Clarity

  • Private Community
 View Only

  • 1.  SOAP CALL IS FAILING

    Posted Mar 21, 2011 12:56 PM
    I have not become a gel script or xog expert and my customer is trying to use SOAP for the first time in their Clarity 12.0.3. Even the simplest of gel srcripts are failng the SOAP calls and I do not know why. We find no errors in her app-niku.log file or bg-niku.log files. She is getting this error on her screen:


    FATAL ERROR -> org.apache.commons.jelly.JellyTagException: null:17:54:
    <soap:invoke> Failed to send a SOAP message generated to
    'https://clarity.xyzcompany.com/niku/xog'.sun.security.validator.ValidatorExcept
    ion: PKIX path building failed:
    sun.security.provider.certpath.SunCertPathBuilderException: unable to find
    valid certification path to requested target.

    A Clarity engineer suggested the following:

    Looks like they do not have the correct trust store to verify server's
    certificate:

    1. Make sure you have imported your certificates into the keystore .
    2. Make sure any certificates have been imported into the correct keystore;
    you may have multiple JDKs.
    3. Check to see that the correct keystore is in use. It should be in your
    JDK, not your JRE. Make sure the system is picking up the correct JDK. Try
    echo %JAVA_HOME% (Windows) or export $JAVA_HOME (Linux)


    Customer followed this suggestion however now customer gets this:


    FATAL ERROR -> org.apache.commons.jelly.JellyTagException: null:14:54:
    <soap:invoke> Failed to send a SOAP message generated to
    'https://clarity-xyzcompany.com/niku/xog'.Error occurred when receiving
    SOAP response SOAP Response: <HTML><HEAD><TITLE></TITLE></HEAD><BODY
    onLoad="document.AUTOSUBMIT.submit();">This page is used to hold your
    data while you are being authorized for your request.<BR><BR>You will be
    forwarded to continue the authorization process. If this does not happen
    automatically, please click the Continue button below.<FORM
    NAME="AUTOSUBMIT" METHOD="POST"
    ACTION="http://webssologin-a.xyzcompany.com/siteminderagent/SmMakeCookie.c
    cc?SMSESSION=QUERY&PERSIST=0&TARGET=-SM-https%3a%2f%2fclarity--qa%2emcke
    sson%2ecom%2fniku%2fxog"><INPUT TYPE="HIDDEN" NAME="SMPostPreserve"
    VALUE="T0tlTkFROTh

    Can any one help us? Sample process attached

    Thanks, DJV


  • 2.  Moving to XOG/GEL/WSDL Board

     
    Posted Mar 22, 2011 02:38 PM
    Hi Dana,

    I am moving this so that it might get response from the correct board.

    Thanks.
    Chris


  • 3.  RE: Moving to XOG/GEL/WSDL Board

    Posted Mar 23, 2011 08:26 AM
    Hi Dana,

    From the response message you can conclude that your call is not actually reaching the service but is intercepted by a SiteMinder agent.
    So it looks like you have to do some network (SiteMinder ) configuration.

    Regards
    Dick Deneer


  • 4.  RE: Moving to XOG/GEL/WSDL Board

    Posted Mar 24, 2011 12:46 PM
    Thanks so much Dick. After reviewing traces and logs all day I sometimes miss the fine print but yes Siteminder seems problematic and I'm having customer send me the http header traces to get started.


  • 5.  RE: Moving to XOG/GEL/WSDL Board

    Posted Apr 04, 2011 01:14 PM
    Hi There,

    I wanted to post this here in case anyone else picks the thread up for future reference;

    This issue did turn out to be a Siteminder/cert problem.


    Here were the main steps taken to resolve the problem;


    1) Imported the site SSL certificates into the Java Keystore and used
    that keystore in the CA config.

    2) Added the site SSL certificates to the certs file in java home
    directory

    3) Siteminder configuration had to be changed to allow /xog url to work.


    We had to have those responsible for Siteminder:

    User a header trace (like IE HttpTrace or Fiddler)

    Launch/utilize a utility called 'smconsole'. This tool is used to configure Policy Server
    Profiler (Trace Logging).

    Check for certs to ascertain if SOAP generation is/is not available in
    the smkey database


  • 6.  RE: Moving to XOG/GEL/WSDL Board

     
    Posted Apr 04, 2011 01:53 PM
    Thanks for letting everyone know the resolution Dana.

    Chris