Deleting Worklist Connections Using WLST

22-18 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter

22.5.2.1 Users Mismatch in Identity Stores

Mismatch in identity stores used by the managed server on which the Worklist service task flow is running and that of the Oracle SOA Suite BPEL server. Problem If a user exists in the Worklist managed servers identity store but not in the Oracle SOA Suites identity store, then the following messages display: In the diagnostic logs of the Worklist services managed server: [2009-03-23T11:35:21.407+00:00] [DefaultServer] [ERROR] [] [oracle.webcenter.worklist.config] [tid: pool-1-daemon-thread-12] [userId: Luke] [ecid: 0000I0n7GBZFk3FLN2o2ye19lrBX00000L,0:1:3] [APP: WorklistV2.0] Error in workflow service Web service operation invocation.[[ Error in workflow service Web service operation invocation. The error is . Verify that the SOAP connection information for the server is correct. ORABPEL-30044 Error in workflow service Web service operation invocation. Error in workflow service Web service operation invocation. The error is . Verify that the SOAP connection information for the server is correct. at oracle.bpel.services.workflow.query.client.TaskQueryServiceSOAPClient.convertSOAPF aultExceptionTaskQueryServiceSOAPClient.java:242 at oracle.bpel.services.workflow.query.client.TaskQueryServiceSOAPClient.invokeTaskQ ueryServiceSOAPClient.java:203 at oracle.bpel.services.workflow.query.client.TaskQueryServiceSOAPClient.authenticate TaskQueryServiceSOAPClient.java:253 at oracle.bpel.services.workflow.query.client.AbstractDOMTaskQueryServiceClient.authe nticateAbstractDOMTaskQueryServiceClient.java:164 at sun.reflect.NativeMethodAccessorImpl.invoke0Native Method at sun.reflect.NativeMethodAccessorImpl.invokeNativeMethodAccessorImpl.java:39 at sun.reflect.DelegatingMethodAccessorImpl.invokeDelegatingMethodAccessorImpl.java: 25 at java.lang.reflect.Method.invokeMethod.java:597 at oracle.webcenter.concurrent.MethodTask.callMethodTask.java:34 at oracle.webcenter.concurrent.Submission2.runSubmission.java:492 at java.security.AccessController.doPrivilegedNative Method at oracle.security.jps.util.JpsSubject.doAsPrivilegedJpsSubject.java:313 at oracle.webcenter.concurrent.Submission.runAsPrivilegedSubmission.java:499 at oracle.webcenter.concurrent.Submission.runSubmission.java:433 at oracle.webcenter.concurrent.SubmissionSubmissionFutureTask.runSubmission.java:77 9 at java.util.concurrent.ExecutorsRunnableAdapter.callExecutors.java:441 at java.util.concurrent.FutureTaskSync.innerRunFutureTask.java:303 at java.util.concurrent.FutureTask.runFutureTask.java:138 at oracle.webcenter.concurrent.ModifiedThreadPoolExecutorWorker.runTaskModifiedThre adPoolExecutor.java:657 at oracle.webcenter.concurrent.ModifiedThreadPoolExecutorWorker.runModifiedThreadPo olExecutor.java:682 at java.lang.Thread.runThread.java:619 ]] [2009-03-23T11:35:21.735+00:00] [DefaultServer] [NOTIFICATION] [] Managing the Worklist Service 22-19 [oracle.webcenter.worklist.config] [tid: pool-1-daemon-thread-15] [userId: Luke] [ecid: 0000I0n7GBZFk3FLN2o2ye19lrBX00000L,0:1:6] [APP: WorklistV2.0] TaskServiceSOAPClient: soapFault:[[ env:Fault xmlns:ns0=http:docs.oasis-open.orgwss200401oasis-200401-wss-wssecurity-sece xt-1.0.xsdxmlns:env=http:schemas.xmlsoap.orgsoapenvelope faultcodens0:FailedAuthenticationfaultcode faultstringFailedAuthentication : The security token cannot be authenticated or authorized.faultstring faultactor env:Fault ]] In the diagnostic logs of the Oracle SOA Suites managed server: [2009-03-23T04:52:07.909-07:00] [soa_server1] [ERROR] [WSM-00008] [oracle.wsm.resources.security] [tid: [ACTIVE].ExecuteThread: 2 for queue: weblogic.kernel.Default self-tuning] [userId: anonymous] [ecid: 0000I0nB64fFk3FLN2o2ye19lrBX00000O,0:1:3:1] [WEBSERVICE_PORT.name: TaskQueryServicePortSAML] [APP: soa-infra] [J2EE_MODULE.name: integrationservicesTaskQueryService] [WEBSERVICE.name: TaskQueryService] [J2EE_APP.name: soa-infra] Web service authentication failed. Solution The same users must exist in identity stores of both managed servers. For information, see the section Setting Security for the Worklist Service in Oracle Fusion Middleware Developers Guide for Oracle WebCenter. This can be easily accomplished with a common LDAP identity store. A useful check is to validate that you can log in to the Oracle SOA Suites BPEL Worklist application with the user ID for which the Worklist service is unavailable. That is, try accessing the integration Worklist application at: http:host:portintegrationworklistapp. Where the host and port are the same as those used in the Worklist connection for the task flow application.

22.5.2.2 Shared User Directory Does Not Include the weblogic User

Problem BPEL Web services cannot respond to requests received from the Worklist service because the shared user directory does not include the weblogic user. Solution Ensure that you have tried the solution provided in Users Mismatch in Identity Stores . If that solution did not resolve the issue, then try the solution described in this section. If Oracle SOA Suite is connected to a shared user directory LDAP, and the user weblogic does not exist in the identity store, then the following step assigns the BPMWorkflowAdmin role to a valid user in the identity store. Use WLST to revoke an application role from SOAAdmin and grant it to a member of the external identity store. This can be done by running the following WLST command from the SOA_ORACLE_HOME . For example: cd SOA_ORACLE_HOMEcommonbin wlst.sh