Unable to validate security for resource 'EXTRANETLOOK'

We have UCM 10gR3 installed. We have Extranetlook component installed along with WebDAV. Currently when the users take any action that they don't have privilege to, they come accross Unable to validate security for resource 'EXTRANETLOOK'error message. Before it use to give exact error message so that it was easy for us to troubleshoot. Recently due to some changes in the settings in the system, we started seeing this error message instead of actual error message something like Unable to retrieve page. User 'abc ' does not have sufficient privileges. Is there a way to suppress thie Extrenet look error message so that the actual message comes through?
thanks,

Thanks for the response Bernhard. I'd like to address some of the points you mentioned:
possibly you have not the permissions to add resources
-I am an owner of both the PWA and the project subsite
there are no resources inside your project plan (you have to use the "Build Team" in the Ribbon)
-I checked the "Build Team" list and confirmed there are a dozen users in there
not each view allows you to edit each field
-I've tried switching views and noticed that there are other fields that I cannot add values into including: Actual Start, Actual Finish, Baseline Finish, % Work Complete. I am able to change the Task Name, Start, Finish.
Very strange problem. Im still doing development on it but obviously cant roll this into production when users cannot add information to tasks.

Similar Messages

Installer unable to validate security update- help please

i keep getting installer unable to install...security updates 2010-03/quicktime updates and so on. Why is this happening and how can i fix it. I have tried Onyx and clean my mac to try and clean up files in hopes it will randomly update and fix. im getting frustrated right now and I need some advise and direction. Onyx says my volume is ok.

Move all the files that have softwareupdate in their title out of your user's /Library/Preferences/ and ByHost subfolder, restart, and try again. If that doesn't do it, then boot with your Leopard install disk and reinstall it, selecting the Archive & Install, saving user and network settings, option. If that fixes the issue, run Software Update and bring the OS back up to 10.5.8. If not, then I'm out of ideas.

Errors with SharePoint Security Token Service: "The revocation function was unable to check revocation for the certificate"

I'm getting these errors in the eventlog and ULS, "An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root
Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS CERTIFICATE THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate."
The errors point to the SharePoint Security Token Service as the issue ("The revocation function was unable to check revocation for the certificate") reported back by the Topology service. This is apparent when executing a search, accessing
the managed metadata service, issuing SPSite commands in Powershell, or anything that needs to run through the "SharePoint Web Services" site. I've looked at the certificate assigned to that site and everything appears to be in order.
It would seem to me to be either an incorrect endpoint configuration (internally cached perhaps?) or related to security access for the configuration database (in order to validate the certificate root).
What I’ve tried so far:
I’ve been all over the certificate settings, both in the server store, and within SharePoint Token Service config. Both appear to be configured correctly such that the root CAs can be validated.
Re-entered the passwords for the application pool domain accounts to eliminate these as a potential cause. I’ve also verified the service accounts reporting the error, do have access to the configuration database.
Re-provisioned the STS service to see if that might clear out any cached issues and validated everything else according to this
MS Tech note.
So far nothing has worked. Is there anything else I could be looking at that I've missed? (Full eventlog detail below)
Log Name: Application
Source: Microsoft-SharePoint Products-SharePoint Foundation
Date: 2/20/2015 11:19:41 AM
Event ID: 8311
Task Category: Topology
Level: Error
Keywords:
User: <SP SERVICE ACCOUNT>
Computer: <SHAREPOINTSERVER>
Description:
An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS
CERT THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
<EventID>8311</EventID>
<Version>14</Version>
<Level>2</Level>
<Task>13</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2015-02-20T17:19:41.213852500Z" />
<EventRecordID>1611121</EventRecordID>
<Correlation />
<Execution ProcessID="10212" ThreadID="10328" />
<Channel>Application</Channel>
<Computer><SHAREPOINTSERVER></Computer>
<Security UserID="<SP SERVICE ACCOUNT>" />
</System>
<EventData>
<Data Name="string0">CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US</Data>
<Data Name="string1">CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US</Data>
<Data Name="string2"><STS CERT THUMBPRINT></Data>
<Data Name="string3">RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
</Data>
</EventData>
</Event>

Hi Darren,
This problem seems to occur when an administrator deletes the local trust relationship of the farm from the Security section of the Central Administration website
In order to resolve this problem, the local trust relationship has to be created. This can be done by running the following PowerShell commands
$rootCert = (Get-SPCertificateAuthority).RootCertificate
New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert
After running the above commands, perform an IISReset on all servers in the farm.
More information:
http://support.microsoft.com/kb/2545744
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

I bought a team license for two computers, the purchase was recorded on the credit card and the amount recorded in the making, but was unable to validate the association staff . I received an email stating that Adobe could not release the payment and that

I bought a team license for two computers, the purchase was recorded on the credit card and the amount recorded in the making, but was unable to validate the association staff .
I received an email stating that Adobe could not release the payment and that I should validate the method of payment , tried to insert another card number but the system does not accept the security VAT reporting error message. How do I validate my license with association staff and confirm the payment card?

Hi Daniel,
For any sort of payment related matter, kindly contact our support team via: http://helpx.adobe.com/in/contact.html?step=CCSN_adobe-id-signing-in_stillNeedHelp
If you are unable to use chat option kindly try below mentioned steps.
Try different browser.
Delete cookies and cache
If you are still not able to chat, Kindly reply with the below mentioned information.
OS version:
Browser Version:
You can also try: http://helpx.adobe.com/x-productkb/global/phone-support-orders.html
Thanks,
Atul Saini

Unable to validate message; key used for decrypting message is invalid;

When trying to decrypt an RNIF message in our SAP XI system we are running into an issue with below error message:
"Unable to validate message; key used for decrypting message is invalid; expected keystore entry: SSL-<SID>; keystore entry used: null"
The keystore administrator role is mapped to XIAFUSER. We validated the decryption using the J2EE Private Key thru a third-party (non-SAP) tool and it works fine. The keystore SSL-<SID> contains the Private Key and Cert from our CA. The message was encrypted using the Public Key of J2ee engine.
We were unable to generate more details even after increasing the log level. The security.log is the only place showing the above error message.

The folder C:\j2sdk1.4.2_13\jre\lib\security contains the Java Cryptography Extension (JCE) files - 'local_policy.jar' and 'US_export_policy.jar' .The default files will have a size of 3 kb.These need to be replaced by JCE Unlimited Strength Jurisdiction Policy Files - 'local_policy.jar' and 'US_export_policy.jar' which are of size 5kb. In brief, C:\j2sdk1.4.2_13\jre\lib\security should contain the files - 'local_policy.jar' and 'US_export_policy.jar' and their size should be 5kb (and not 3kb). After we did this change the decrypt worked fine.

Text Message: Unable to execute file for security ...

Whenever I'm viewing a text message, when I try to open up the "Options" menu, I see the above message, "Text Message: Unable to execute file for security reasons". This doesn't seem to impact the functionality of the menu at all, everything seems to work.
Anyone ever come across this before?
I've updated the phone (Nokia E66) to the latest software, and I've only got one application installed other than the default base install (Google calendar sync utility), removing that doesn't change the problem.
Thanks in advance!

I get the same error after SW update to latest version when I try to run some apps

Unable to find security data for sender

Hello, does anybody know what this message means. The problem appear when I send an Idoc to XI. Other interfaces (Master data) are working properly. My question is, do I need to make some extra settings for the transactional data interfaces (SHPMNT)?
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:ErrorHeader xmlns:SAP="http://sap.com/exchange/MessageFormat">
<SAP:Context />
<SAP:Code p1="sapdev222,SHPMNT.SHPMNT05/urn:sap-com:document:sap:idoc:messages" p2="VENDORMASTER_WOLTERKLUWER_ERP_BE,IDZ0001_DeliveryReplicate_IB/http://wolterskluwer.com/xi/midas_deliveries" p3="" p4="">PHYROU.UNDEFINED_SECURITY</SAP:Code>
<SAP:Text language="EN">Technical routing: Unable to find security data for sender sapdev222,SHPMNT.SHPMNT05/urn:sap-com:document:sap:idoc:messages for receiver VENDORMASTER_WOLTERKLUWER_ERP_BE,IDZ0001_DeliveryReplicate_IB/http://wolterskluwer.com/xi/midas_deliveries</SAP:Text>
</SAP:ErrorHeader>
regards
Ernesto Duran

HI,
i am also getting the same error in my scenario. Could u plz inform me what is the solution?
Rgds,
Ram Sri

WS-Security and proxy service: Unable to add security token for identity

What the reason of "Unable to add security token for identity" fault in this situation (10.3.1):
I did simple "hello word" proxy service and tried to apply custom policy binding.
WS-Policy is next:
<wsp:Policy wsu:Id="WS-Policy-Siebel"
     xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702"
     xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
     xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
     <wssp:Identity
          xmlns:wssp="http://www.bea.com/wls90/security/policy">
          <wssp:SupportedTokens>
               <wssp:SecurityToken
                    TokenType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken">
                    <wssp:UsePassword
                         Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText" />
               </wssp:SecurityToken>
          </wssp:SupportedTokens>
     </wssp:Identity>
</wsp:Policy>
Process WS-Security is setted to "yes".
While debugging I see that all works fine - I can authenticate with defined credentials and breakpoints in proxy service flow works fine.
But at the end I get the fault:
Soap fault:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Header/>
<env:Body>
<env:Fault>
<faultcode>env:Server</faultcode>
<faultstring>Unable to add security token for identity</faultstring>
</env:Fault>
</env:Body>
</env:Envelope>
In console:
<09.06.2010 17:39:18 MSD> <Error> <OSB Security> <BEA-387023> <An error ocurred during web service security inbound response processing [error-code: F
ault, message-id: 1721282272521583996--57dc4ccc.1291cc2282d.-7fab, proxy: OSB Project WS-Security/WSSecurityService, operation: NewOperation]
--- Error message:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"><env:Header/><env:Body><env:Fault><faultcode>env:Server</faultcode><faultstring>Un
able to add security token for identity</faultstring></env:Fault></env:Body></env:Envelope>
weblogic.xml.crypto.wss.WSSecurityException: Unable to add security token for identity
at weblogic.wsee.security.wss.SecurityPolicyDriver.processIdentity(SecurityPolicyDriver.java:175)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processOutbound(SecurityPolicyDriver.java:73)
at weblogic.wsee.security.wss.SecurityPolicyDriver.processOutbound(SecurityPolicyDriver.java:64)
at weblogic.wsee.security.WssServerHandler.processOutbound(WssServerHandler.java:88)
at weblogic.wsee.security.WssServerHandler.processResponse(WssServerHandler.java:70)
Truncated. see log file for complete stacktrace
Incoming soap message is:
<soapenv:Envelope      xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header      xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<wsse:Security      soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken      wsu:Id="unt_TNNp0cBwU7HyPKoq" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>testuser</wsse:Username>
<wsse:Password      Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">testuser</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
<soapenv:Body>
<wss:NewOperation      xmlns:wss="http://www.troika.ru/Enterprise/WSSecurityService/">
<in>string</in>
</wss:NewOperation>
</soapenv:Body>
</soapenv:Envelope>
Edited by: Andrey L. on Jun 9, 2010 5:55 PM

I thought you were getting that exception when accessing the proxy.
No. Authentification works fine. Proxy body works fine. But at the end of proxy appears the exception.
Sorry for my english - I tried to show this situation on image: http://imglink.ru/show-image.php?id=9c0e0c1719f00289faf11696c6703bc3
Are you getting this exception when routing to a business service which is configured for WS-Security ??
I don't use business service in this test project - only simple proxy service with all logic inside.
PS transformation in replace action is very simple too:
(:: pragma bea:global-element-parameter parameter="$newOperation1" element="ns0:NewOperation" location="WSSecurityService.wsdl" ::)
(:: pragma bea:global-element-return element="ns0:NewOperationResponse" location="WSSecurityService.wsdl" ::)
declare namespace ns0 = "http://www.troika.ru/Enterprise/WSSecurityService/";
declare namespace xf = "http://tempuri.org/OSB%20Project%20WS-Security/Hello/";
declare function xf:Hello($newOperation1 as element(ns0:NewOperation))
as element(ns0:NewOperationResponse) {
<ns0:NewOperationResponse>
<out>Hello, { data($newOperation1/in) }!</out>
</ns0:NewOperationResponse>
declare variable $newOperation1 as element(ns0:NewOperation) external;
xf:Hello($newOperation1)
Edited by: Andrey L. on Jun 10, 2010 12:21 PM

I'm getting this message " We are unable to validate this serial number for Lightroom . Please contact Customer Support " when installing on my Mac

I'm getting this message " We are unable to validate this serial number for Lightroom . Please contact Customer Support " when installing on my Mac

contact adobe support by clicking this link and then clicking 'still need help' as soon as it appears, https://helpx.adobe.com/contact.html

We are unable to validate this serial number for CS6 Design Standart. What's wrong with my key or why won't it validate?

I bought the CS6 Design Standard student and teacher edition over amazon. I activated the product on my adobe account and got a serial number. But when I install the package and enter the serial number I a message saying "We are unable to validate this serial number for Creative Suit 6 Design Standard. Please contact Customer Support."
Does anyone know what is up with this? I am sure that the problem isn't anything along the lines of making mistakes when typing in the serial (tried it multiple times, used copy paste to reduce chance of error). It's also not any problem with me lacking an internet connection adobe to validate the serial.

Serial number questions can't be handled on the forums. You'll need to talk to Customer Support either by phone or web chat.
http://helpx.adobe.com/contact.html

I got this error message when I want to activate the CS6. The error message is "We are unable to validate this serial number for CS6 Design and web Premium. Please contact "Customer Support ""

I got this error message when I want to activate the CS6. The error message is "We are unable to validate this serial number for CS6 Design and web Premium. Please contact "Customer Support ""

Hi islandschool,
Please try the suggestion given in the link:- http://helpx.adobe.com/creative-suite/kb/unable-validate-serial-number-ccm.html
Regards,
Sarika

I purchased a download version of Lightroom 6 from Amazon and when i write the license key number i'm getting this message " We are unable to validate this serial number for adobe Lightroom. Please contact Customer Support. "

I purchased a download version of Lightroom 6 from Amazon and when i write the license key number i'm getting this message " We are unable to validate this serial number for adobe Lightroom. Please contact Customer Support. "

contact adobe support by clicking this link and then clicking 'still need help' as soon as it appears, https://helpx.adobe.com/contact.html

Unable to add security token for identity

Hi all,
I am trying to implement a web service with username token authentication. I have defined the ws -policies in the wsdl, and checked the Process Security Header checkbox in the proxy configuration. But when I invoke the proxy through test console and pass the full soap envelope , I am getting an "Unable to add security token for identity" error
This is how the soap header looks from the request document part of the test console:
     <soap:Header>
     <wsse:Security>
     <wsse:UsernameToken>
     <wsse:Username>xxxxx</wsse:Username>
     <wsse:Password      Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">yyyyyy</wsse:Password>
     </wsse:UsernameToken>
     </wsse:Security>
     </soap:Header>
     <soap:Body>
I have configured the user at alsb security configuration and added an acces policy stating that the proxy can be accessed only by user "xxxx"
Please help
-Atheek

Mostafa ,
This points to a misconfiguration of your security. Possible causes are:
* There is not a valid RSA key to sign the SAML token with.
* The SAML CredentialMapper is missing
* There is no Relying Party (rp) configured for SAML Credential Mapper that matches your producer
* The producer is using User Name Token and you have no configured the DefaultCredentialMapper to allow for UserNameToken.
Good Luck,
Nate
Edited by: user650654 on Sep 9, 2008 4:31 AM

When I try to install CS6 Design and Web Premium from a disk I get this message "We are unable to validate this serial number..." What is the reason for this?

I purchased a disk copy of CS6 Design and Web Premium from a reputable seller last week and when I try to install it with the serial number I got it says "We are unable to validate this serial number for CS6 Design and Web Premium. Please contact Customer Support." What is the reason for this?
Is the serial number invalid?

Hi Ned,
Thanks for the suggestion. I eventually got in touch with Adobe Technical Support and it turned out that my Adobe Application Manager was not the latest version. They downloaded the latest version and installed it and that seemed to solve the problem. I was able to install my CS6 Creative Suite and validate the serial number. All seems to be going well at the moment.

We are unable to validate this serial number for product name . Please contact Customer Support

We are unable to validate this serial number for <product name>. Please contact Customer Support
Can I get my program validated?

Error "The serial number is not valid for this product" | Creative Suite

Unable to validate security for resource 'EXTRANETLOOK'

Similar Messages

Maybe you are looking for