Supported token types for signature validation

I am using weblogic 9.2 to publish a webservice.
I have used the basic auth.xml and sign.xml policies for security. I am using X509 certificates for identity and signing. My client works when I leave the sign.xml policy off the web service but as soon as I put it back on it fails with the follows error:
<WSEE>weblogic.xml.crypto.wss.WSSecurityException: Could not validate signature using any of the supported token types
I am using axis 2.0 for my client.
Why does this not work???

Don't worry about it. I solved the problem. See below:
The problems was that weblogic by default must sign the binary token which is used in the soap message. When using axis 2 you must configure which parts you wish to sign using the signatureParts element in their configuration file.
The magical extra part you must add is Token. An example is shown below:
--> <signatureParts>
{Element}{http://schemas.xmlsoap.org/soap/envelope/}Body;
{Element}{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd}Timestamp;Token
</signatureParts>
The Token keyword is a special predefined word and does not require the standard notation which you see for the Body part. Once this is specified the error message " Could not validate signature using any of the supported token types " dissappears and all works fine.
Therefore I would just like to state that AXIS 2.0 with WSS4J does work with Weblogic 9.2 for signing and X509 binary tokens.
Thanks for your response to my initial query.

Similar Messages

  • Supported data type for JDBC storeproc mapping ?

    Hi,
    I have scenario to call oracle procedure from XI. Could you help me what kind of the supported type that i can use in my message mapping ? because in message mapping i have to define all the procedure input type. but then i can't use type like VARCHAR2, NUMBER ? but type like INTEGER, CHAR is working.
    anybody know where i can find the document or link on this ?
    Thank you and Best Regards
    Fernand

    This link answer all my question, http://help.sap.com/saphelp_nw04/helpdata/en/2e/96fd3f2d14e869e10000000a155106/content.htm

  • Supported data types for BASIC compression.

    Hi,
    I am in the way of preparing a white paper for one of my customer on basic compression.
    As per the URL below, it says that there is a separate compression method for LOB type objects.
    http://docs.oracle.com/cd/E11882_01/server.112/e25494/tables.htm#CJAGFBFG
    Now my question, apart from LOB type, can i use basic compression method for all other data types. Any restrictions. Thanks in-advance.
    as per below URL, there is a different method for compressing LOB. They are talking about secure file LOBs not basic LOBS.  what is the method for compressing normal/basic LOBs.
    Using Oracle SecureFiles LOBs
    Regards
    DBA.

    You can not compress normal/basic LOBs.
    Compression and Deduplication on SecureFile LOB data requires the Advance Compression add-on.
    Compression ratios are comparable to WinZIP/gzip.  However, since this works on a block level, it may only be useful when the LOBs are significantly larger than your DB Block size (normally 8k)
    YOU MUST RUN BENCHMARKS!!!!
    BASIC and OLTP Compression apply to the table, not any particular column.
    BASIC is only good for bulk load.  (i believe it is 'free'.. but don't quote me.)
    OLTP requires Adv. Compression.
    MK

  • Exporting .dv files to supported files types for Windows Movie Maker

    I am digitizing all of my friends' family videos with iMovie and I now have them all as Apple .dv files. Unfortunately some of my freinds do not have Macs, so I must convert them. There are many options for converting .dv files to formats that Windows Movie Maker can import, but every combination of wrapper and codec I have tried has either resulted in low quality or results in a size that it is at least double. Because these are family memories I do not want to lose quality compared to the Apple Mac .dv files that I have. On the other hand, I would prefer not to double the file size for the same quality that I had.
    What converter do you recommend and what combination of wrapper (mpeg4, avi, mov, etc.) and codec (h264, jpeg, etc.) can convert Mac .dv files into full resolution files for Windows Movie Maker?
    What I have tried:
    I was advised by Applecare to try DivX converter, but it does not accept .dv files. I have been trying Mpeg Streamclip with the following combinations:
    exporting to AVI with DivX Codec seemed low quality
    exporting to AVI with H.264 was not readable by Windows Movie Maker
    exporting to AVI with Apple Photo JPEG Codec was more than twice the orginal .dv file size
    Thanks.

    mkl111 wrote:
    ...  There are variants of dv files and .. .
    best to my knowledge - no.
    .dv is a standard, created by movie-cams. iMovie handles this codec 'natively'.
    only allowed differences are PAL and NTSC …
    I copied a zillion .dv files without processing/editing directly from the Events folder onto a fat32-formatted HDD.
    but even edited movies are compatible: Export using Quicktime and in the drop down DV-STREAM ...
    afaik, in Movie Maker you have to choose 'Import file'  - done.
    sorry, no idea which of the hundred of versions of WMM is in use on the other side of the street

  • OAuth 2.0 Token type 'urn:ietf:params:oauth:token-type:jwt' is not supporetd.

    I'm trying to setup OAuth 2.0 integration with Azure API Management to show how we can leverage the product for a our public API ecosystem.
    I'm unable to authenticate using any of the options provided. 
    I'm using the API console in the developer portal for my site.
    All settings are configured to the best of my knowledge. OAuth 2.0 is working on our IDP 
    Authorization Code Flow fails with 
    Token type 'urn:ietf:params:oauth:token-type:jwt' is not supporetd. 
    The error shows up above the Authorization Dropdown in the console window on the API Developer Portal provided by Azure API Management
    Implicit Flow doesn't redirect back to the console page correctly after authentication and permissions. The callback URI is configured correctly, authentication works, but the redirect doesn't close the window and return to the console.
    I tried in IE and Chrome.
    Resource Owner Password Flow fails with 
    Token type 'urn:ietf:params:oauth:token-type:jwt' is not supporetd.
    The error shows up above the Authorization Dropdown in the console window on the API Developer Portal provided by Azure API Management
    Client Credentials Flow is not supported on our IDP.
    We like the product but can't move forward without getting this figured out. 

    Hi,
    We currently only support token type "Bearer". It would work if you replace token type from 'urn:ietf:params:oauth:token-type:jwt'
    to Bearer. 
    Regards,
    Miao

  • Not able to add Select Supported Document Types

    Hi
    I am new to Oracle B2B.
    Going through the steps given in the tutorial http://download.oracle.com/docs/cd/E14571_01/integration.1111/e10229/b2b_tps.htm#BABGAJDE
    Completed till 5.3 - Task 2 (Add a User in the Oracle B2B Interface)
    And the Next thing,
    I am not able to Add Select Supported Document Types.When I click on the "Add supported document type for the selected user", i can see "CUSTOM", "EDI_EDIFACT" etc... but in that screen my "Add" Button was disabled.
    Please let me know how to proceed with this.
    Thanks,
    Deepthi.
    Edited by: 796969 on 27/09/2010 14:11

    Hi Deepthi,
    You can download the samples from below location. Samples also has document for step by step configuraion:
    B2B Samples are part of SOA samples:
    http://www.oracle.com/technology/sample_code/products/soa/index.html
    Developer Notes / Step by Step configuration guide:
    http://www.oracle.com/technology/products/soa/b2b/index.html
    http://www.oracle.com/technology/products/soa/b2b/collateral/B2B_TU001_EDI.pdf
    http://www.oracle.com/technology/products/soa/b2b/collateral/B2B_TU002_HL7.pdf
    http://www.oracle.com/technology/products/soa/b2b/collateral/B2B_TU003_ebxml.pdf
    http://blogs.oracle.com/oracleb2bgurus/2010/04/oracle_b2b_started_kit.html
    Please let us know which usecase you are trying for more details.
    Rgds,
    Nitesh Jain
    [email protected]

  • What are supported video types

    What are the supported video types for itunes u course manager

    See:
    http://sharepoint.nauplius.net/2013/01/supported-file-formats-in-the-sharepoint-2013-media-web-part/
    Trevor Seward, MCC
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Pulling my hairs for a valid pdf signature

    Using Acrobat Pro 9 with a new server certificate from a different CA I've been trying to put a valid signature in a pdf file. For some reason acrobat is giving me the "Signature is invalid" message with a red cross. When I open the Certificate-details dialog I see a "!" at the bottom with the message "The selected certificate path has errors: Invalid policy constraint". I'm not really sure what this means? which constraints are invalid? Then I read acrobat can make a log file during the validation process so I wondered if this could help, I got something like this (I edited some parts to protect my client):
    20110913195706Z:
    20110913195706Z: Validating cert graph with 1 chains
    20110913195706Z: Validating chain: CertChain_[edit] Length = 5
       20110913195706Z: ----ChainBuilder----
          20110913195706Z: Processing Certificate: DN: cn=[edit] CA - G2, o=[edit], c=NL Serial: [edit]
          20110913195706Z: verification time = 20110913131236+0200
          20110913195706Z: Processing Certificate: DN: cn=[edit] - G2, o=[edit], c=NL Serial: [edit]
          20110913195706Z: verification time = 20110913131236+0200
          20110913195706Z: Processing Certificate: DN: cn=[edit] - G2, o=[edit], c=NL Serial: [edit]
          20110913195706Z: verification time = 20110913131236+0200
          20110913195706Z: Processing Certificate: DN: cn=[edit] - G2, o=[edit], c=NL Serial: [edit]
          20110913195706Z: verification time = 20110913131236+0200
          20110913195706Z: Processing Certificate: DN: cn=[edit], ou=[edit], o=[edit], l=[edit], st=[edit], c=NL Serial: [edit]
          20110913195706Z: verification time = 20110913131236+0200
          20110913195706Z: Chain builder added trouble flags 0x200
       20110913195706Z: Finished Chain Validation.  TroubleFlags: 200
    20110913195706Z:
    I'm particularly interested if anyone knows what this line "Chain builder added trouble flags 0x200" means???
    Any help is greatly appriciated!

    Hi lullolullo,
    You've come the right place. Signature validation starts with trust. If you don't trust the signer, or one of the certificates in the signing chain then nothing happens. A signature chain looks something like this:
    Big Time CA Root Cert
        Intermediate Certificate Authority
            End-Entity (the signer, or in this case, you)
    You have to assign trust to at least one of the certificates in the signature chain. You can either add trust via the Manage Trusted Identities dialog, or, via a preference where you can inherit trust from the Windows Certificate Store (Windows only, no Mac). To see the chain in the signature you are looking at do the following:
    Right Mouse Click on the signature
    Select Show Signature Properties from the pop-up menu
    Click the Show Certificate button on the Signature Properties dialog
    The chain is displayed in the tree view on the on the left side of the dialog
    If you select the Trust tab and then select the different certificates in the chain view you will be able to see which one is the trust anchor.
    Enough about trust, on to Policy Restrictions. When a Certificate Authority (CA) issues certificates they will often add the Certificate Policy extension. You can find this by selecting the Details tab and scrolling the list box for  Certificate Policies. The policy is a long dotted number that acts as a marker for a specific set of rules. The rules themselves tend to be published online in a "Certificate Practice Statement" document, but that's getting a little beyond the scope of your problem. The rule might mean something like all certificates issues under this policy constraint are issued to employees of Company XYZ and have to be on a hardware token. That's an example of something you might see, but I'm not saying it the exact scenario you are facing.
    The Root CA usually doesn't have a Certificate Policy extension, but all of the certs under it do meaning that this particular chain obeys a specific set of rules.
    On to enforcing the rules. Let's say you have Big Time CA that issues certificates for IBM, Microsoft, Apple, and Adobe. Each one of those chains would contain a different Certificate Policy. Now let's say that I've trusted Big Time CA, which means every signature that created that chains up to Big Time CA would be trusted and valid. Now lets say I only want to trust the signatures that come from my fellow Adobe employees. What I would do is add a Policy Restriction to the trust setting, thus making trust more granular.
    Next up, where to find the Policy Restriction. Select the Policies tab on the Certificate Viewer. When you are viewing the same certificate that is designated as the trust anchor do you see something in the Policy Restrictions group box? By something I mean data in the Certificate Policies edit field that will appear to be grayed out. If so then the signers certificate, and all of the other certificates in the chain have to have the Certificate Policy Extension with that number in it.
    If the restriction is there, you can remove it by going to the Manage Trusted Identities dialog, which you get to from the Advanced menu. From there you need to select Certificates from the Display drop-down list. Find the certificate that corresponds to the trust anchor, selected from the list box, and then click the Edit Trust button. Finally, select the Policy Restrictions tab on the Edit Certificate Trust dialog. However, I'm not advising you to break any company policy if they want the restriction in place.
    Steve

  • Mac won't open some files MasterPlan.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wasn't correctly decoded).

    I had this problem of not being able to open some files a couple of years ago and eventually was able to fix it but i can't remember how. Any help would be grateful.

    The following document should help: Error: Adobe Reader could not open '*.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and was not correctly decoded.)
    Please update this thread if your issue is resolved.
    Thanks,
    Shashi

  • Power View in SharePoint Server - The data extension type for a data source is not valid

    Hi All,
    All of a sudden I am getting following error when trying to create Power View report using shared report data source (no error testing the connection):
    "The current action cannot be completed. The data extension type for a data source
    'http://dev/Shared Ducuments/Sales.rsds' is not valid for this operation"
    I already have a data source (I had created it after creating my site collection a week ago) and when I use this source to create Power View report then there is no error but I am getting above error when I create another similar data source and use it to create
    a Power View report.
    Please help me to resolve the error.
    Thanks

    I am going nuts! I had selected 'Analysis Services' instead of 'Microsoft BI Semantic Model for Power View'

  • I bought an ebook but when I  try to download it I receive a message stating 'Adobe reader could not open .....acsm because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wa

    Can anyone assist me? I keep receiving this message when I download my ebook ''Adobe reader could not open .....acsm because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wasn't decoded).'
    Much appreciated

    I think you should ask in the Digital Editions forum, Adobe Digital Editions

  • Help.  How do I fix this?  Have been using adobe reader opening this template for months and now all of the sudden its not working.Adobe Reader could not open 'NSCAAInteractiveSessionPlan.pdf' because it is either not a supported file type or because the

    I coach youth soccer and use a PDF template to save my sessions in.  Today I got this message when trying to open one of my sessions.
    Adobe Reader could not open 'NSCAAInteractiveSessionPlan.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wasn't correctly decoded).
    How can I fix this?  I have not done anything I don't normally do.

    What is your operating system?  Reader version?

  • Why can't I open a pdf file on my desktop?  I keep getting this message: Adobe Reader could not open '8pdk_96_4.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and w

    Why can't I open a pdf file on my desktop?  I have Adobe Reader and running OS 10.10.1  I keep getting the same message: "Adobe Reader could not open '8pdk_96_4.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wasn't correctly decoded)."

    I tried that.
    I saved the file 8pdk_96_4.pdf to my desktop and tried to open it using Adobe Reader but I get the same message: Adobe Reader could not open '8pdk_96_4.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wasn't correctly decoded).

  • When I try to open a PDF downloaded from Adobe DC I get an error message:Adobe Acrobat Reader DC could not open 'nrneph.2015.33.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email

    When I try to download a PDF from Adobe DC, I get an error message: "Adobe Acrobat Reader DC could not open 'nrneph.2015.33.pdf' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wasn't correctly decoded)"
    I am using a Macbook Pro, OSX 10.9.5, Safari browser. Previous versions of Adobe Acrobat have worked fine for years.
    WGC

    What's the name of the file you are attempting to open?  Is it "ScreenFlow_4.5.2.dmg"?  If it is the correct name then the message is correct and you are attempting to open a file with DMG files extension and not one with a PDF file extension.  Adobe Reader opens PDF files an not any other file type.

  • I keep getting an error on my MAC when i try to open any and all JPG FILES.  How do I correct  Adobe Reader could not open 'images rest 12-4.jpg' because it is either not a supported file type or because the file has been damaged (for example, it was sent

    Adobe Reader could not open 'images rest 12-4.jpg' because it is either not a supported file type or because the file has been damaged (for example, it was sent as an email attachment and wasn't correctly decoded).
    that is the message how do i correct this problem

    It sounds like your file associations are messed up and Reader is trying to open your .jpg files. Is this correct?
    If so, you just need to change the associations to choose what application opens them. Here's how: Change File Associations in Mac OS X

Maybe you are looking for

  • Weblogic 10.0.1 deploying problem

    Hi, I'm starting to use BEA workshop and I'm experiencing some problems to deploy a Dynamic Web Project. I've created a new Dynamic Web Project and without making any changes, generated the war file. Everything seemed to be ok during the deploy since

  • Regd:Purchase Order

    Hi All, My require ment is to Calculate the Vendor Performance Based on Change in Delivery Date (Item Level), Open Qty(Item Level) and Statistics-relevant delivery date (Header Level). For that the field Open Qty - OBMNG is relevant. Pls do suggest m

  • BT Infinity - line calibration and possible speed...

    Hi, We recently had BT Infinity installed (14-03-2013) and the speed has dropped significantly from 37 to about 20mb Up load seems fairly consistent at 8mb The engineer told us that the line calibration should only take 24hrs so I'm hoping there is a

  • Video podcast help.

    i everyone, is it possible to put just the audio from a video podcast to say an ipod mini?

  • EJB Session Bean in Java Studio Creator

    Hello! I just download the creator 2, and imported some of my EJB that i created with Sun Application Server. It sounds like that the import was successful and i can see my files under EJB in servers windows. I am creating some form with creator and