Topic Options
#56271 - 09/03/18 06:08 AM Soap API - random "Access Denied" messages
Dougal2345 Offline
OL Newbie

Registered: 07/15/10
Posts: 22
Hi,

We've been using the 'Input SOAP' system on PlanetPress Watch, calling "SubmitJob" for a number of years now.

Recently we've been (very occasionally) getting:

'SubmitJob: Access Denied for user "[our user]"'

...messages.

As far as I can see we are always submitting the correct user name and password with each request.

The only change recently is that we now have two systems both calling the SubmitJob method (although to run different Watch processes, using different SubmitSOAPActionNames in the TSubmitJobInfStruc), possibly simultaneously on occasion. Could this error be caused by Watch not liking that?

I can't find anything about these denied requests in the 'http[].log' or 'ppw[].log' files - they don't seem to register in either; but if someone could point me to where I might get some more detail, please do...

Thanks :-)

Top
#56281 - 09/07/18 07:40 AM Re: Soap API - random "Access Denied" messages [Re: Dougal2345]
Dougal2345 Offline
OL Newbie

Registered: 07/15/10
Posts: 22
Another one we occasionally get, when both our apps are calling the PP web service, is:

'SubmitJob: Failed: EFOpenError - Cannot open file "C:\ProgramData\Objectif Lune\PlanetPress Suite 7\SOAP.Allow"'

(which I guess tells us that Planet Press is coded in Delphi smile - but it would be nice to know how to avoid it happening)





Edited by Dougal2345 (09/07/18 07:48 AM)

Top
#56291 - 09/10/18 04:18 PM Re: Soap API - random "Access Denied" messages [Re: Dougal2345]
Benoit Potvin Offline
OL Expert

Registered: 01/02/08
Posts: 490
Loc: Montréal, Canada
Hi,

Given that
- you are using a workflow process with a SOAP input task
- recently, you have introduced a 2nd system calling the SubmitJob method
- recently you have received "access denied" messages from the SOAP server

then I suggest you may want to look into the workflow's Access Manager window to make sure both systems have proper permission to access the processes. The access manager has a "SOAP" tab where you can set permissions for SOAP clients to access a given SOAP input.

http://help.objectiflune.com/en/planetpr...ager.html#toc-5


Hope this helps!


Edited by Benoit Potvin (09/10/18 04:21 PM)
_________________________
Knowledge is capital
http://twitter.com/benoitpotvin

Top
#56323 - 09/21/18 08:11 AM Re: Soap API - random "Access Denied" messages [Re: Benoit Potvin]
Dougal2345 Offline
OL Newbie

Registered: 07/15/10
Posts: 22
Hi, thanks for this - it's not quite that though, because 99% of the time everything works - just occasionally, we get an 'Access Denied' (or, more rarely, the 'EFOpenError'), with nothing unusual about the requests that cause them - indeed, re-issue the request and it works fine.

So that feels more like a bug in the Workflow than a configuration error?

Are there any logs I can look at that will help? These messages are being generated by PlanetPress, so the request is getting as far as there, but I can't see any trace in the ppw***.log, http***.log etc...

We're running Watch 7.6.2.9999 on a Windows Server 2012 R2 Standard server by the way.


Edited by Dougal2345 (09/21/18 08:13 AM)

Top
#56329 - 09/24/18 02:37 PM Re: Soap API - random "Access Denied" messages [Re: Dougal2345]
Benoit Potvin Offline
OL Expert

Registered: 01/02/08
Posts: 490
Loc: Montréal, Canada
Hi Dougal2345,

Indeed it appears to be a software issue: Using the details you provided, I was able to retrieve a VERY similar case which happened a few years ago with another customer using the SOAP server.

The solution required an update to HTTPService.exe. The customer also had to delete hundreds of temporary folders from the \PlanetPress Watch\soap subfolder.

So here are a few things you may want to try:

- Look in the ....\PlanetPress Watch\soap subfolder and delete all subfolders in there. A temporary subfolder is created when a SOAP request is received by the workflow, but it should be automatically deleted after the workflow's SOAP process is done executing.

- Look into upgrading from PlanetPress Suite to PlanetPress Connect. see e.g. http://help.objectiflune.com/EN/planetpr...nd_Updating.htm

- You can of course open a tech support ticket.

Hope this helps!



Edited by Benoit Potvin (09/24/18 02:38 PM)
_________________________
Knowledge is capital
http://twitter.com/benoitpotvin

Top
#56346 - 10/01/18 07:43 AM Re: Soap API - random "Access Denied" messages [Re: Benoit Potvin]
Dougal2345 Offline
OL Newbie

Registered: 07/15/10
Posts: 22
Originally Posted By: Benoit Potvin
The solution required an update to HTTPService.exe.

On our server httpservice.exe shows as version 7.6.1.57, updated 20/10/2015.
Is this a problematic one?

Originally Posted By: Benoit Potvin
The customer also had to delete hundreds of temporary folders from the \PlanetPress Watch\soap subfolder.
- Look in the ....\PlanetPress Watch\soap subfolder and delete all subfolders in there. A temporary subfolder is created when a SOAP request is received by the workflow, but it should be automatically deleted after the workflow's SOAP process is done executing.

All that was in there were two empty subfolders, with the names of our two "Input SOAP" methods. I've deleted them, but they just come back when the methods are next called.

Originally Posted By: Benoit Potvin
- Look into upgrading from PlanetPress Suite to PlanetPress Connect. see e.g. http://help.objectiflune.com/EN/planetpr...nd_Updating.htm
- You can of course open a tech support ticket.


Sadly I think we're out of support at the moment, so those two are not an option for us...

Top