Secure web service problem

We're using WebLogic 8.1. I'm trying to be the client to a web service on a .NET server. They have given us the public key, but not the private key. I have successfully executed clientGenTask to generate the client code from their WSDL. Now I am trying to encrypt the request. I've tried using the code at http://e-docs.bea.com/wls/docs81/webserv/security.html#1078000, but that's where I'm running into trouble. At runtime, it keeps failing for lack of a private key.
Any hints?
Thanks,
Gary

I think I may have solved it. It needs the private key for a digital signature, which I don't need. Once I took that out, that problem went away. Now I just need to add the wsa:Action, wsa:MessageID, wsa:ReplyTo and wsa:To header elements.

Similar Messages

  • Secured Web service performance problem in BPEL 11g

    Hi,
    When calling Secured web service from BPEL 11g, performance issue is coming.
    Actually when we test a Secured web service using SOAP UI, Average response time is 2-3 secs.
    Where when we are calling from BPEL, average response time is 18-22 secs.
    Steps:
    1) Go to composite
    Right click on the external reference service and select “Configure WS policies”
    Under the security tab, click add button and select “oracle/ wss_username_token_client_policy
    2) Now Open the property Inspector window and click the add button under “Binding properties” tab.
    3) Include the “oracle.webservices.auth.username-->UserName
    4) Include the “oracle.webservices.auth.password”-->Password
    Please let me know if i am doing anything wrong.
    Do you have any idea for fix this issue?
    Thank you.

    there shouldn't much difference in the time for the response ..., also when you are calling the secured web service from another BPEL, make sure you don't consider the time of the calling process ( i mean that BPEL ). you just try calling the secured web service from the EM console if it is a SOA composite. do you see any messages in the log files ? the procedure you followed is correct only, confirm here., i have posted a similar solution long back..
    Re: Creating a partnerlink  from a secure webservice
    Thanks,
    N

  • Error when trying to access a secured web service from Forms 10g 10.1.2.3

    Hello,
    I'm trying to access a secured web service from Forms10g 10.1.2.3 but i'm getting the next error when pressing the button the first time:
    java.rmi.RemoteException: ; nested exception is: HTTP transport error: javax.xml.soap.SOAPException:
    java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Bad response: 401 UnauthorizeWhen i press the button a second time i got this error:
    javax.xml.rpc.soap.SOAPFaultException: The SOAP request is invalid. The required node 'Envelope' is missingThis is the code i have in my button:
    DECLARE
    jo ora_java.jobject;
    pdfObject ora_java.jobject;
    pdf     varchar2(900);
    rv varchar2(100);
    ex ora_java.jobject;
    BEGIN
    JO := SEARCHSOAPCLIENT.new;
    SEARCHSOAPCLIENT.setUsername(JO,'weblogic');
    SEARCHSOAPCLIENT.setPassword(JO,'welcome1');
    pdfObject := SEARCHSOAPCLIENT.quicksearch(JO,'1234',NULL);
    pdf := SEARCHSOAPCLIENT.tostring(pdfObject);
    message(pdf);
    message(' ');
    EXCEPTION
    WHEN ORA_JAVA.JAVA_ERROR then
    message('Unable to call out to Java, ' ||ORA_JAVA.LAST_ERROR);
    WHEN ORA_JAVA.EXCEPTION_THROWN then
    ex := ORA_JAVA.LAST_EXCEPTION;
    :error := Exception_.toString(ex);
    END;When i run it from JDeveloper it works, this is a portion of java code the proxy web service has:
    import oracle.webservices.transport.ClientTransport;
    import oracle.webservices.OracleStub;
    import javax.xml.rpc.ServiceFactory;
    import javax.xml.rpc.Stub;
    public class SearchSoapClient {
        private webservicesproxywebcontent.proxy.SearchSoap _port;
        public SearchSoapClient() throws Exception {
            ServiceFactory factory = ServiceFactory.newInstance();
            _port = ((webservicesproxywebcontent.proxy.Search)factory.loadService(webservicesproxywebcontent.proxy.Search.class)).getSearchSoap();
            this.setUsername("weblogic");
            this.setPassword("welcome1");
            System.out.println("callling from _port "+ _port.quickSearch("1234234", null));
         * @param args
        public static void main(String[] args) {
            try {
                webservicesproxywebcontent.proxy.SearchSoapClient myPort = new webservicesproxywebcontent.proxy.SearchSoapClient();
                System.out.println("calling " + myPort.getEndpoint());
            } catch (Exception ex) {
                ex.printStackTrace();
         * delegate all operations to the underlying implementation class.
        public QuickSearchResult quickSearch(String queryText, IdcPropertyList extraProps) throws java.rmi.RemoteException {
            return _port.quickSearch(queryText, extraProps);
        }Also the secured web service was generated from Webcenter Content 11.1.1.6 that is why it's a secured web service.
    Kind Regards
    Carlos

    Without going into any technical discussion about the code, my first question is what JDK version was used to create this which was imported into the form? Understand that Forms 10 runs on JDK 1.4.2, so if you used any newer JDK version, likely there will be problems.

  • Can't re-add printer after removing from eprint center - 'Web Services Problem'

    I have an HP Photosmart Premium C310 series printer (Model Number CN503B) which I have been using with ePrint for about 18 months. Aside from intermittent issues it has worked, I use a chromebook most of the time so rely on the ePrint option via Google Cloud Print.
    Last week it stopped working, with every job in the list showing as cancelled. Following advice on the forum I removed the email address of the printer from the eprint center. I thought it would then be simple to add the printer back. However, I have been unable to connect the printer to the web service so I cannot create the code I need to add the printer back.
    STEPS TO REPRODUCE:
    1. Factory reset printer settings
    2. Factory reset network settings
    3. Restart printer and Reboot router
    3. Settings -> Network -> Wireless Setup Wizard
    4. Choose correct SSID, enter password for WPA
    5. ‘Connected to Network’
    6. Settings -> Web -> Enable Web Services
    7. ‘Accept terms’ screen -> Accept
    8. ‘Checking for product updates’ screen shows briefly then returns to 'accept terms' screen
    9. Next it makes a ping sound and shows ‘Web Services Problem’ ‘Problem connecting to Web Services Server’, it then pings again a few seconds later (which ties in with what I see in the network logs as a second attempt)
    10. Log on to printer via web interface and set IP address of printer to manual IP outside DHCP range (as advice on other threads in this forum). Check DNS setting valid (same as gateway server which all other devices on network are also using successfully as DNS)
    11. Repeat steps 6 and 7 - still same error message
    I consider myself technically savvy and have followed all advice I can find on this forum including the following:
    1. reverting to printer and network defaults
    2. rebooting router
    3. assigning static IP address to printer outside of DHCP range of router
    4. connecting to printer via web interface and setting DNS to variously: same as gateway, google DNS (8.8.8.8), ISP DNS
    5. adjusting firewall settings on router to explicitly allow and log outbound connection on the HP ports (already had a rule allowing all outbound connections)
    As mentioned, the printer worked fine with ePrint previously so I suspect the ePrint server is rejecting a request from my printer for some reason, maybe because there is old / corrupt  data on the server regarding my specific printer.
    I’m logging outbound traffic from the printer and here are what the router logs show me (printer IP replaced with 192.168.x.x below, even though it is not public )
    Thu, 2013-04-11 09:13:42 - TCP Packet - Source:192.168.x.x, 36475 Destination:15.201.202.81,80 - [HTTP rule match]
    Thu, 2013-04-11 09:13:43 - TCP Packet - Source:192.168.x.x, 51463 Destination:15.201.224.79,443 - [HTTPS rule match]
    Thu, 2013-04-11 09:13:44 - TCP Packet - Source:192.168.x.x, 53044 Destination:15.201.224.79,443 - [HTTPS rule match]
    Thu, 2013-04-11 09:13:44 - TCP Packet - Source:192.168.x.x, 51463 Destination:15.201.224.79,443 - [HTTPS rule match]
    Thu, 2013-04-11 09:13:44 - TCP Packet - Source:192.168.x.x, 53044 Destination:15.201.224.79,443 - [HTTPS rule match]
    Thu, 2013-04-11 09:13:51 - TCP Packet - Source:192.168.x.x, 64270 Destination:15.201.224.79,443 - [HTTPS rule match]
    Looks like both are HP sites: first is 'g4t2674.houston.hp.com' and the second secure one is ‘registration-pro-site2eprint.houston.hp.com’ which sound likely to be correct. That suggests the DNS is working but that the registration server doesn’t like the request for some reason.
    I had the printer registered for Google Cloud Print but I have now deleted that also and it doesn’t seem to have made any difference (assume it just formats and forwards to the HP ePrint email anyway).
    One hack that sheds some further light is to switch off wifi on the printer and then switch on ePrint. Eprint gives an error but stays set as 'on'. When I then switch wifi back on I can then at least check for product updates (it tells me I have the latest product updates). However, web services are still a 'no go'. Network traffic for that product update exchange looks like this:
    Thu, 2013-04-11 10:14:51 - TCP Packet - Source:192.168.x.x,63960 Destination:2.16.226.12,443 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:00 - TCP Packet - Source:192.168.x.x,63938 Destination:15.240.238.56,80 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:00 - TCP Packet - Source:192.168.x.x,63960 Destination:2.16.226.12,443 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:00 - TCP Packet - Source:192.168.x.x,39054 Destination:2.16.226.12,443 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:00 - TCP Packet - Source:192.168.x.x,63938 Destination:15.240.238.56,80 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:00 - TCP Packet - Source:192.168.x.x,39054 Destination:2.16.226.12,443 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:01 - TCP Packet - Source:192.168.x.x,63960 Destination:2.16.226.12,443 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:01 - TCP Packet - Source:192.168.x.x,63938 Destination:15.240.238.56,80 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:01 - TCP Packet - Source:192.168.x.x,39054 Destination:2.16.226.12,443 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:01 - TCP Packet - Source:192.168.x.x,63938 Destination:15.240.238.56,80 - [Any(ALL) rule match]
    Thu, 2013-04-11 10:15:01 - TCP Packet - Source:192.168.x.x ,39054 Destination:2.16.226.12,443 - [Any(ALL) rule match]
    So clearly the printer can communicate to those servers well enough to find it has the latest firmware. 
    I realise this is a lot of information but hopefully some of it is helpful for troubleshooting.
    Thank you in advance for any help!

    The issue disappeared this weekend. I didn't change anything so it must have been something server side. I notice others with the same issue have also seen it resolved.
    Thanks to all those who contributed and tried to help out. Although disappointed I went for a long time without ePrint I'm glad that action was apparently taken to resolve in the end.

  • Error while invoking secure web service.

    Hi,
    I am trying to access a secure web service through a simple BPEL process in SOA Suite 11g. When I test it through enterprise manager I am getting the following error. Since it's a secured websecure i set the WS policy(oracle/wss_username_token_client_policy) in the external reference and also provided the credentials. If anyone has come across similar error or know the solution please let me know. Also I am not sure if its related to security or is it with the way I am trying to call the service.
    Error Message:
    Fault ID     reference:80014
    Fault Time     May 22, 2011 12:54:45 PM
    Non Recoverable System Fault :
    javax.xml.ws.soap.SOAPFaultException: 99999: Unknown Service
    Error Message: {http://schemas.oracle.com/bpel/extension}remoteFault
    Fault ID     default/Mocking!1.0*soa_be35cb3e-5f05-49df-a696-a653d5703681/BPELProcess1/30017-BpInv0-BpSeq0.3-3
    Fault Time     May 22, 2011 12:54:46 PM
    Non Recoverable System Fault :
    <bpelFault><faultType>0</faultType><remoteFault xmlns="http://schemas.oracle.com/bpel/extension"><part name="summary"><summary>99999: Unknown Service</summary></part><part name="detail"><detail>&lt;con:fault xmlns:con="http://www.bea.com/wli/sb/context"> &lt;con:errorCode>99999&lt;/con:errorCode> &lt;con:reason>Unknown Service&lt;/con:reason> &lt;con:location> &lt;con:node>PipelinePairNode1&lt;/con:node> &lt;con:pipeline>PipelinePairNode1_request&lt;/con:pipeline> &lt;con:stage>stage1&lt;/con:stage> &lt;/con:location> &lt;/con:fault> </detail></part><part name="code"><code>soap:Server</code></part></remoteFault></bpelFault>

    Thanks very much for your suggestion. I will take a look into the wsdl again and see if something is wrong in that.
    I have a peculiar problem with the wsdl. When I created the partner link using the remote wsdl it would throw a compilation error. But when I took a local copy of the remote wsdl and seperated all the schema's from the wsdl and imported them inside wsdl it gets compiled. But I am not sure if this is a appropriate thing to do and if that is creating this problem. Any thoughts on this would be really helpful.

  • Unable to consume secured Web service from a Dynpro application

    Hello,
    I have followed <a href="http://help.sap.com/saphelp_nw04/helpdata/en/c3/bac36a469e4c75aba646077e71516d/frameset.htm">this tutorial</a>
    in order to protect and consume a secured Web service from a Dynpro application using SAP logon ticket.
    The problem is that after implementing everything needed I  receive 401 Unauthorized when I am trying to consume it from the web dynpro side.
    If I manually transfer the request the credentials, before the execute i.e:
    modObj._setUser
    modObj._setPassword
    modObj.execute();
    I am able to call it, meaning the dynpro application doesn't transfer these credentials to the Webservice even though it's authentication property is set to true.
    Any idea how to solve it?
    Roy
    Message was edited by:
            Roy Cohen

    Try below steps
    • Add jars
    o security.class
    o tc/sec/destinations/interface
    • Setting WebDynpro project property
    o Project>Properties>Web Dynpro References-->Interface references
    &#61607; Name=tcsecdestinations~interface
    o Project>Properties>Web Dynpro References-->Service reference
    &#61607; Name=webservices
    &#61607; Name=tcsecdestinations~service
    • Dynamically Set httpdestination and Call web service
    final InitialContext ctx = new InitialContext();
    final DestinationService dstService = (DestinationService)ctx.lookup(DestinationService.JNDI_KEY);
    if (dstService== null)
    throw new NamingException ("Destination service not available");
    final Destination destination = dstService.getDestination("HTTP"," DestinationName");
    // getting user name
    Properties destprop = destination.getDestinationProperties();
    String username = destprop.getProperty("USERNAME");
    String password = destprop.getProperty("PASSWORD");
    final HTTPDestination httpDestination = (HTTPDestination) destination;
    HttpURLConnection httpConnection = httpDestination.getURLConnection();
    String httpURL = String.valueOf(httpConnection.getURL());
    Request_AdvLocationVer1ViDocument_getLocation obj=wdContext.currentRequest_AdvLocationVer1ViDocument_getLocationElement().modelObject();
    obj._setUser( user );
    obj._setPassword(pass);
    obj._setEndPoint(httpURL);
    obj.execute();
    Rahul

  • How to call OWSM secured web-service from ADF application

    I have a OWSM secured web-service, which takes username/password.
    I want to invoke this webservice from ADF application. ADF application has its own security and it takes its own username/password. End user can't provide the username/password for web-service call. My ADF application should call the webservice and provide it appropriate username/password.
    What is the best practice to handle such scenario. I don't want to hardcode username/password in Java (ADF) code.
    Thanks
    Sanjeev.

    it is not clear to me if you are having problems with calling java code from OIM or if the problem is the web service API.
    Lets do some divide and conquer:
    Can you create a simple java class that just writes a couple of lines to the log? Please attach this code to the OIM task and make sure it runs.
    Once this works we can start looking at the web service call.
    Best regards
    /Martin

  • Calling secured Web Service

    Hi,
    I am new in calling web service from PL/SQL block.
    From the code I'm successfully able to call non-secured webservice like this "http://www.ignyte.com/webservices/ignyte.whatsshowing.webservice/moviefunctions.asmx?wsdl"
    And also by setting the wallet I'm also able to call secured web service like this "https://www.docusign.net/api/3.0/Credential.asmx?WSDL" (ping method).
    For calling this secured service I stored certs with chain into the wallet and that works.
    But my problem is a different web service where that web service is authenticating me with my certificate. I have VeriSign certificate with private key and that web service has my public key. Whenever I will send SOAP request I need to send my certificate with the request. And communication will be over SSL.
    I have created a wallet with complete chain from the PFX file I received from VeriSign and Wallet is in Ready state, also I have included web service's certificate also.
    Whenever I am trying to make SOAP call I'm getting
    ORA-00600: internal error code, arguments: [kgazmo_1], [], [], [], [], [], [], []
    Please let me know where is the problem. May be I'm not able to send my certificate for authentication or may be I'm not able to establish SSL for communication from PL/SQL.
    I'm using 10.1.2 as database. I also have 10g AS installed, if that can help in achieving this.
    Code is as follows:
    FUNCTION CallWS
    RETURN xmltype
    AS
    l_request soap_api.t_request;
    l_response soap_api.t_response;
    l_url VARCHAR2(32767);
    l_namespace VARCHAR2(32767);
    l_method VARCHAR2(32767);
    l_soap_action VARCHAR2(32767);
    l_doc xmltype;
    BEGIN
    l_url := 'https://secured.webservice.com/WS/WebService.asmx';
    l_namespace := 'xmlns="https://secured.webservice.com/WS"';
    l_method := 'GetMe';
    l_soap_action := 'https://secured.webservice.com/WS/GetMe';
    utl_http.set_wallet('file:c:/wallets','pass123');
    l_request := soap_api.new_request(p_method => l_method,
    p_namespace => l_namespace);
    soap_api.add_parameter(p_request => l_request,
    p_name => 'param1',
    p_type => 'xsd:string',
    p_value => 'val1');
    soap_api.add_parameter(p_request => l_request,
    p_name => 'param2',
    p_type => 'xsd:string',
    p_value => 'val2');
    l_response := soap_api.invoke(p_request => l_request,
    p_url => l_url,
    p_action => l_soap_action );
    l_doc := l_response.doc;
    RETURN l_doc;
    END CallWS;
    You can find SOAP_API package here [SOAP_API|http://www.oracle-base.com/dba/miscellaneous/soap_api.sql] .
    Thanks in advance.
    -Smith

    Thanks again Billy,
    I have configured a wallet with all the necessary certificates. Actually I have purchased a VeriSign trusted certificate and convert that into Oracle Wallet (p12) using openssl with appropriate password. And I'm calling UTL_HTTP.set_wallet('<path_to_wallet>','<pass_to_open_it>');
    I have send my public key to them (web service company) and they need me to send my certificate with every request so that they can authenticate.
    You are saying we don't have to write any code for TLS/SSL UTL_HTTP will take care of that, thats really good.
    One more thing I want to mention here...
    In Internet Explorer - When I am importing my certificate without my private key and trying to access web service I'm getting 404 page not found error.
    But when I'm importing my certificate with the private key, I can see WSDL and all other methods offered by that web service.
    I'm guessing Oracle Wallet that I'm creating with my certificate will store private key also. B'coz it is showing me User Certificate in Ready state.
    ORA-00600 is not giving me proper location where I can find any error in my code.
    Thanks
    -Smith

  • Secured web service for secured AM method

    Hello,
    I need to invoke method of secured Application Module (jbo.security.enforce = Must) from secured web service.
    I have a simple java class with Configuration.createRootApplicationModule ... and a web service built for this java class.
    I found I have to authentificate users twice. First time when invoking web service (this is ok) and second time when creating application module instance.
    The problem is I can get name of user logged in web service but I cannot get his password. So I cannot login to application module with the same user.
    How can I force adf business components to use user authentificated in web service to use him/her as adf bc user?
    Rado

    Hi Mayank,
    Chapter 7, Custom Serialization of Java Value Types, of the Web services developer guide may be a good place to get started.
    All the best,
    -Eric

  • Trouble connecting to https secure web service using Adobe Livecycle Designer

    I am attempting to use Adobe Livecycle Designer ES2 to create a data connection in a Form to a secure (https) web service and I'm having some difficulty.
    I'm new to Livecycle and have tried searching online for an answer, but the help isn't very clear and the only tutorials online that I can find are ones that connect to non-https services.
    The WSDL I'm trying to connect to is: https://uk.ws.ondemand.qas.com/ProOnDemand/V3/ProOnDemandService.asmx?WSDL
    My questions are:
    Q1. Does Adobe Livecycle support https web service connections? The following link suggests that this isn't possible: http://books.google.co.uk/books?id=yOOcM3Bn4BAC&pg=PA179&lpg=PA179&dq=secure+web+service+w ith+adobe+livecycle&source=bl&ots=jm1GIZflOJ&sig=uLfv5Xda4eXXJl5o_7vBViwU-w0&hl=en&sa=X&ei =WLvIT5P4OujW0QWmv7nDAQ&ved=0CI4BEOgBMAk#v=onepage&q=secure%20web%20service%20with%20adobe %20livecycle&f=false
    Q2. I've managed to consume the WSDL but can only see the body of the XML request for a particular SOAP action. Where can I add the username/password credentials? I've selected "Requires Message-Level Authentication" during the new connection wizard, but it doesn't prompt me at all for these details.

    Hi,
    I tried using SOAP.Connect too..
    But I am facing the same problem.
    Any solution found yet?
    Rgerads, Amith

  • Error while invoking a WS-Security secured web service from Oracle BPEL..

    Hi ,
    We are facing some error while invoking a WS-Security secured web service from our BPEL Process on the windows platform(SOA 10.1.3.3.0).
    For the BPEL process we are following the same steps as given in an AMIS blog : - [http://technology.amis.nl/blog/1607/how-to-call-a-ws-security-secured-web-service-from-oracle-bpel]
    but sttill,after deploying it and passing values in it,we are getting the following error on the console :-
    &ldquo;Header [http://schemas.xmlsoap.org/ws/2004/08/addressing:Action] for ultimate recipient is required but not present in the message&rdquo;
    Any pointers in this regard will be highly appreciated.
    Thanks,
    Saurabh

    Hi James,
    Thanks for the quick reply.
    We've tried to call that web service from an HTML designed in Visual Studios with the same username and password and its working fine.
    But on the BPEL console, we are getting the error as mentioned.
    Also if you can tell me how to set the user name and password in the header of the parter link.I could not find how to do it.
    Thanks,
    Saurabh

  • Calling secured web service from Pl SQL

    Hi
    I am trying to call a secured web service from pl/sql using utl_http.
    Is there a sample pl/sql program that i can refer to call a secured web service.
    sample soap header that am trying to acheive.
    <soap:Header>
    <wsa:Action>http://myactaction</wsa:Action>
    <wsa:MessageID>uuid:asdfadrewrwqr</wsa:MessageID>
    <wsa:ReplyTo>
    <wsa:Address>http://schemas.xmlsoap.org/ws/2004/03/addressing/role/anonymous</wsa:Address>
    </wsa:ReplyTo>
    <wsa:To>http://myact</wsa:To>
    <wsse:Security soap:mustUnderstand="1">
    <wsse:UsernameToken wsu:Id="SecurityToken-321321">
    <wsse:Username>mordfsafsdae</wsse:Username>
    <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">werwqrewrwe</wsse:Password>
    </wsse:UsernameToken>
    </wsse:Security>
    </soap:Header>
    Thanks a ton in advance

    Hi,
    On way we can call a web service is to pass the Web Service URL to UTL_HTTP package:
    Sample Web Service URL
    ===================
    lv_url :=
    'http://67.97.189.151:8888/plsqlsample/dbfunc?invoke=placeOrder'
    || '&'
    || 'param0=1'
    || '&'
    || 'param1=1'
    || '&'
    || 'param2=1';
    Sample Call using UTL_HTTP
    =====================
    SELECT UTL_HTTP.request (lv_url)
    INTO lv_result
    FROM DUAL;
    Thank you.
    Regards,
    Balu

  • Best Practice for Securing Web Services in the BPEL Workflow

    What is the best practice for securing web services which are part of a larger service (a business process) and are defined through BPEL?
    They are all deployed on the same oracle application server.
    Defining agent for each?
    Gateway for all?
    BPEL security extension?
    The top level service that is defined as business process is secure itself through OWSM and username and passwords, but what is the best practice for security establishment for each low level services?
    Regards
    Farbod

    It doesnt matter whether the service is invoked as part of your larger process or not, if it is performing any business critical operation then it should be secured.
    The idea of SOA / designing services is to have the services available so that it can be orchestrated as part of any other business process.
    Today you may have secured your parent services and tomorrow you could come up with a new service which may use one of the existing lower level services.
    If all the services are in one Application server you can make the configuration/development environment lot easier by securing them using the Gateway.
    Typical probelm with any gateway architecture is that the service is available without any security enforcement when accessed directly.
    You can enforce rules at your network layer to allow access to the App server only from Gateway.
    When you have the liberty to use OWSM or any other WS-Security products, i would stay away from any extensions. Two things to consider
    The next BPEL developer in your project may not be aware of Security extensions
    Centralizing Security enforcement will make your development and security operations as loosely coupled and addresses scalability.
    Thanks
    Ram

  • How to consume a secure web service?

    Could someone post me an sample to invoke the certificate based secure web service?
    All I have is wsdl, certificate (.pfx file) and password and client jar file. Searching for the sample program to access the secure web service.
    I work on weblogic workshop.

    Unfortunately, I have just been provided with the endpoint and the SOAP action. Don't have any other details :(

  • How to call a secure web service via XAI Sender in CC&B

    Hi All,
                I want to a call a secure web service from CC&B through out bound message. I have configured the calling  WSDL in XAI Sender. The wevservice is secured one.I tried to call it by configuring user name and password in XAI sender context.But still i am not able to call the service.
    Can anybody help me how to over come this issue ??
    I have cretaed the same post under utilities,but i am not able reply it.
    I am using HTTPSNDR  as XAI class.
    Thanx in advance.
    Regards
    sunil

    Are you getting any errors? What type of XAI Class are you using?
    One thing I've noticed is that if you are making changes to the XAI Sender you will have to restart the environment before the changes can take effect.
    Also, if you are using RTHTTPSNDR as XAI Class you may have to include the HTTP Method - Post in the context.
    Hope this helps.
    Regards,
    Philip

Maybe you are looking for

  • After installing Darwinports 2.1, Apache no longer works

    Hi, After installing Darwinports 2.1 and Awstats 6.5 (via DP), Apache no refuses to start via the System Prefs. I noticed that during the Awstats install, DP started installing a lot of stuff, like Apache 2.2.2. Does anyone know if this has anything

  • MacBook no longer goes to sleep automatically

    I asked the question in the Mac Pro forum by mistake.. Hopefully I can get some input here? My MacBook no longer goes to sleep automatically after the 'Computer Sleep' period has elapsed and without me using it. I can however make the MacBook go to s

  • Using reflection...

    Hi, I have one class. to run that, I am calling like the following... java -classpath ;.;\comdotebo; com.pack1.MyClass now I want to take the reference of this class(dynamically) using reflection pakcage like the following... Class cla = Class.forNam

  • ALV-multiple language output

    Hi All, I have created a ALV report, in the sel.screen I have 2 radiobuttons with text English and Arabic. Now if I excecute the report with radiobutton - English, the O/P should be in English and if I excute the report with radiobutton - Arabic, I w

  • F-28/Post Incoming Payments

    Hi All, When doing F-28 (post incoming payments), getting "No open items were found". I also checked in FBL5N and saw "No items selected" for customer account and company code. I have created order till invoice. Please let me know how to create accou