000030965 - Service connection failure for datafeed with Siteminder and Proxy

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000030965
Applies ToRSA Product Set: Archer
RSA Product/Service Type: Archer
RSA Version/Condition: 5.5 SP2
Platform: Windows
Platform (Other): null
O/S Version: Customer doesn't know/not sure-see notes
Product Name: null
Product Description: null
IssueDF won't connect.Service connection failure.
    <ApplicationData>
        <TraceData>
            <DataItem>
                <TraceRecord Severity="Error" xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord">
                    <TraceIdentifier>ArcherTech.DataFeed</TraceIdentifier>
                    <Description>Specified Windows user is not authorized to make requests to the Archer API.  Please review the windows credentials and ensure they are entered correctly and are valid credentials.</Description>
                    <AppDomain>ArcherTech.JobFramework.Job.exe</AppDomain>
                    <ContextData>
                        <LogReferenceId>081315-133250-3949</LogReferenceId>
                        <DataFeedId>238</DataFeedId>
                        <DataFeedName>Application_Change_Request_to_Appl_1</DataFeedName>
                        <DataFeedHistoryId>607434</DataFeedHistoryId>
                    </ContextData>
                    <Exception>
                        <ExceptionType>System.ServiceModel.Security.MessageSecurityException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType>
                        <Message>The HTTP request was forbidden with client authentication scheme 'Negotiate'.</Message>
                        <Source>mscorlib</Source>
                        <StackTrace>
Server stack trace: 
   at System.ServiceModel.Channels.HttpChannelUtilities.ValidateAuthentication(HttpWebRequest request, HttpWebResponse response, WebException responseException, HttpChannelFactory`1 factory)
   at System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(HttpWebRequest request, HttpWebResponse response, HttpChannelFactory`1 factory, WebException responseException, ChannelBinding channelBinding)
   at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]: 
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&amp; msgData, Int32 type)
   at ArcherTech.DataFeed.ArcherAPIWebServiceGen.generalSoap.CreateDomainUserSessionFromInstance(CreateDomainUserSessionFromInstanceRequest request)
   at ArcherTech.DataFeed.ArcherAPIWebServiceGen.generalSoapClient.CreateDomainUserSessionFromInstance(String userName, String instanceName, String password, String usersDomain)
   at ArcherTech.DataFeed.Transporters.ArcherWebServiceTransporter.GetSessionToken(String url)</StackTrace>
                        <InnerException>
                            <ExceptionType>System.Net.WebException, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType>
                            <Message>The remote server returned an error: (403) Forbidden.</Message>
                            <Source>System</Source>
                            <StackTrace>   at System.Net.HttpWebRequest.GetResponse()
   at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)</StackTrace>
                        </InnerException>
                    </Exception>
                </TraceRecord>
            </DataItem>
        </TraceData>
    </ApplicationData>
</E2ETraceEvent>
Tasks
Exclude Siteminder from the website\ws directory on all servers.

Uncheck "Require SSL" from the "SSL Settings" icon in IIS on the ws directory
Make the url point to a specific server.

Change the url to http.

 

 
ResolutionOnce that is done, the datafeed should connect successfully.

Attachments

    Outcomes