Transportation of security through header from proxy to business service

Hi,
I have an application in which i have implemented web security at proxy service level. I couldnt transport that to business service.
I have embedded USERNAME and PASSWORD in the header of the proxy service. This authentication should pass through to the business service, which in turn calls the SOA composite. How can i transport my credentials from proxy to business service.
Thanks
Karthick

Solved

Similar Messages

  • Editing proxy and business service security with WLST

    My customer wants to manage the OSB with WLST as much as possible. I'm wondering if it is possible to handle the security and policies on proxy and business service with WLST.
    Any ideas or links to documenation are welcome.
    Thanks!

    I think you can do this. Please refer - http://docs.oracle.com/cd/E14571_01/core.1111/e10043/wlstcmds.htm#CHDGHDFJ
    But not sure of how much flexibility you will get with WLST. I will recommend using OWSM that is specifically used for similar activities for the soa suite.
    Please refer - http://docs.oracle.com/cd/E21764_01/web.1111/e13713/owsm_appendix.htm & http://docs.oracle.com/cd/E21764_01/doc.1111/e15866/owsm.htm for more details.
    Thanks,
    Patrick

  • Dynamic timeout for OSB proxy or business services

    The scenario we got here is that we will have multiple synchronous webservices implemented as OSB proxy services. These proxies will then invoke a common "routing" proxy that will determine which other OSB proxy or business services (JMS Request/Response) to call and does the dynamic routing.
    I understand that you can set a timeout at the business service level how long to wait for a response (at least when using the JMS transport). The problem is we got the requirement that the timeout value would be dependent on the role of the caller invoking the frontend webservice (this is done via some kind of lookup to determine the appropriate timeout setting for the invocation).
    Is this possible? I can't seem to find anything exposed in the transport header that allows me to set a timeout value during runtime. This means that the frontend proxy will be waiting for a response depending on the business service timeout setting. Can we implement a timeout in this frontend proxy somehow?
    Stumped right now over this. Thanks in advance for helping out.

    >
    Are there other reasons why you say it's not the most ideal way of development ?
    >
    Versioning binary files is always a pain. You can't compare them, you can't merge them ... Another point, if you put your jar archive with OSB artifacts under version control, you will most probably face issue related to end of line styles (mac, unix, windows).
    However, the most important point is usability. I want to version .proxy and .biz services to see right in IDE that I changed something and I should check that in for the others. I don't want to risk that I forget something. And I also want to see what other users committed, what sources they work on ... You loose all of that by versioning jar file. I would never go this way.

  • Need Java API's to create OSB proxy and Business Services

    Hi All,
    I need to create OSB proxy and business services using Java API's. Does any one have reference to the OSB APIs??

    AFAIK it is proprietary.
    What I do in a similar situation is to form XML for the services, package them into JAR the same way as an import JAR is packaged (creating ExportInfo resource, ...) and deploy with standard WSLT script. Works for simplest services only (direct proxies mostly) but I can also form security, alerts, throttling etc etc etc -- all in one shot.
    Out of sheer interest, may I ask you a question? Why do you need to create OSB services from Java?
    Vlad
    http://vladimirdyuzhev.com

  • Applying configuration on proxy- or business-service

    Hello! When i apply configuration on working proxy- or business-service with a lot of messages, then i can have trouble with http_500 code at ~1 second on OSB's cluster nodes. I just want to know how this work. Is OSB loses some messages from business service, or nothing receiving messages is lose and http_500 is only for new requests (like graceful restart)?

    (My opinion only though based on observation. I did not actually read the design papers on that).
    OSB artifacts are internally compiled into EJB applications. When configuration changes, old applications are unloaded, new ones loaded. In between you get 500 with a message saying something like "Configuration is in transition".
    My understanding the messages that are in-flight within the old applications are trying to complete while the unloading happens. Some will, some won't.
    Incoming messages coming during the unload-load gap get 500.
    Messages after the new EJB is loaded are processed successfully.
    If you must provide message deliver guarantees, you gotta go with persistent storage (JMS) and transactions.

  • Security between Proxy and Business Services

    Dear All
    We are trying to restrict business service access only through proxy services. Will outbound security using service accounts can do this task? I enabled basic authentication at business service level and tried to pass username/password token through soap header in proxy service. I get "The invocation resulted in an error: Unauthorized." error.
    Please suggest if this is the correct approach.
    Thanks,
    Amjad.

    I'm affraid you didn't get the very basic meaning of business service.
    >
    I want BS1 to be accessed only through PS1 and hence need to secure BS1.
    >
    1. You don't need to secure BS because of this reason since every BS can be accessed only through PS. There is no way you can call BS outside of OSB. BS is just a definition of external (business) service.
    2. Authentication set on BS is not meant to restrict access to BS itself. It is set to use credentials to access some service from OSB (WS1 in your case).
    >
    When BS1 is directly accessed through OSB console, I get "The invocation resulted in an error: Unauthorized".
    >
    This is only a testing form. Again, there is no chance you could call BS outside of OSB. On top of that, if you test BS which has pass-through account set, the test fails as there are no credentials to be passed to BS from PS as there was no PS called.
    I suggest you go back to OSB basics:
    http://docs.oracle.com/cd/E13159_01/osb/docs10gr3/tutorial/tutIntro.html#wp1045005
    http://docs.oracle.com/cd/E14571_01/doc.1111/e15020/architecture_overview.htm#i1094753

  • File Name and File Content  not gettinng passed from Proxy to Business Serv

    Hi All ,
    I have a requirement in OSB , where i need to pick the file from remote Source and FTP the files to Remote Target .Below are the steps which i did to achieve this.
    1.Created a FTP Adapter in JDeveloper to Get the files from Source and a FTP Adpater to Put the files to Target.Inboth the adapters i have choose 'Shema is Opaque'
    2.Imported the wsdl and jca file to OSB
    3.Generated Proxy Service (PS ) and Business service (BS) out of Step 2
    4.I edited the Message flow such a way that , the PS is routed to invoke the BS
    Aslo i assigned $inbound/ctx:transport/ctx:request/tp:headers/jca:jca.file.FileName to a variable 'FileName' in PS
    and in BS service i passed $outbound/ctx:transport/ctx:request/tp:headers/jca:jca.ftp.FileName = 'FileName'
    When i tried to activate my session , the file that is getting written to the target has 0 byte.Also , the file name is also not getting passed from PS to BS
    Can some one help me with the steps on how to use the Xpath , so as to pass the file name and file body from proxy servive to business service.
    Thanks
    John

     I search multiple shares to find a common file name then create a single output file. I will be doing this search and file creation
    for 5-10 different file names. If there is a better way .. certainly open for suggestions. It's working but having issue with
    the cmd file for every file and folder I check. It puts this error out for each run of the process.
      Error message in LOG file:
    Get-ChildItem : Cannot find path 'F:\powershell\-SearchFor' because it does not exist.
     Thanks.
    I tried your code with little changes and saved in Temp folder.
    My CMD file has the below code
    PowerShell C:\Temp\Untitled1.ps1
    It worked.
    Regards Chen V [MCTS SharePoint 2010]

  • Unable to call  BPM process webserivce  from Proxy in  oracle Service bus

    I created business service in oracle service bus through BPM process WSDL. later Created proxy out of business service. In proxy service MessageFlow I created a route node with service as my BPM process business service. When i invoke proxy I am always getting the following error.
    Request :
    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:proc="http://bea.com/albpm/Sapme_test_1/Process">
    <soapenv:Header/>
    <soapenv:Body>
    <proc:startSession>
    <password>Participant</password>
    <user>Participant</user>
    </proc:startSession>
    </soapenv:Body>
    </soapenv:Envelope>
    Response :
    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
    <soapenv:Body>
    <soapenv:Fault>
    <faultcode>soapenv:Server</faultcode>
    <faultstring>BEA-380000: General runtime error: socket write error: Connection aborted by peer</faultstring>
    <detail>
    <con:fault xmlns:con="http://www.bea.com/wli/sb/context">
    <con:errorCode>BEA-380000</con:errorCode>
    <con:reason>General runtime error: socket write error: Connection aborted by peer</con:reason>
    <con:location>
    <con:node>RouteNode1</con:node>
    <con:path>request-pipeline</con:path>
    </con:location>
    </con:fault>
    </detail>
    </soapenv:Fault>
    </soapenv:Body>
    </soapenv:Envelope>
    I tried the same example with general webservice instead of BPM Process it is working fine.
    regards,
    pv

    Even Some times I am getting the following error
    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
    <soapenv:Body>
    <soapenv:Fault>
    <faultcode>soapenv:Server</faultcode>
    <faultstring>BEA-380000: BAD REQUEST</faultstring>
    <detail>
    <con:fault xmlns:con="http://www.bea.com/wli/sb/context">
    <con:errorCode>BEA-380000</con:errorCode>
    <con:reason>BAD REQUEST</con:reason>
    <con:location>
    <con:node>RouteNode1</con:node>
    <con:path>response-pipeline</con:path>
    </con:location>
    </con:fault>
    </detail>
    </soapenv:Fault>
    </soapenv:Body>
    </soapenv:Envelope>
    regards,
    pv

  • Call another proxy via business service of first proxy

    I have a proxyservice1. I want to call another proxy service (proxyservice2) via business service (businessservice1).
    My proxyservice1 routes to businessservice1.
    So in my businessservice1 I have mentioned the below URL in "Transport Configuration"/"Endpoint URI" in "Business Service Configuration" .
    My proxy service "proxyservice2" url to be called:
    http://localhost:7001/projectname1/foldername1/ServiceName1
    I have logging in proxyservice2 as first step. But I don't see the traces of "proxyservice2" getting called from businessservice1 of proxyservice1.
    Is the format of url for the proxy "proxyservice2" correct? Also is the above procedure valid?

    Hi,
    Why dont you create the business service 1 upon the proxy service 2?..There is an option in Business service configuration where u can create a BS upon a PS.
    Have you tested proxy service 2 using test console?..can u see the reports?..
    If yes test BS1 and check if you can see the reports...
    Atlast u can check if testing PS1 shows u the reports of PS2.
    I think this shoul wok...Please let us know of any problems..
    Regards.

  • Regarding JMS-Queue/Topic in Proxy and Business service in OSB

    Hi
    I have one query regarding to the JMS-Queue/Topic.
    I am published the message to the JMS-Queue/Topic.
    ----My Business-service configuration is---
    General----Any xml
    Tranport--jms://localhost:7001/MyConnectionFactory/RequestQueue
    Response--None
    I call this Business-service in proxy-service of Routing message was published successfully to thee Queue.
    I try to dequeue the message from that queue for this
    --- I take another proxy with---
    General----Any xml
    Tranport--jms://localhost:7001/MyConnectionFactory/RequestQueue
    In meassage flow
    Routing--second busines-service)
    --- Second business-service configuration is---
    General----Any xml
    Tranport-File (C://temp)
    Issue is when I publish the message to Queue,the message is also found in the file  i.e C:temp. I don't now why  this come to the file.*
    Any suggestions
    Thanks
    Mani

    Either I did not get an idea, but in your JMS proxy you are routing to File :)
    If you don't want file, why route to 2nd BS ?

  • Can OSB proxy and business service act as a stub ?

    Hi all,
    would like to enquire whether I can achieve the following. I have a web service consumer. Can the consumer call a OSB proxy service and within the proxy service, I use XQuery and extract the body and perform some transformation. And the proxy service return variables to the consumer? Without calling any business proxy in the process
    Can the proxy service act as a stub? Would I need a dummy business service for it?
    Or my objective cannot be achieved in OSB?
    Appreciate any thoughts.

    Hi,
    Assuming the incoming body contains "name: Peter, age: 13". Can the return information contain "name:Peter, age:13, Status: N"Yes, it's possible too, in your Response XQuery Transformation u can add n number of additional fields, and send back to requester.
    You can do both Translations and Transformations.
    Can I also configure the proxy service not to call any business service?Have you made/generated your proxy service from existing Business Service?
    If yes,: then your message flow would have only Route Node ( routing to Business Service).
    1. To do transformations on request add a Pipeline Pair in message flow and inside it add stage for doing XQuery transformations.
    2. Use Reply Action in stage as last Actions and do reply with Success.( The message flow won't go to Route actions after this ).
    IF No : Then either remove the OSB Action which is being used to call Business Service.
    It is considered good etiquette to reward answerers with points (as "helpful" - 5 pts - or "correct" - 10pts).
    Regards,
    Abhinav Gupta
    Edited by: Abhinav on Mar 8, 2013 3:27 PM

  • Installing Secure Certificates in SOAP Scenarios using Business Service

    Hi All,
    We are working on SOAP synchronous scenarios and we are creating Business service for the same. IF We need to communicate through HTTPs protocol then will it be possible to install the SSL certificates as we are using Business Service ?
    It was said intalling certificates will only be possible when we use Business System but not Business Service.
    Regards
    Jayram

    The technical connection does not care about business system or business component. This limitation does not exist.
    Andreas

  • QST: Business Components from AIA Enterprise Business Service

    Hi,
    I'm new in ADF context. Ordinary I work with Oracle SOA Suite and AIA. We have a use case for customer with system integration over AIA. Now we will build a ADF Web Application and I found the "Business Components from AIA EBS".
    - Will this wizard work with AIA 3.0 aka 11g?
    - How to use this wizard? I save WSDL of EBS to local directory, but can't continue the wizard.
    - Is it more compliant to use "normal" was of ADF and invoke Requester ABCS?
    Bye
    Marcel

    Hello Robert,
    I know this thread is quite old but I'd like to know whether anything has changed since then regarding the AIA Composite Application Framework extension? I've installed the extension (v 2.4) from a local zip archive (as installing through the update center failed - said it was installed but there was no new options under the Business tier) in Jdeveloper 11.1.1.1.5, had to change extension's paths to modules but still a wizard doesn't want to go to the next step, no error popup, no error in logs, nothing. Does it mean it's still not ready? According to the below site my environment fulfill all the requirements:
    http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/131167.xml
    What is the preferred approach for an UI integration then? A requester ABCS seems to be an overhead and misconception to me but maybe I'm wrong :)
    Thanks,
    Piotr

  • Route the request from Proxy Service in OSB to external BusinessService URL

    Hi,
    How to route the request from Proxy service to the Business Service(Which is not registered in the OSB) using End point URL.Dynamically look up the URL and route the req from Proxy to Business service.
    thanks in Advance
    Edited by: user10680427 on Jul 14, 2009 2:57 AM
    Edited by: user10680427 on Jul 14, 2009 3:34 AM

    Hi..
    Just set in within a routing options in a route node, either dynamic routing or just setting the uri, depends on your specific case..

  • How to pass Security Header from the Physical Service in ODSI

    We have to call a secured Web service using ODSI. We are trying to build a physical service in ODSI using a WSDL which has username token with password text policy inside it. The requests to that web service are bound by the security policy. But ODSI is not allowing us to create a Physical service usin a WSDL with a security policy in it. How can we then pass the security header from the ODSI physical service to the external web service.

    You would need to write a webservice handler for your physical data service to implement the security.
    http://download.oracle.com/docs/cd/E13162_01/odsi/docs10gr3/datasrvc/How%20To%20Create%20SOAP%20Handlers%20for%20Imported%20WSDLs.html

Maybe you are looking for