Error while communication between PI and Third party

[Former Member]

Hi Michael,

Please help me on this issue We have a requirement in our project where web-based courses are being offered to the employees. The web-based course content will come from Skillsoft (External web-based course content provider). To access the web based course from third party (skill soft), employee needs to launch the course via Learning portal (Learning solution system). LSO system will need to retrieve the course content from external sources (SkillSoft), in order to be accessed by the employees. Following is the flow of our message (synchronous call): Learning Portal ß> ECC (ABAP Client Proxy)ß> PI 7.0ß>SkillSoft (AXIS SOAP ADAPTER (Web service)) My client requirement is to use AXIS framework along with UsernameToken security and PasswordDigest while interacting with SkillSoft. Where Password_Digest = Base64 (SHA-1 (nonce + created + password)) More details of the specification can be found here http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0.pdf I have deployed axis_1.4 related all the relevant .jar files and add the modules related to usernameToken security as per SAP Note 1039369 FAQ XI Axis Adapter in Receiver SOAP adapter. Whenever I am checking through URL http://port:host/XIAxisAdapter/MessageServlet its showing that the required/optional components list status OK. Now when I am pushing the data from ECC to PI, data is successfully coming to PI however when the data is going outside PI through Receiver AXIS SOAP Adapter in RWB is showing The message was successfully delivered to the application using connection SOAP_http://sap.com/xi/XI/System The message status set to DLVD. However when I am checking the SXMB_MONI itu2019s giving the following error in response message: org.apache.ws.security.WSSecurityException: AccessDenied I have configured the modules in SOAP adapter as below: Processing Sequence. Module Key afreq xireq wssec trp xires afres Module configuration ModuleKey ParameterName parametervalue xireq handler.type java:com.sap.aii.axis.xi.XI30OutboundHandler wssec action UsernameToken Timestamp wssec addUTElement Nonce Created wssec handler.type java:com.sap.aii.adapter.axis.ra.handlers.security.WSDoAllSender wssec passwordType PasswordDigest wssec pwd.password ******************** wssec user XYZ trp handler.type java:com.sap.aii.adapter.axis.ra.transport.http.HTTPSender trp module.pivot true xires handler.type java:com.sap.aii.axis.xi.XI30OutboundHandler. Request you to please provide your valuable inputs on this issue?

Thanks in advance Anku Chopra

[sunilchandra007]

Hi,

It seems there is some autorization problem for your user to the web service you are calling.

Did you try to test the web service through WS Navigator or any other tool like Altova ?

Regards,

Sunil Chandra

[Former Member]

Hi Sunil,

I tried sending the message throgh soap client and it is succesfully going to third party and i am getting the appropriate response.

I have done lot of R&D on AXIS framework and on how to set the parameter values for *nonce and created * in PI(module configuration)

however i am assuming that access denied is because i am not not able to send the right combination of PaswordDigest.

Where Password_Digest = Base64 (SHA-1 (nonce + created + password))

More details of the specification can be found here http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0.pdf

Any inputs on this.

Thanks in advance

Anku chopra

[Former Member]

Assign user on Service ( I think you will find in SOAP CC).

[Former Member]

Hi Anup,

Were you able to resolve this issue "WSSecurityException: Access Denied". I am facing exactly same problem ......

Any help is greatly appreciated.

Thanks,

Shany

[Former Member]

Hi - I have the same issue... can you kindly let me know how you resolved exactly?

Thanks,

Keith

[Former Member]

Hi Experts,

Any inputs on this??

Please advice.

Thanks in advance

Anku Chopra