7 Replies Latest reply on Jun 5, 2020 7:55 AM by Martien van den Akker

    Change Attachment url in BPM Worklist

    3933037

      Hi all,

       

      we have Idam-soa integrated environment and BPM worklist for Approver detail /action, when user modify their detail and add attachment after going to trackregistration and search with request Id click on modify request in which he/she want to add attachment, under approver detail. I am not able to change that attachment url as we need to replace that url with load balancer url.if any one have any idea about same please help me out.

       

      Martien van den Akker

      Srinath Menon-Oracle

      Sunil_Sharma

        • 1. Re: Change Attachment url in BPM Worklist
          Martien van den Akker

          I'm not sure I understand your problem.

          But if you use the default SOA worklist, then setting the serverURL on the soa infrastructure->soa administration->common properties page should do the job. Make sure that this URL matches the loadbalancer url. I think you should not need to restart, but it can't harm to do that.

           

          Kind regards,
          Martien

          • 2. Re: Change Attachment url in BPM Worklist
            3933037

            Thanks for your response Martien van den Akker

             

            Can you please explain under common properties which field value i need to change?

             

             

            Thanks & Regards,

            Nilesh Jha

            • 3. Re: Change Attachment url in BPM Worklist
              Martien van den Akker

              Hi Nilesh Jha,

               

              It's the server URL:

               

               

              When SOASuite calls a referenced service where the URL starts with this URL, then it knows that it is calling a composite on the local environment. When this is not set then it would have a SOAP over HTTP call to the remote server. It would be loadbalancer and either, through the loadbalancer it calls it's colleague on the same cluster or the loadbalancer puts him through with itself.

               

              Setting this property on the loadbalancer URL it kind of knows that  it can handle the request itself. What it does then is just do  a java-call with the normalized message to the composite. No SOAP over HTTP roundtrip involved. Especially with a Global Loadbalancer this is quite important for performance reasons.

               

              Kind regards,
              Martien

              Kind regards,
              Martien

              1 person found this helpful
              • 4. Re: Change Attachment url in BPM Worklist
                3933037

                Hi Martien van den Akker,

                 

                we had configured EISS stack contains soa(SOA1) for approval workflow development and there is separate soa server (SOA2)for sms(UMS)  and both server are connected locally (LAN). as u told me to change server url under (SOA1)soa adminstration->common properties for accessing attachment. after observing for few days that url affect (SOA2)giving Error response to callback url in in delivering message to the end user. "javax.xml.soap.SOAPException: Message send failed: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".

                " after removing load balancer url from server(SOA1) everything working fine. please help me out i need both( access attachment and also need to access message from SOA2).

                 

                 

                Thanks & Regards,

                Nilesh Jha

                • 5. Re: Change Attachment url in BPM Worklist
                  Martien van den Akker

                  Hi Nilesh,

                   

                  Your description is a bit confusing to me. Could you elaborate a bit more on which moment and on which place this error occurs? Did you find this in the logs too? If so, could you please share the part of the log, with a bit preceeding the error and following the error?

                   

                  How does your TLS configuration look like? Do you use TLS? If so, where do you the TLS offloading?

                  Could it be that the Loadbalancer URL isn't in the used certificates as a Subject Alternative Name?

                   

                  Kind regards,
                  Martien

                  • 6. Re: Change Attachment url in BPM Worklist
                    3933037

                    Hi Martien van den Akker,

                    Thanks for your response,

                     

                    • After user registration user supposed to get message at that time process internally call message service that is deployed on soa2 and error occurred.
                    • after registration request goes to their superior and superior supposed to receive message for same at that time error occur
                    • final approver from superior again user supposed to receive message and error occurred 

                    when manually test web service providing payload it's working fine every time but when whole process execute and call sms web service error occurred, one more thing not every time for ex-if 10 times sms web service gets invoked then 2-3 times error occurred.

                     

                    for more clarity in sms project i have created multiple if ,else-if condition with asynchronous bpel process in which in one cycle(one registration full process) few message received and in few we got error, but manually when we try from em all message working fine.

                     

                    yes we are using TLS v1

                     

                    soa diagnostic log(soa2)-:

                     

                     

                    [2020-05-28T18:06:56.739+05:30] [OJDL] [NOTIFICATION:16] [ODL-52001] [oracle.core.ojdl.FileLogWriter] [org: Oracle] [host: idm-lbr..com] [nwaddr: 10.96.11.175] [tid: [ACTIVE].ExecuteThread: '54' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oracle] deleting log file: soa_server1-diagnostic-107.log, size: 10484238 bytes [2020-05-28T18:06:56.681+05:30] [soa_server1] [ERROR] [] [oracle.soa.bpel.system] [tid: [ACTIVE].ExecuteThread: '54' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 005dfIKmymt56i05nzt1iZ0004_10000RM,1:20774:7] [APP: soa-infra] [partition-name: DOMAIN] [tenant-name: GLOBAL] [oracle.soa.tracking.FlowId: 160008] [oracle.soa.tracking.InstanceId: 160153] [oracle.soa.tracking.SCAEntityId: 60099] [oracle.soa.tracking.FaultId: 90016] [FlowId: 0000N9RIFJN56i05nzp2iZ1UnZCV00000F] Unhandled BPELFault:faultName: {{http://schemas.oracle.com/bpel/extension}remoteFault}[[ messageType: {{http://schemas.oracle.com/bpel/extension}RuntimeFaultMessage} parts: {{ summary=<summary>oracle.fabric.common.FabricInvocationException: Unable to invoke endpoint URI "https://idam-uat..com/soa-infra/services/default/IDAMEventSubscription!2.1*soa_6c67e005-f8a2-42a1-ba9b-df69a855b4a1/SendSMSNotificationApprovers%23EventSubscribe/SendSMSNotificationApprovers" successfully due to: javax.xml.soap.SOAPException: javax.xml.soap.SOAPException: Message send failed: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ===== reqeust ======== SOAPAction:"processResponse" Content-Type:text/xml; charset=UTF-8 Content-Length:3379 &lt;env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsa="http://www.w3.org/2005/08/addressing">&lt;env:Header>&lt;orasoa:PortType xmlns:ptns="http://xmlns.oracle.com/EISS_APPLICATION/IDAMSMSNotification/SMS_Notification" xmlns:orasoa="http://xmlns.oracle.com/soa">ptns:SMS_NotificationCallback&lt;/orasoa:PortType>&lt;instra:tracking.ecid xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">005dfIKmymt56i05nzt1iZ0004_10000RM&lt;/instra:tracking.ecid>&lt;instra:tracking.conversationId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">urn:e8410e49-a0df-11ea-be5b-52540095dd29&lt;/instra:tracking.conversationId>&lt;instra:tracking.parentComponentInstanceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">bpel:2170278&lt;/instra:tracking.parentComponentInstanceId>&lt;instra:tracking.parentReferenceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2170278-BpInv2-BpSeq3.9-5&lt;/instra:tracking.parentReferenceId>&lt;instra:tracking.FlowEventId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2170811&lt;/instra:tracking.FlowEventId>&lt;instra:tracking.FlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2050015&lt;/instra:tracking.FlowId>&lt;instra:tracking.CorrelationFlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">0000N9RIFJN56i05nzp2iZ1UnZCV00000F&lt;/instra:tracking.CorrelationFlowId>&lt;instra:tracking.quiescing.SCAEntityId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">1250061&lt;/instra:tracking.quiescing.SCAEntityId>&lt;wsa:To>https://idam-uat..com/soa-infra/services/default/IDAMEventSubscription!2.1*soa_6c67e005-f8a2-42a1-ba9b-df69a855b4a1/SendSMSNotificationApprovers%23EventSubscribe/SendSMSNotificationApprovers</wsa:To>&lt;wsa:Action>processResponse&lt;/wsa:Action>&lt;wsa:MessageID>urn:ead83376-a0df-11ea-a074-52540095dd29&lt;/wsa:MessageID>&lt;wsa:RelatesTo>urn:e8410e49-a0df-11ea-be5b-52540095dd29&lt;/wsa:RelatesTo>&lt;wsa:ReplyTo>&lt;wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address>&lt;wsa:ReferenceParameters>&lt;instra:tracking.ecid xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">005dfIKmymt56i05nzt1iZ0004_10000RM&lt;/instra:tracking.ecid>&lt;instra:tracking.conversationId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">urn:e8410e49-a0df-11ea-be5b-52540095dd29&lt;/instra:tracking.conversationId>&lt;instra:tracking.parentComponentInstanceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">bpel:160153&lt;/instra:tracking.parentComponentInstanceId>&lt;instra:tracking.parentReferenceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">160153-BpInv14-BpSeq0.3-2&lt;/instra:tracking.parentReferenceId>&lt;instra:tracking.FlowEventId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">170610&lt;/instra:tracking.FlowEventId>&lt;instra:tracking.FlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">160008&lt;/instra:tracking.FlowId>&lt;instra:tracking.CorrelationFlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">0000N9RIFJN56i05nzp2iZ1UnZCV00000F&lt;/instra:tracking.CorrelationFlowId>&lt;instra:tracking.quiescing.SCAEntityId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">60100&lt;/instra:tracking.quiescing.SCAEntityId>&lt;/wsa:ReferenceParameters>&lt;/wsa:ReplyTo>&lt;wsa:FaultTo>&lt;wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address>&lt;/wsa:FaultTo>&lt;/env:Header>&lt;env:Body>&lt;SMSResponseElement xmlns="http://www.sms-alert.org"/>&lt;/env:Body>&lt;/env:Envelope></summary> ,code=<code>null</code> ,detail=<detail>Unable to invoke endpoint URI "https://idam-uat..com/soa-infra/services/default/IDAMEventSubscription!2.1*soa_6c67e005-f8a2-42a1-ba9b-df69a855b4a1/SendSMSNotificationApprovers%23EventSubscribe/SendSMSNotificationApprovers" successfully due to: javax.xml.soap.SOAPException: javax.xml.soap.SOAPException: Message send failed: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ===== reqeust ======== SOAPAction:"processResponse" Content-Type:text/xml; charset=UTF-8 Content-Length:3379 &lt;env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsa="http://www.w3.org/2005/08/addressing">&lt;env:Header>&lt;orasoa:PortType xmlns:ptns="http://xmlns.oracle.com/EISS_APPLICATION/IDAMSMSNotification/SMS_Notification" xmlns:orasoa="http://xmlns.oracle.com/soa">ptns:SMS_NotificationCallback&lt;/orasoa:PortType>&lt;instra:tracking.ecid xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">005dfIKmymt56i05nzt1iZ0004_10000RM&lt;/instra:tracking.ecid>&lt;instra:tracking.conversationId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">urn:e8410e49-a0df-11ea-be5b-52540095dd29&lt;/instra:tracking.conversationId>&lt;instra:tracking.parentComponentInstanceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">bpel:2170278&lt;/instra:tracking.parentComponentInstanceId>&lt;instra:tracking.parentReferenceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2170278-BpInv2-BpSeq3.9-5&lt;/instra:tracking.parentReferenceId>&lt;instra:tracking.FlowEventId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2170811&lt;/instra:tracking.FlowEventId>&lt;instra:tracking.FlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">2050015&lt;/instra:tracking.FlowId>&lt;instra:tracking.CorrelationFlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">0000N9RIFJN56i05nzp2iZ1UnZCV00000F&lt;/instra:tracking.CorrelationFlowId>&lt;instra:tracking.quiescing.SCAEntityId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">1250061&lt;/instra:tracking.quiescing.SCAEntityId>&lt;wsa:To>https://idam-uat..com/soa-infra/services/default/IDAMEventSubscription!2.1*soa_6c67e005-f8a2-42a1-ba9b-df69a855b4a1/SendSMSNotificationApprovers%23EventSubscribe/SendSMSNotificationApprovers</wsa:To>&lt;wsa:Action>processResponse&lt;/wsa:Action>&lt;wsa:MessageID>urn:ead83376-a0df-11ea-a074-52540095dd29&lt;/wsa:MessageID>&lt;wsa:RelatesTo>urn:e8410e49-a0df-11ea-be5b-52540095dd29&lt;/wsa:RelatesTo>&lt;wsa:ReplyTo>&lt;wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address>&lt;wsa:ReferenceParameters>&lt;instra:tracking.ecid xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">005dfIKmymt56i05nzt1iZ0004_10000RM&lt;/instra:tracking.ecid>&lt;instra:tracking.conversationId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">urn:e8410e49-a0df-11ea-be5b-52540095dd29&lt;/instra:tracking.conversationId>&lt;instra:tracking.parentComponentInstanceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">bpel:160153&lt;/instra:tracking.parentComponentInstanceId>&lt;instra:tracking.parentReferenceId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">160153-BpInv14-BpSeq0.3-2&lt;/instra:tracking.parentReferenceId>&lt;instra:tracking.FlowEventId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">170610&lt;/instra:tracking.FlowEventId>&lt;instra:tracking.FlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">160008&lt;/instra:tracking.FlowId>&lt;instra:tracking.CorrelationFlowId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">0000N9RIFJN56i05nzp2iZ1UnZCV00000F&lt;/instra:tracking.CorrelationFlowId>&lt;instra:tracking.quiescing.SCAEntityId xmlns:instra="http://xmlns.oracle.com/sca/tracking/1.0">60100&lt;/instra:tracking.quiescing.SCAEntityId>&lt;/wsa:ReferenceParameters>&lt;/wsa:ReplyTo>&lt;wsa:FaultTo>&lt;wsa:Address>http://www.w3.org/2005/08/addressing/anonymous</wsa:Address>&lt;/wsa:FaultTo>&lt;/env:Header>&lt;env:Body>&lt;SMSResponseElement xmlns="http://www.sms-alert.org"/>&lt;/env:Body>&lt;/env:Envelope></detail>} ** Cikey: 160153 ** FlowId: 160008 ** Current Activity Key: 160153-BpInv14-BpSeq0.3-2 ** Current Activity Label: callbackClient ** InvokeMessageGuid: ea7e2c8c-a0df-11ea-a074-52540095dd29 ** ComponentDN: default/IDAMSMSNotification!1.5*soa_5f8e6a17-e763-40bf-8bb8-51498e854b36/SMS_Notification ** Properties for component SMS_Notification: ** bpel.config.oneWayDeliveryPolicy: async.persist ** Transaction info: Name=[EJB com.collaxa.cube.engine.ejb.impl.bpel.BPELDeliveryBean.handleInvoke(com.collaxa.cube.engine.dispatch.message.invoke.InvokeInstanceMessage)],Xid=BEA1-3BA73D6BB0C0E50C6CCB(886221655),Status=Active,numRepliesOwedMe=0,numRepliesOwedOthers=0,seconds since begin=0,seconds left=300,useSecure=false,activeThread=Thread[[ACTIVE] ExecuteThread: '54' for queue: 'weblogic.kernel.Default (self-tuning)',9,Pooled Threads],XAServerResourceInfo[SOADataSource_soa_domain]=(ServerResourceInfo[SOADataSource_soa_domain]=(state=started,assigned=none),xar=SOADataSource,re-Registered = false),XAServerResourceInfo[WLStore_soa_domain_SOAJMSFileStore]=(ServerResourceInfo[WLStore_soa_domain_SOAJMSFileStore]=(state=started,assigned=none),xar=WLStore_soa_domain_SOAJMSFileStore1944309210,re-Registered = false),SCInfo[soa_domain+soa_server1]=(state=active),properties=({weblogic.jdbc.affinity.devidam.devpdb.online.com=oracle.ucp.jdbc.oracle.OracleConnectionAffinityContext: versionNumber=1.0, isForInstanceAffinity=true, connectionPoolID=null, instanceName=dev1, dbUniqName=devidam, serviceName=devpdb.online.com, weblogic.transaction.name=[EJB com.collaxa.cube.engine.ejb.impl.bpel.BPELDeliveryBean.handleInvoke(com.collaxa.cube.engine.dispatch.message.invoke.InvokeInstanceMessage)], weblogic.transaction.partitionName=DOMAIN}),local properties=({weblogic.jdbc.jta.SOADataSource=[groups=[(instance,dev1)],switchingContext=null,autoCommit=true,enabled=true,isXA=true,isJTS=false,vendorID=0,connUsed=true,doInit=false,'null',destroyed=false,poolname=SOADataSource,appname=null,moduleName=null,connectTime=42,dirtyIsolationLevel=false,initialIsolationLevel=2,infected=false,lastSuccessfulConnectionUse=1590669416639,secondsToTrustAnIdlePoolConnection=10,currentUser=null,currentThread=null,lastUser=null,currentError=null,currentErrorTimestamp=null,JDBC4Runtime=true,supportStatementPoolable=true,needRestoreClientInfo=false,defaultClientInfo={},supportIsValid=true]}),OwnerTransactionManager=ServerTM[ServerCoordinatorDescriptor=(CoordinatorURL=soa_server1+10.96.5.150:8001+soa_domain+t3+ CoordinatorNonSecureURL=soa_server1+10.96.5.150:8001+soa_domain+t3+ coordinatorSecureURL=null, XAResources={eis/XAFileAdapterForHA, eis/XAFileAdapter3, eis/aqjms/EDNLocalTxTopic, eis/activemq/Queue, eis/File/XAFileAdapter2, WLStore_soa_domain_UMSJMSFileStore, eis/aq/aiaB2BInfraAQCF, eis/wls/EDNxaDurableTopic, eis/wls/EDNLocalTxTopic, eis/jbossmq/Queue, eis/wls/EDNLocalTxDurableTopic, eis/jms/aiaB2BQueueCF, eis/oracle/in-memory, SOADataSource_soa_domain, eis/webspheremq/Queue, tangosol.coherenceTx, eis/tibjms/Topic, eis/tibjmsDirect/Queue, eis/aqjms/Queue, eis/Apps/Apps, WLStore_soa_domain__WLS_soa_server1, WLStore_soa_domain_SOAJMSFileStore, eis/pramati/Queue, eis/AQ/aqSample, eis/aqjms/EDNLocalTxDurableTopic, OraSDPMDataSource_soa_domain, eis/wls/Queue, eis/XAFileAdapter, WLStore_soa_domain_BPMJMSFileStore, eis/jms/aiaErrorTopicCF, tangosol.coherenceTxCCI, eis/aqjms/EDNxaTopic, eis/tibjmsDirect/Topic, WSATGatewayRM_soa_server1_soa_domain, eis/wls/Topic, eis/tibjms/Queue, eis/File/XAFileAdapter, eis/sunmq/Queue, eis/aqjms/Topic, EDNDataSource_soa_domain, eis/wls/EDNxaTopic, eis/aqjms/EDNxaDurableTopic, eis/fioranomq/Topic},NonXAResources={})],CoordinatorURL=soa_server1+10.96.5.150:8001+soa_domain+t3+).

                     

                     

                     

                    This is very critical issue for us as we need both (sms & attachment access) , please hep me out.

                     

                     

                    Thanks & Regards,

                    Nilesh Jha

                    • 7. Re: Change Attachment url in BPM Worklist
                      Martien van den Akker

                      HI Nilesh,

                       

                      It's still difficult for me to see through how your setup is. Your soa1 and soa2 servers are in a soa cluster right? And you have a loadbalancer in front of them?

                      Do you then have the same certificates on the loadbalancer and soa servers?

                       

                      The endpoint https://idam-uat..com/soa-infra/services/default/IDAMEventSubscription!2.1*soa_6c67e005-f8a2-42a1-ba9b-df69a855b4a1/Send… Is going through the loadbalancer or is this pointing directly to the soa2 server?

                      Since its a soaservice, it should go through the loadbalancer and the https://idam-uat..com  should match the serverURL on the soa-infrastructure. I guess this is the loadbalancer since apparently you use the default port 80.
                      By the way, do you also have set the frontend-host and -port on the soa-cluster to the loadbalancer address in weblogic console? You should.

                       

                      Then do you do TLS offloading on the loadbalancer? So does the loadbalancer route to the soa cluster servers via http or via https?

                       

                      Lastly: do you have different certificates on the loadbalancer and the soaservers? Or do you share the same certificates. Make sure that the public certificates are on the trust stores on both the soa servers and the loadbalancer.

                      I think you should have the loadbalancer-address as SAN (Subject Alternative Name) in the certificates of the loadbalancer as well as the soa servers. And that they should be trusted on all the three servers.

                       

                      Go through your TLS setup and verify all the certificates in play. Verify both the identity stores as well as the trust stores. As I tried to describe above, they should match logically.

                       

                      Kind regards,
                      Martien

                       

                      Ps. I sense some stress in your question. Mind that I really want to help you, but I won't get payed for this (only by points if you mark my answers as helpfull and/or answering your question). I do this in my spare- and in-between-time.

                      If this is mission critical, you might also want to raise a Service Request at Oracle Support.