10 Replies Latest reply on Sep 23, 2016 6:58 AM by JohnGoodwin

    Configuring Security Policy for the DRM Web Service issue

    3184861

      Hi Experts,

       

       

      We were unable to create security policy for the DRM Web service and it throws the below error .Please help us in resolving this issue.

       

      cannot locate policy manager query/update service. Policy manager service look up did not find a valid service, due to: Unable to connect to WS Policy Manager. <- oracle.wsm.policymanager.PolicyManagerException: WSM-02118 : The query service cannot be created. <- javax.naming.NameNotFoundException: While trying to lookup 'QueryService#oracle.wsm.policymanager.ejb.IStringQueryServiceRemote' didn't find subcontext 'QueryService#oracle'. Resolved ''; remaining name 'QueryService#oracle/wsm/policymanager/ejb/IStringQueryServiceRemote'

        • 1. Re: Configuring Security Policy for the DRM Web Service issue
          JohnGoodwin

          These Oracle Support documents may help

           

          DRM Extending Domain to Deploy Oracle Policy Manager Fails Error: "Cannot locate policy manager query/update service." (Doc ID 1589031.1)

           

          DRM WEB Service API Error: "Unable to connect to WS Policy Manager" (Doc ID 2047402.1)

           

          Cheers

           

          John

          • 2. Re: Configuring Security Policy for the DRM Web Service issue
            3184861

            Hi John,

             

             

            We followed the steps in the Oracle  documents(Doc ID 1589031.1),but when we tried to test the connection for JDBC data sources ,it failed for calc_datasource and raframework_datasource .

             

             

            When we checked the result log ,it recorded the following errors

             

             

            Sql Test=SELECT 1 FROM AIF_LOOKUP_MAPPINGS WHERE 1=0

             

             

            [FMWGEN] [SQL SERVER JDBC DRIVER] Invalid object name 'AIF_LOOKUP_MAPPINGS'

            CFGFWK-60850:Test failed

             

            Please help us

            • 3. Re: Configuring Security Policy for the DRM Web Service issue
              JohnGoodwin

              You don't need to be concerned about testing those data sources, as the doc specifies it is the OWSM MDS Schema data source to test.

               

              6. 'Component JDBC Component Schema' screen

                Should show connection information for Oracle database and below lists one Component Schema, OWSM MDS Schema, which should be ticked.

               

              7. 'Test JDBC Component Schema' screen

                Should show the above schema listed with a green tick in the status column. Try the Connection Test.

              • 4. Re: Configuring Security Policy for the DRM Web Service issue
                rickepm

                why you need calc_datasource and raframework??

                • 5. Re: Configuring Security Policy for the DRM Web Service issue
                  JohnGoodwin

                  When you extend a domain usually all the data sources available in WebLogic will be shown though you don't have to test them so can be ignored.

                  The only relevant data source in this scenario is the OWSM MDS Schema data source

                  1 person found this helpful
                  • 6. Re: Configuring Security Policy for the DRM Web Service issue
                    3184861

                    Hi John,

                     

                    After extending the domain as per the (Doc ID 1589031.1),we were able to add the EPM Policy set on the weblogic em .When we tested the webservice for EPMSystem,it threw the below errors

                     

                     

                    oracle.sysman.emSDK.webservices.wsdlapi.SoapTestException: Client received SOAP Fault from server : PolicySet Invalid: WSM-06102 PolicyReference The policy reference URI "oracle/wss_username_token_service_policy" is not valid.

                     

                     

                     

                    06102 PolicyReference The policy reference URI "oracle/wss_username_token_service_policy" is not valid.
                    at oracle.integration.platform.common.InterceptorChainImpl.createPolicyEnforcementException(InterceptorChainImpl.java:306)
                    at oracle.integration.platform.common.InterceptorChainImpl.processRequest(InterceptorChainImpl.java:152)
                    at oracle.integration.platform.common.mgmt.InterceptorChainManager.processRequest(InterceptorChainManager.java:276)
                    at oracle.j2ee.ws.server.mgmt.runtime.SuperServerInterceptorPipeline.handleRequest(SuperServerInterceptorPipeline.java:165)
                    at oracle.j2ee.ws.server.provider.management.AbstractProviderInterceptorPipeline.executeRequestInterceptorChain(AbstractProviderInterceptorPipeline.java:576)
                    at oracle.j2ee.ws.server.provider.ProviderProcessor.executeInterceptorRequestChain(ProviderProcessor.java:921)
                    at oracle.j2ee.ws.server.WebServiceProcessor.processRequest(WebServiceProcessor.java:233)
                    at oracle.j2ee.ws.server.WebServiceProcessor.doService(WebServiceProcessor.java:195)
                    at oracle.j2ee.ws.server.WebServiceServlet.doPost(WebServiceServlet.java:487)
                    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
                    at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
                    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
                    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
                    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
                    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
                    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                    at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
                    at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
                    at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460)
                    at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
                    at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
                    at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
                    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                    at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163)
                    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                    at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
                    at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
                    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
                    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
                    at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
                    at weblogic.servlet.internal.
                    • 7. Re: Configuring Security Policy for the DRM Web Service issue
                      3184861

                      Hi John,

                       

                      After recreating the policy and ran the test for webservices and it threw the below errors and we are able to find the policy updates in wsdl file

                       

                       

                      <types>

                       

                      Please help us in resolving this issue
                      Error

                       

                      java.lang.Exception: oracle.sysman.emSDK.webservices.wsdlapi.SoapTestException: Client received SOAP Fault from server : Error while processing AppParameters in SOAP Header: AppParameters does not exist in SOAP Header. at oracle.sysman.emas.model.wsmgt.WSTestModel.invokeOperation(WSTestModel.java:813) at oracle.sysman.emas.view.wsmgt.WSView.invokeOperation(WSView.java:385) at oracle.sysman.emas.view.wsmgt.WSView.invokeOperation(WSView.java:303) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.sun.el.parser.AstValue.invoke(AstValue.java:187) at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297) at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53) at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1433) at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:93) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:103) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:93) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:97) at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475) at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._invokeApplication(LifecycleImpl.java:972) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:439) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:219) at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301) at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.sysman.emSDK.license.LicenseFilter.doFilter(LicenseFilter.java:102) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:211) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:131) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:447) at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:447) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177) at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.sysman.emas.fwk.MASConnectionFilter.doFilter(MASConnectionFilter.java:41) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:181) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.sysman.eml.app.AuditServletFilter.doFilter(AuditServletFilter.java:183) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.sysman.eml.app.EMRepLoginFilter.doFilter(EMRepLoginFilter.java:203) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.sysman.core.model.targetauth.EMLangPrefFilter.doFilter(EMLangPrefFilter.java:158) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.sysman.core.app.perf.PerfFilter.doFilter(PerfFilter.java:141) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.sysman.eml.app.ContextInitFilter.doFilter(ContextInitFilter.java:542) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119) at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324) at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460) at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103) at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171) at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57) at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163) at

                      • 9. Re: Configuring Security Policy for the DRM Web Service issue
                        3184861

                        Hi,

                         

                        We ran the GL hierarchy test from  EBS->DRM and it is getting failed ,we are getting a token policy issue but we are able to test the web policy in weblogic successfully.Please help us

                         

                         

                        2016.09.22 15:23:51:-- Initializaing Load Segment Values and Hierarchies program ...

                        2016.09.22 15:23:51:-- Request ID =2482536

                        2016.09.22 15:23:51:-- Value Set = IC_AFF_S4_ACCOUNT

                        2016.09.22 15:23:51:-- Fetching DRM profile options values ...

                        2016.09.22 15:23:51:-- Profile: GL_DRM_VALUE_SET_PROP ==> OracleGL.ValueSet

                        2016.09.22 15:23:51:-- Profile: GL_DRM_VER_EXPORT_PROP ==> OracleGL.AllowExport

                        2016.09.22 15:23:51:-- Profile: GL_DRM_HIER_EXP_PROP ==> OracleGL.AllowHierExport

                        2016.09.22 15:23:51:-- Profile: GL_DRM_VER_EXPORT_DEFN ==> EBSValueSetExport

                        2016.09.22 15:23:51:-- Profile: GL_DRM_HIER_EXPORT_DEFN ==> EBSHierarchyExport

                        2016.09.22 15:23:51:-- Profile: GL_DRM_WSDL_URL ==> http://hypinc.com:45000/oracle-epm-drm-webservices/DrmService?wsdl

                        2016.09.22 15:23:51:-- Profile: GL_DRM_API_URL ==> http://hypinc.com:5240/Oracle/Drm/APIAdapter

                        2016.09.22 15:23:51:-- Profile: GL_DRM_USERNAME ==> EPM_EBS_GLDEV

                        2016.09.22 15:23:51:-- Scanning DRM for version to Export...

                        SEVERE: java.io.FileNotFoundException: ./config/jps-config.xml (No such file or directory)

                        SEVERE: java.io.FileNotFoundException: ./config/jps-config.xml (No such file or directory)

                        INFO: WSM-09004 Component auditing cannot be initialized.

                        SEVERE: java.io.FileNotFoundException: ./config/jps-config.xml (No such file or directory)

                        INFO: WSM-09004 Component auditing cannot be initialized.

                        SEVERE: Error while invoking endpoint "http://hypinc.com:45000/oracle-epm-drm-webservices/DrmService" from client

                        2016.09.22 15:23:54:-- oracle.apps.gl.drm.ws.DrmWSClient.getVersions(): Event payload -

                        <drm:getVersions xmlns:drm='http://drm.webservices.epm.oracle'/>

                        2016.09.22 15:23:54:-- Unexpected Error -> oracle.apps.gl.drm.ws.DrmWSException: Exception when Invoking Web Service -> oracle.apps.fnd.wf.bes.InvokerException: oracle.j2ee.ws.client.jaxws.JRFSOAPFaultException: Client received SOAP Fault from server : InvalidSecurityToken : The security token is not valid.

                        oracle.apps.fnd.wf.bes.EventDispatcher.executeSubscription(EventDispatcher.java:901)

                        oracle.apps.fnd.wf.bes.EventDispatcher.processSubscription(EventDispatcher.java:567)

                        oracle.apps.fnd.wf.bes.EventDispatcher.dispatch(EventDispatcher.java:336)

                        oracle.apps.fnd.wf.bes.BusinessEvent.raise(BusinessEvent.java:1819)

                        oracle.apps.gl.drm.ws.DrmWSClient.raiseInvokerEvent(DrmWSClient.java:544)

                        oracle.apps.gl.drm.ws.DrmWSClient.getVersions(DrmWSClient.java:480)

                        oracle.apps.gl.drm.util.DrmLoader.scanDRMVersions(DrmLoader.java:348)

                        oracle.apps.gl.drm.util.DrmLoader.runProgram(DrmLoader.java:133)

                        oracle.apps.fnd.cp.request.Run.main(Run.java:156)

                        ----------+

                        • 10. Re: Configuring Security Policy for the DRM Web Service issue
                          JohnGoodwin

                          Maybe the following Oracle support docs will be of some help.

                           

                          DRM EBS Integration Error "InvalidSecurityToken : The security token is not valid." (Doc ID 1627124.1)

                           

                          EBS-DRM Integration: Configuration Checklist and Troubleshooting (Doc ID 1378989.1)