Products | Versions |
---|---|
TIBCO ActiveMatrix BusinessWorks | - |
Not Applicable | - |
BW-15757 - The attribute "Encoding Type" was missing from the nonce element when a request was sent through a SOAP Request Reply using the security type Username Token. A property has been introduced for this. Set the property java.property.com.tibco.security.wss4j.NO_UT_NONCE_ENCODING=true. The default value of this property is "false".
The user will see the following error on the BPM side when setting this property to "true".
com.tibco.governance.pa.action.security.SecurityException: Internal error in login; check logs org.apache.ws.security.WSSecurityException: An invalid security token was provided (An error happened processing a Username Token).
at com.tibco.governance.pa.action.wss.WssProcessorConnection.processSecurityHeader(WssProcessorConnection.java:229)The property java.property.com.tibco.security.wss4j.NO_UT_NONCE_ENCODING setting in the .tra file is incorrect. Remove it from the tra file. The readme file for hot fix 008 does not describe this property clearly so the user may be confused by the description below:
java.property.com.tibco.security.wss4j.NO_UT_NONCE_ENCODING=true . The default value of this property is "false".