Invoke Actions From OIC -> FTP Fails With Error "JCA Binding Component is unable to create an outbound JCA (CCI) connection" After Security Policy Change (Doc ID 2990186.1)

Last updated on MARCH 01, 2024

Applies to:

Symptoms

On : 23.10 version, Adapter - FTP /File

After security setting for file server - FTP Adapter config changed from "FTP Public Key Authentication" to "FTP Server Access Policy",  all FTP invokes (List, download, move etc) fails with error.

ERROR
-----------------------
{\"ts\":1701277210892,\"logger\":\"model.adapter.Http_NM2REST_Adapter\",\"sn\":\"m.adapter.Http_NM2REST_Adapter\",\"level\":\"WARNING\",\"thread\":\"jetty-client-32\",\"cl\":\"model.adapter.Http_NM2REST_Adapter\",\"scl\":\"m.adapter.Http_NM2REST_Adapter\",\"method\":\"handleAbove4xxResponse \",\"msg\":\"http.id.4930d: error XML payload is: <fault xmlns=\\\"http://xmlns.oracle.com/cloud/oic/gen3fault\\\">\
<traceId><TRACE ID></traceId>\
<requestId>/<OPC ID></requestId>\
<errorId/>\
<flowId><flowid></flowId>\
<errorType>InternalError</errorType>\
<origin>filehandling-adapters-xxxxxxx</origin>\
<errorCode>CA-BS-001</errorCode>\
<faultName xmlns:ns0=\\\"http://schemas.xmlsoap.org/soap/envelope/\\\">ns0:Server</faultName>\
<retriable>false</retriable>\
<reason>Exception while processing Invoke request for endpoint <listFTP_REQUEST>. Error Message : JCA Binding Component connection issue.\
JCA Binding Component is unable to create an outbound JCA (CCI) connection.\
file:/tmp/xxxxx-xxxx-xxx-xx-xxxxxxx/listFTP_REQUEST.wsdl [ listFTP_REQUESTPortType::ListFile(parameters,parameters) ] - : The JCA Binding Component was unable to establish an outbound JCA CCI connection due to the following issue: Error in establishing a session with SSH Server..\
Error in establishing a session with SSH Server..\
Unable to establish a session with the server.\
Please ensure hostname and port specified to login to the server are correct.\
\
Please make sure that the JCA connection factory and any dependent connection factories have been configured with a sufficient limit for max connections. Please also make sure that the physical connection to the backend EIS is available and the backend itself is accepting connections.\
; nested exception is: \
\\tBINDING.JCA-12511\
JCA Binding Component connection issue.\
JCA Binding Component is unable to create an outbound JCA (CCI) connection.\
file:/tmp/xxxxx-xxx-xxx-xxx-xxxxxxxx/listFTP_REQUEST.wsdl [ listFTP_REQUESTPortType::ListFile(parameters,parameters) ] - : The JCA Binding Component was unable to establish an outbound JCA CCI connection due to the following issue: Error in establishing a session with SSH Server..\
Error in establishing a session with SSH Server..\
Unable to establish a session with the server.\
Please ensure hostname and port specified to login to the server are correct.\
\
Please make sure that the JCA connection factory and any dependent connection factories have been configured with a sufficient limit for max connections. Please also make sure that the physical connection to the backend EIS is available and the backend itself is accepting connections.\
</reason>\
<details>JCA+Binding+Component+connection+issue.%0AJCA+Binding+Component+is+unable+to+create+an+outbound+JCA+%28CCI%29+connection.%0Afile%3A%2Ftmp%2Fxxxxx-xxx-xxx-xxxxx%2FlistFTP_REQUEST.wsdl+%5B+listFTP_REQUESTPortType%3A%3AListFile%28parameters%2Cparameters%29+%5D+-+%3A+The+JCA+Binding+Component+was+unable+to+establish+an+outbound+JCA+CCI+connection+due+to+the+following+issue%3A+Error+in+establishing+a+session+with+SSH+Server..%0AError+in+establishing+a+session+with+SSH+Server..%0AUnable+to+establish+a+session+with+the+server.%0APlease+ensure+hostname+and+port+specified+to+login+to+the+server+are+correct.%0A%0APlease+make+sure+that+the+JCA+connection+factory+and+any+dependent+connection+factories+have+been+configured+with+a+sufficient+limit+for+max+connections.+Please+also+make+sure+that+the+physical+connection+to+the+backend+EIS+is+available+and+the+backend+itself+is+accepting+connections.%0A%3B+nested+exception+is%3A+%0A%09BINDING.JCA-12511%0AJCA+Binding+Component+connection+issue.%0AJCA+Binding+Component+is+unable+to+create+an+outbound+JCA+%28CCI%29+connection.%0Afile%3A%2Ftmp%2Fxxxxx-xxx-xxx-xxxxx%2FlistFTP_REQUEST.wsdl+%5B+listFTP_REQUESTPortType%3A%3AListFile%28parameters%2Cparameters%29+%5D+-+%3A+The+JCA+Binding+Component+was+unable+to+establish+an+outbound+JCA+CCI+connection+due+to+the+following+issue%3A+Error+in+establishing+a+session+with+SSH+Server..%0AError+in+establishing+a+session+with+SSH+Server..%0AUnable+to+establish+a+session+with+the+server.%0APlease+ensure+hostname+and+port+specified+to+login+to+the+server+are+correct.%0A%0APlease+make+sure+that+the+JCA+connection+factory+and+any+dependent+connection+factories+have+been+configured+with+a+sufficient+limit+for+max+connections.+Please+also+make+sure+that+the+physical+connection+to+the+backend+EIS+is+available+and+the+backend+itself+is+accepting+connections.%0A</details>\
</fault>\",\"oic.user\":\"<username>\",\"oic.iname\":\"-\",\"oic.service-instance\":\"<OCID>\",\"oic.partition\":\"16\",\"opc-request-id\":\"/<OPC ID>\",\"oic.trace\":\"<TRACE ID>\",\"rep.fid\":\"<flowid>\",\"host\":\"mcube-xxxxxxxxxxx\"}"


STEPS
-----------------------
The issue can be reproduced at will with the following steps:

1. Update file server security policy from "FTP Public Key Authentication" to "FTP Server Access Policy"
2. Test connection (will succeed)
3. Run integration to perform any FTP action.

 

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.