Can Not Define Clock Skew When Using Oracle Web Services Manager
(Doc ID 1449108.1)
Last updated on DECEMBER 16, 2022
Applies to:
Oracle Web Services Manager - Version 11.1.1.1 and laterInformation in this document applies to any platform.
Symptoms
Using WebLogic Server 10.3.3 with WebCenter and Webcenter generates the assertion. The assertion is then consumed by a WebLogic Server 10.3.2 domain that has WebLogic Portal.
SAML is used for security between portlets. The following error is experienced:
<Debug> <SecuritySAMLAtn> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <><BEA-000000> <SAMLAssertion: [Security:099031]Assertion is invalid before <TIMESTAMP>>
The following is seen in WLS Portal log:
Caused by: javax.xml.rpc.soap.SOAPFaultException: Security token failed to validate. weblogic.xml.crypto.wss.SecurityTokenValidateResult@bfb1f6[status: false]
[msg The SAML token is not valid, it is rejected by CSS ]
at oracle.j2ee.ws.client.StreamingSender._raiseFault(StreamingSender.java:668)
at oracle.j2ee.ws.client.StreamingSender._sendImpl(StreamingSender.java:474)
at oracle.j2ee.ws.client.StreamingSender._send(StreamingSender.java:147)
at oracle.portlet.wsrp.v2.soap.runtime.WSRP_v2_Markup_Binding_SOAP_Stub.getMarkup(WSRP_v2_Markup_Binding_SOAP_Stub.java:173)
at oracle.portlet.wsrp.v2.WSRP_v2_Markup_PortTypeJaxbToSoap.getMarkup(WSRP_v2_Markup_PortTypeJaxbToSoap.java:91)
at oracle.portlet.wsrp.v2.ServerToWSRPv2.getMarkup(ServerToWSRPv2.java:18743)
at oracle.portlet.client.connection.wsrp.ActivityServerWrapper.getMarkup(ActivityServerWrapper.java:1745)
... 23 more
[msg The SAML token is not valid, it is rejected by CSS ]
at oracle.j2ee.ws.client.StreamingSender._raiseFault(StreamingSender.java:668)
at oracle.j2ee.ws.client.StreamingSender._sendImpl(StreamingSender.java:474)
at oracle.j2ee.ws.client.StreamingSender._send(StreamingSender.java:147)
at oracle.portlet.wsrp.v2.soap.runtime.WSRP_v2_Markup_Binding_SOAP_Stub.getMarkup(WSRP_v2_Markup_Binding_SOAP_Stub.java:173)
at oracle.portlet.wsrp.v2.WSRP_v2_Markup_PortTypeJaxbToSoap.getMarkup(WSRP_v2_Markup_PortTypeJaxbToSoap.java:91)
at oracle.portlet.wsrp.v2.ServerToWSRPv2.getMarkup(ServerToWSRPv2.java:18743)
at oracle.portlet.client.connection.wsrp.ActivityServerWrapper.getMarkup(ActivityServerWrapper.java:1745)
... 23 more
NTP Server has been configured, but due to latency in the network the servers might become unsynced.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Cause |
| Solution |
| References |