The WebService Connector Throws a RemoteFault With "failure in security check" After Adding the oimcp_WS_CONNECTOR_OUTBOUND Policy (Doc ID 1999315.1)

Last updated on AUGUST 02, 2017

Applies to:

Identity Manager Connector - Version 11.1.1.5.0 and later
Information in this document applies to any platform.

Symptoms

After configuring the WebService Connector to use the oimcp_WS_CONNECTOR_OUTBOUND policy, you're unable to successfully invoke the target web service.  The WebService Connectors' SOA instance is faulted with:

<remoteFault>
<part name="summary">
<summary>oracle.fabric.common.FabricInvocationException: Unable to invoke endpoint URI "http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: oracle.fabric.common.PolicyEnforcementException: FailedCheck : failure in security check</summary>
</part>
<part name="detail">
<detail>Unable to invoke endpoint URI
"http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: oracle.fabric.common.PolicyEnforcementException: FailedCheck : failure in security check</detail>
</part>
<part name="code">
<code>null</code>
</part>
</remoteFault>

 The SOA managed servers' diagnostic log shows multiple OWS and WSM errors, some of which indicate this error is caused by an javax.xml.xpath.XPathExpressionException, with "javax.xml.transform.TransformerException: A location step was expected following the '/' or '//' token." :

[2015-03-24T22:36:13.394+00:00] [soa_server1] [ERROR] [] [ORG.IDENTITYCONNECTORS.GENERICWS] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: TargetUserService] [WSM_POLICY_NAME: oimcp/WS_CONNECTOR_OUTBOUND] Error while evaluating XPATH null

[2015-03-24T22:36:13.428+00:00] [soa_server1] [ERROR] [WSM-07607] [oracle.wsm.resources.enforcement] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: TargetUserService] [WSM_POLICY_NAME: oimcp/WS_CONNECTOR_OUTBOUND] Failure in execution of assertion {http://schemas.oracle.com/ws/soa/custom}custom-executor executor class oracle.iam.connectors.genericws.soa.GenericWSOutboundPolicy.

[2015-03-24T22:36:13.429+00:00] [soa_server1] [ERROR] [WSM-07602] [oracle.wsm.resources.enforcement] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: TargetUserService] [WSM_POLICY_NAME: oimcp/WS_CONNECTOR_OUTBOUND] Failure in WS-Policy Execution due to exception.

[2015-03-24T22:36:13.434+00:00] [soa_server1] [ERROR] [WSM-07501] [oracle.wsm.resources.enforcement] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: TargetUserService] [WSM_POLICY_NAME: oimcp/WS_CONNECTOR_OUTBOUND] Failure in Oracle WSM Agent processRequest, category=security, function=agent.function.client, application=default, composite=TargetWSConnector, modelObj=TargetUserService, policy=oimcp/WS_CONNECTOR_OUTBOUND, policyVersion=1, assertionName={http://schemas.oracle.com/ws/soa/custom}custom-executor.[[
oracle.wsm.common.sdk.WSMException: FailedCheck : failure in security check
    at oracle.iam.connectors.genericws.soa.GenericWSOutboundPolicy.execute(GenericWSOutboundPolicy.java:119)
...
Caused by: javax.xml.xpath.XPathExpressionException
    at com.sun.org.apache.xpath.internal.jaxp.XPathImpl.evaluate(XPathImpl.java:280)
    at oracle.iam.connectors.genericws.soa.GenericWSOutboundPolicy.getDataNode(GenericWSOutboundPolicy.java:190)
...
Caused by: javax.xml.transform.TransformerException: A location step was expected following the '/' or '//' token.
    at com.sun.org.apache.xpath.internal.compiler.XPathParser.error(XPathParser.java:608)
    at com.sun.org.apache.xpath.internal.compiler.XPathParser.Step(XPathParser.java:1737)
    at com.sun.org.apache.xpath.internal.compiler.XPathParser.RelativeLocationPath(XPathParser.java:1633)
...
]]
[2015-03-24T22:36:13.476+00:00] [soa_server1] [WARNING] [] [oracle.integration.platform.blocks.soap] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: TargetUserService] Unable to invoke endpoint URI "http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: Unable to invoke endpoint URI "http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: oracle.fabric.common.PolicyEnforcementException: FailedCheck : failure in security check

[2015-03-24T22:36:13.485+00:00] [soa_server1] [ERROR] [] [oracle.soa.bpel.engine.ws] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [component_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: WSConnector] got FabricInvocationException[[
javax.xml.transform.TransformerException: A location step was expected following the '/' or '//' token.
    at com.sun.org.apache.xpath.internal.compiler.XPathParser.error(XPathParser.java:608)
    at com.sun.org.apache.xpath.internal.compiler.XPathParser.Step(XPathParser.java:1737)
    at com.sun.org.apache.xpath.internal.compiler.XPathParser.RelativeLocationPath(XPathParser.java:1633)
...
]]
...
[2015-03-24T22:36:13.509+00:00] [soa_server1] [ERROR] [] [oracle.soa.bpel.engine] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [component_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: WSConnector] Unhandled exception for ComponentDN=default/TargetWSConnector!1.0*soa_abcd012/WSConnector CompositeInstanceId=xxx ComponentInstanceId=xxx
...
[2015-03-24T22:36:13.515+00:00] [soa_server1] [ERROR] [] [oracle.soa.bpel.engine] [tid: tid] [userId: weblogic] [ecid: abc123] [APP: soa-infra] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: fabric] [WEBSERVICE.name: wsconnector_client_ep] [WEBSERVICE_PORT.name: WebservicesConnectorService_pt] [composite_instance_id: xxx] [component_instance_id: xxx] [composite_name: TargetWSConnector!1.0] [component_name: WSConnector] This exception occurred because the fault thrown in the BPEL flow was not handled by any fault handlers and reached the top-level scope. Root cause : [[
com.oracle.bpel.client.BPELFault: faultName: {{http://schemas.oracle.com/bpel/extension}remoteFault}
messageType: {{http://schemas.oracle.com/bpel/extension}RuntimeFaultMessage}
parts: {{
summary=<summary>oracle.fabric.common.FabricInvocationException: Unable to invoke endpoint URI "http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: oracle.fabric.common.PolicyEnforcementException: FailedCheck : failure in security check</summary>
,detail=<detail>Unable to invoke endpoint URI "http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: oracle.fabric.common.PolicyEnforcementException: FailedCheck : failure in security check</detail>
,code=<code>null</code>}
...

[2015-03-24T22:36:13.655+00:00] [soa_server1] [ERROR] [OWS-04086] [oracle.webservices.service] [tid: tid] [userId: <anonymous>] [ecid: abc123] [APP: soa-infra] [composite_instance_id: xxx] [composite_name: TargetWSConnector] [component_name: wsconnector_client_ep] javax.xml.rpc.soap.SOAPFaultException: oracle.fabric.common.FabricInvocationException: Unable to invoke endpoint URI "http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: oracle.fabric.common.PolicyEnforcementException: FailedCheck : failure in security check[[
    at oracle.integration.platform.blocks.soap.WebServiceEntryBindingComponent.generateSoapFaultException(WebServiceEntryBindingComponent.java:1273)
    ...
]]

[2015-03-24T22:36:13.656+00:00] [soa_server1] [ERROR] [OWS-04115] [oracle.webservices.service] [tid: tid] [userId: <anonymous>] [ecid: abc123] [APP: soa-infra] [composite_instance_id: xxx] [composite_name: TargetWSConnector] [component_name: wsconnector_client_ep] An error occurred for port: FabricProvider: javax.xml.rpc.soap.SOAPFaultException: oracle.fabric.common.FabricInvocationException: Unable to invoke endpoint URI "http://targetWShost:80/TargetWebservice/TargetWS_Service" successfully due to: oracle.fabric.common.PolicyEnforcementException: FailedCheck : failure in security check.

 

Changes

 You've configured the oimcp_WS_CONNECTOR_OUTBOUND policy using the instructions in steps 8-10 of Section 2.3.10 Configuring the Reset Password Operation of the Identity Manager Connector Guide for Webservices.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms