAvailableException_Logging :: UserProfileApplicationProxy.ApplicationProperties ProfilePropertyCache does not have 89f3411e-aa17-41e5-9e34-ccb29a8624ff
    Can you check the Application and System Event Logs at 01/05/2014 00:03:11.37 to see if there are any application pool failures or other errors?
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • NAC clean access policy requirement

    we have Clean Access Manager Version: 4.1.2
    the policy is to check that the user has symantec antivirus on its machine , if not the NAC will redirect a link to the user to install the antivirus ,
    the main problem is that all the PCs joined the domain & all the user accounts have limited user privilege to install the antivirus , so is there any means in windows like creating a pakage , or istalling under DOS with using patch file or any other solution

    If you have a software distribution system you can normally run a local file on the PC that checks for requires software, in this case the symantic antivirus. The file then reports to the software distribution server and any missing applications become pushed down.
    Another thing you can do is create a script that will pull and install the application (with admin rights) from a server.

  • JBuilder 8 WebLogic Edition eval requires license key

    I have installed JBuilder 8 WebLogic Edition eval, but it requires a license key
    to use it. The install and readme docs have no information on how to satisfy
    this. Please help.

    On 12 Jan 2003 10:22:26 -0800, "Brian Welnack"
    <[email protected]> wrote:
    >
    I have installed JBuilder 8 WebLogic Edition eval, but it requires a license key
    to use it. The install and readme docs have no information on how to satisfy
    this. Please help.Just an FYI - the only real difference between the JBuilder 8 WebLogic
    edition and the Enterprise edition is the WebLogic edition comes with
    a WLS 7 developer license. If you already have that, then I would
    recommend simply getting the JBuilder 8 Enterprise Edition.
    Another different: JB8-WL Edition will only deploy and debug to
    Weblogic. There's no support for other web servers like Tomcat, for
    example. Now, that's fine if you are specifically developing for
    WebLogic, but you should still keep that in mind.
    hth

  • LR4 on to second product also requires LR3 key that I have lost. Help!.

    My LR3 serial number disappeared when I upgraded to LR4.  I didn't ever register it, not knowing at that time that I could or should.
    I have downloaded LR4 on to a second OSX device.  Put the LR4 product key is and was aghast when the LR3 was also required.
    Is there any way I can retrieve the LR3 serial number from Adobe?

    Thank you all.  The issue is resolved. 
    Current serial number are found within products.
    Historic serial numbers are only found if they are registered under 'My Adobe - Order history'.
    If the serial number wasn't registered or it was a postal orderisn't then within this page is a live customer service facility.  YES, LIVE!!!  YAY!
    Adobe will generate a new serial number for you if there is trace of that order ever having been made which, thankfully, there was in this case.
    This resolution is worth knowing.
    Thank you all for attempting to help.

  • CS6 Products requiring serial key suddenly after being used fine since luanch? Wont accept my key (pasted from my adobe account). Reverted to trial. Please help!

    I've had the CS6 Master collection since it was released and havent had any problems with it until today. It is asking me for my serial key (for the first time since its been installed) and says the one I am providing is invalid. What is happening here? I'm giving it the key that is saved in my adobeID and is registered etc. I almost wasnt able to complete some work except that it reverted to a 30 day trial, which isnt much better because I will just need to confront this problem again in 30 days. Does anyone know why it wont accept my key? I have it on a second computer and it is doing the same thing. Both worked fine yesterday. I really wanted to talk to someone, but adobe makes that near impossible.

    CS6 or Creative Cloud Reverts to Trial Mode
    http://helpx.adobe.com/creative-suite/kb/trial--1-launch.html
    Serial number and activation chat support (non-CC)
    http://helpx.adobe.com/x-productkb/global/service1.html ( http://adobe.ly/1aYjbSC )

  • How to force password policy requirements on password resets for user accounts reset by the Administrator?

    OS: Windows Server 2008 R2 Enterprise
    Domain Level: 2008
    Forest Level: 2000
    We have Domain Administrators in our domain that reset passwords for user accounts, and the passwords the Administrators set them to are not being enforced follow our default domain password policy. For example, I log on the domain controller, as an administrator
    and can reset a password for a user account to be blank. 
    Is there a reason Domain Administrator password resets for user accounts are not enforced by our default domain password policy? Is there a way to enforce this on password resets by Domain Admins? 

    Do you have fine grant password policy? If not ; by default all the usrs are effected by domain level password policy even domain admins,
    Regards~Biswajit
    Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights.
    MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
    MY BLOG
    Domain Controllers inventory-Quest Powershell
    Generate Report for Bulk Servers-LastBootUpTime,SerialNumber,InstallDate
    Generate a Report for installed Hotfix for Bulk Servers

Maybe you are looking for