BAM Excel ActiveX error

by | Nov 4, 2006 | BizTalk Community Blogs via Syndication

On our development machine, we do not have Office installed, so on my local workstation I copied the BAM.xls spreadsheet to create my activities. When I opened the workbook, I recieved the following error: Error in creating BAM Menu when clicking on theh Details button, it states

Error Description:

ActiveX component can’t create object

Error Source”

XmlParser:subLoadBamXML

I installed msxml 4.0 SP2 on my local machine, and now BAM.xls loads fine. You can download it here.

Last 100 Orchestrations Run

by | Nov 3, 2006 | BizTalk Community Blogs via Syndication

I am always having to modify the standard queries in HAT, so I finally broke down and created a new query in HAT.

This shows me the last 100 orchestrations run.

SELECT top 100
[Service/Name], [Service/Type],
[ServiceInstance/State],
dateadd(minute, @UtcOffsetMin, [ServiceInstance/StartTime]) as [StartTime], — can’t use ‘as [ServiceInstance/StartTime]’ since this prevents SQL from using index on that column (conflicts with ORDER BY)
dateadd(minute, @UtcOffsetMin, [ServiceInstance/EndTime]) as [EndTime], — can’t use ‘as [ServiceInstance/EndTime]’ since this prevents SQL from using index on that column (conflicts with ORDER BY)
[ServiceInstance/Duration],
[ServiceInstance/ExitCode],
[ServiceInstance/ErrorInfo],
[ServiceInstance/Host],
[Service/AssemblyName],
[ServiceInstance/InstanceID],
[ServiceInstance/ActivityID],
[Service/ServiceGUID],
[Service/ServiceClassGUID]
FROM dbo.dtav_ServiceFacts sf WITH (READPAST)
where [Service/Type] like ‘%Orchestration%’
ORDER BY sf.[ServiceInstance/StartTime] desc

The only other thing that you need to do is near the top of the trq file, you need to replace the title with:

<anyType _locID=”1″ xsi:type=”xsd:string”>Most recent 100 Orchestrations</anyType>

Save the file back in the Tracking folder as Top100Orchestrations.trq, restart HAT, and you are good to go.

Presentation at BizTalk Users Group in Boston

by | Nov 3, 2006 | BizTalk Community Blogs via Syndication

In September I had the privilege of being invited to Boston to present at the New England BizTalk User Group (http://www.btug.biz/Home/NewEngland/tabid/92/Default.aspx). During the two hour long session I discussed the EDI/AS2 functionality in the upcoming BTS 06 R2 release and conducted scenario demos. It was a great audience to present, very interactive and I immensely enjoyed the session and the discussions following it. I also want to take this opportunity to thank the members of the User Group for providing valuable feedback on the product!


 


I have numerous requests to make the presentation available, so it’s available as an attachment to this blog. The presentation provides a perspective on the features supported by the EDI solution and also has a couple of slides on the processing architecture.


 


Namaste!


 


Suren

Security IsInRole

by | Nov 2, 2006 | BizTalk Community Blogs via Syndication

Here is some code snippet to see if a user belongs to a certain security group. The code below will work with local group as well as AD groups:




Works in ASP.NET:


//Case Insensitive
bool t1 = Page.User.IsInRole(“Everyone”);



Works Everywhere:

//Case Sensitive
static bool IsInRole(string roleName)
{
   System.Security.Principal.WindowsIdentity id = System.Security.Principal.WindowsIdentity.GetCurrent();
   System.Security.Principal.IdentityReferenceCollection group = id.Groups;
   System.Security.Principal.IdentityReferenceCollection ntNames = group.Translate(typeof(System.Security.Principal.NTAccount));

   foreach (System.Security.Principal.IdentityReference ir in ntNames)
   {
      if (ir.Value.Substring(ir.Value.LastIndexOf(@”\”) + 1) == roleName) return true;
   }
   return false;
}

BizTalk Time Breakdown

by | Nov 2, 2006 | BizTalk Community Blogs via Syndication

 I recently came across yet another great BizTalk tool – this tool gives you
a view of the Tracking database with a twist

You can follow a message through BizTalk and see how long each stage took – Orchestration
or other. Pretty cool just to be able to see timings and paths right infront of you.

This tool was initially developed by Unisys for their performance testing of BizTalk
– well done all!

 

Link
to BizTalk Time Breakdown – Boudewijn’s adapter blog

WCF Oracle Application Server WS-Security Interoperability Part 2: from Oracle to WCF

by | Nov 2, 2006 | BizTalk Community Blogs via Syndication

By Jesus Rodriguez

This article is part of a series intended to explore interesting Web services interoperability scenarios between Microsoft .NET technologies and Oracle Application Server. The first two articles of this series explored interoperability scenarios  (WS-Security interoperability and WS-Addressing interoperability) between Oracle Business Process Execution Language (BPEL) Process Manager (PM) and Microsoft Web Services Enhancements (WSE) and Windows Communication Foundation (WCF) platforms.

The articles that compose this series are intended to illustrate techniques and architecture and design strategies that address some of the most common scenarios in Web services interoperability between Oracle App Server and Microsoft Web Services platforms. Particularly, this article is focused on how to implement the Anonymous over Certificate WS-Security scenario between Oracle App Server and Microsoft WCF.

In the fist part of this article we implemented the Anonymous over Certificate with an Oracle App Server Web Service and a WCF client. In this article we intend to complement the Anonymous over Certificate interoperability scenario implementing an Oracle App Server client that consumes a WCF Service. A complete description of the scenario can be found in my previous post.

The implementation: From Oracle App Server to WCF.

WCF Service

The WCF service for this example implements a simple mathematical operation as illustrated in the following code.

[ServiceContract()]

[XmlSerializerFormat()]

public interface IMyService

{

       [OperationContract]

       int Add(int param1, int param2);

}

 

public class MyService : IMyService

{

       public int Add(int param1, int param2)

       {

               return param1 + param2;

       }

}

In order to implement Anonymous over Certificate in a WCF Service we need to create a binding configuration that implements message security and does not require any user credentials for authentication. Given that Oracle App Server does not implement WS-Trust, we need to configure the default WS-Trust behaviors (see first part of this article).

<configuration>

            <system.serviceModel>

                        <services>

                                    <service name="MyService" behaviorConfiguration="MathServiceBehavior">

                                                <endpoint contract="IMyService" binding="wsHttpBinding" bindingConfiguration="mybinding"/>

                                    </service>

                        </services>

 

                        <bindings>

                                    <wsHttpBinding>

                                                <binding name="mybinding">

                                                            <security mode="Message">

                                                                        <message clientCredentialType="None" establishSecurityContext="false" negotiateServiceCredential="false"/>

                                                            </security>

                                                </binding>

                                    </wsHttpBinding>

                        </bindings>

 

                        <behaviors>

                                    <serviceBehaviors>

                                                <behavior name="MathServiceBehavior">

                                                            <serviceMetadata httpGetEnabled="true" />

                                                            <serviceCredentials>

                                                                        <serviceCertificate findValue="mycert" storeLocation="LocalMachine" storeName="My" x509FindType="FindBySubjectName" />

                                                            </serviceCredentials>

                                                            <serviceDebug includeExceptionDetailInFaults="False" />

                                                </behavior>

                                    </serviceBehaviors>

                        </behaviors>

                        </system.serviceModel>

 

            <system.web>

                        <compilation debug="true"/>

            </system.web>

</configuration>

These are all the steps required to implement Anonymous over Certificate in a WCF service having a high degree of interoperability with a J2EE client. Let’s check now how to implement an Oracle application client that consumes this WCF service.

Oracle Client

In order to consume the WCF Service we need to generate a Web Service proxy. Typically, this can be done using the Standard Web Service Proxy project template in JDeveloper. Another required step is to import the required certificates into an Oracle compatible certificate store. To find out more information about managing Oracle certificate stores, read Administering Web Services Security in the Oracle App Server documentation.

After implementing the above preliminary steps, we can create a typical Oracle client application that looks like the following:

 

public class ClientApp {

        public ClientApp() {

        }

        public void Test()

        {

        try

        {

            WSHttpBinding_IMyServiceClient proxy= new WSHttpBinding_IMyServiceClient();

            int i= proxy.add(34, 57);

        }

        catch(Exception ex){}

        }

public static void main(String[] args) {

                ClientApp clientApp = new ClientApp();

                clientApp.Test();

        }

}

Next, you configure the WS-Security settings for the WCF service proxy. This can be done using the Secure Proxy option on the generated proxy.

 

Figure 1: JDeveloper Secure Proxy configuration wizard

After completing the wizard the configuration security settings file should look similar to the following:

<oracle-webservice-clients xsi:noNamespaceSchemaLocation="META-INF/oracle-webservices-client-10_0.xsd"

                                                      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

      <webservice-client>

            <service-qname namespaceURI="http://tempuri.org/" localpart="MyService"/>

            <port-info>

                  <wsdl-port namespaceURI="http://tempuri.org/"

                                        localpart="WSHttpBinding_IMyService"/>

                  <runtime enabled="security">

                       <security>

                             <key-store name="" store-pass="test123" path="C:\Oracle\companionCDHome_2\jre\1.4.2\bin\test2.jks"/>

       <signature-key key-pass="test123" alias="myca"/>

        <encryption-key key-pass="test123" alias="myencca"/>

                             <inbound>

                                   <verify-signature>

                                          <signature-methods>

                                               <signature-method>DSA-SHA1</signature-method>

                                                <signature-method>RSA-MD5</signature-method>

                                               <signature-method>RSA-SHA1</signature-method>

                                          </signature-methods>

                                          <tbs-elements>

                                                <tbs-element local-part="Body"

                                                                         name-space="http://schemas.xmlsoap.org/soap/envelope/"/>

                                          </tbs-elements>

                                          <verify-timestamp created="true" expiry="28800"/>

                                   </verify-signature>

                                   <decrypt>

                                          <encryption-methods>

                                               <encryption-method>AES-128</encryption-method>

                                               <encryption-method>AES-256</encryption-method>

                                               <encryption-method>3DES</encryption-method>

                                          </encryption-methods>

                                          <tbe-elements>

                                                <tbe-element local-part="Body"

                                                                         name-space="http://schemas.xmlsoap.org/soap/envelope/"/>

                                          </tbe-elements>

                                   </decrypt>

                             </inbound>

                             <outbound>

                                   <signature>

                                         <signature-method>RSA-SHA1</signature-method>

                                          <tbs-elements>

                                                <tbs-element local-part="Body"

                                                                         name-space="http://schemas.xmlsoap.org/soap/envelope/"/>

                                          </tbs-elements>

                                          <add-timestamp created="true" expiry="28800"/>

                                   </signature>

                                    <encrypt>

                                          <recipient-key alias="wcfcert"/>

                                         <encryption-method>3DES</encryption-method>

                                          <tbe-elements>

                                                <tbe-element local-part="Body"

                                                                          name-space="http://schemas.xmlsoap.org/soap/envelope/"/>

                                          </tbe-elements>

                                   </encrypt>

                             </outbound>

                       </security>

                 </runtime>

                  <operations>

                        <operation name="add"/>

                  </operations>

            </port-info>

      </webservice-client>

</oracle-webservice-clients>

 

 

As you can see in the highlighted section, this client does not provide any credentials for authentication and uses certificates to sign and encrypt the message. Given that the WCF service is not implementing any key negotiation by default, using WS-Trust client application it’s able to successfully invoke the WCF Service explained on the previous section. The messages produced from the interactions between the Oracle clients and the WCF services are WS-Security 2004-01 compatible messages.

Conclusion

These two articles have explained the techniques used to implement the Anonymous over Certificate WS-Security scenario between WCF and Oracle Application Server. Specifically, this article complemented the first part explaining how to invoke a WCF Service that implements Anonymous over Certificate from Oracle App Server.

 

Share this post: Email it! | bookmark it! | digg it! | reddit!