My Oracle Support Banner

Attaching Web Services (OWSM) Security Policies Using attachWebServicePolicy to a Managed Server in a WebCenter Portal Cluster Are Not Retained After Managed Server Restart (Doc ID 1638636.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle WebCenter Portal - Version 11.1.1.6.0 to 11.1.1.8.2 [Release 11g]
Information in this document applies to any platform.

Symptoms

Attaching Web Services (OWSM) Security Policies to a WebCenter Portal Managed Server in a Cluster are not retained after restarting the Managed Server.


Steps To Reproduce:

Having a collaboration cluster with 2 managed servers as follows:

WC_Collaboration1 - was running in wcphost1
WC_Collaboration2 - was running in wcphost2

 

The issue was reported attaching the policies to WC_Collaboration2 managed server.
However the issue can also happen with other managed servers in the Collaboration Cluster (or it can happen also attaching policies to spaces managed servers in a Spaces Cluster).

 

For this specific case the isse was reproduced as follows:

  1. Ensure that all managed servers in the cluster are running.
    In this case WC_Colaboration1 and WC_Collaboration2.
  2. Run the following WLST command to attach an OWSM policy on the discussions Web service endpoint:
    attachWebServicePolicy(application='/wcpedg_domain/WC_Collaboration2/owc_discussions', moduleName='owc_discussions', moduleType='web', serviceName='OWCDiscussionsServiceAuthenticated', subjectName='OWCDiscussionsServiceAuthenticated', policyURI='oracle/wss10_saml_token_service_policy')
      
     
  3. After attaching the Policy run the following command to confirm the policy is attached:
    listWebServicePolicies(application='/wcpedg_domain/WC_Collaboration2/owc_discussions', moduleName='owc_discussions', moduleType='web', serviceName='OWCDiscussionsServiceAuthenticated', subjectName='OWCDiscussionsServiceAuthenticated')
     
    The above command should return something like this:
     
    OWCDiscussionsServiceAuthenticated :
    security : oracle/wss10_saml_token_service_policy, enabled=true
    Attached policy or policies are valid; endpoint is secure.
     
     
  4. Restart the WC_Collaboration2 managed server.
  5. Then check the policy again using listWebServicePolicies wlst command.
    listWebServicePolicies(application='/wcpedg_domain/WC_Collaboration2/owc_discussions', moduleName='owc_discussions', moduleType='web', serviceName='OWCDiscussionsServiceAuthenticated', subjectName='OWCDiscussionsServiceAuthenticated')
     
    This time the policies will not show up.
    You will get something like this:
     
    OWCDiscussionsServiceAuthenticated :
    No policies attached; endpoint is not secure.
     



Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution


This document is being delivered to you via Oracle Support's Rapid Visibility (RaV) process and therefore has not been subject to an independent technical review.
My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.