Security Exception in XML ws call to LN

[Former Member]

Hello All,

I have the following scenario LotusNotes > XI > R3 > XI > LotusNotes. Lotus Notes calls a webservices that kicks off a process to pull data out of a table in R3. Once that data is recevied the XI it in turn calls a web service on the Lotus Notes side to update a DB.

The problem occurs after calling the webservice from XI to LotusNotes. I get a secutiry error. Anyone have any ideas???

<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>

<!-- Inbound Message -->

<SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="1">

<SAP:Category>XIAdapter</SAP:Category>

<SAP:Code area="PARSING">ADAPTER.SOAP_EXCEPTION</SAP:Code>

<SAP:P1 />

<SAP:P2 />

<SAP:P3 />

<SAP:P4 />

<SAP:AdditionalText>soap fault: com.sun.xml.wss.XWSSecurityException: Message does not conform to configured policy [ AuthenticationTokenPolicy(S) ]: No Security Header found; nested exception is com.sun.xml.wss.XWSSecurityException: com.sun.xml.wss.XWSSecurityException: Message does not conform to configured policy [ AuthenticationTokenPolicy(S) ]: No Security Header found</SAP:AdditionalText>

<SAP:ApplicationFaultMessage namespace="" />

<SAP:Stack />

<SAP:Retry>M</SAP:Retry>

</SAP:Error>

Edited by: Raki Prasad on May 9, 2008 7:00 PM

[VijayKonam]

Are you using https protocol in your sender soap adapter? In that case, you have install the necessary certificates on the XI VA and also the caller should use this certificate in order to communicate I believe.

VJ

[Former Member]

No this is using HTTP

[VijayKonam]

Your calling application should use the credentials of the user account used on XI side to be able to call the web service. Use your PIAPPLUSER account credentials for this.

VJ

[Former Member]

When XI is calling the LN web service, we are using the USERNAME and PASSWORD that was provided to us by LN. We know that we are able to connect to LN as LN is able to see the message come through their end. However, the message gets rejected due to this SOAP FAULT I am getting. I assume we need to include some security parameters in the message. Could this be becuase the communication channel needs to be changed???

[Former Member]

Hi,

Your SOAP adapter settings must match the java XWS-Security framework security requirements ... Ask your ws admins or devs to give you those details so you can configure the channel accordingly.

XWS-Security details can be found here : http://java.sun.com/webservices/docs/1.6/tutorial/doc/XWS-SecurityIntro4.html#wp565210

Hope this helps

Chris