SOAP call is failing with two way SSL client side authentication

Products

• CA Identity Suite

Issue/Introduction

We need to communicate with 3rd party system and imported certs. We are receiving the test has failed to run with following error: "Failed running web service " which was caused by "Could not send Message.;HTTP response '403: Forbidden' when communicating with target system.

Environment

Release : 14.4

Resolution

As there is a conflict with the nim war file, We had to follow these steps to remove ca-nim.war and backup files that are being modified.

 

1. From iam_im.ear/META-INF/application.xml, comment out:

 

<!--module id="CA_NIM_SM">
        <web>
            <web-uri>ca-nim-sm.war</web-uri>
            <context-root>/iam/imnimsm</context-root>
        </web>
    </module-->

 

2. Inside iam_im.ear/META-INF/jboss-deployment-structure.xml

a. Comment out com.ca.iam.nim 

<!--module name="com.ca.iam.nim" slot="main" export="true"/-->

b. Remove sub-deployment ca-nim-sm.war.

 

3. Move out the iam_im.ear/ca-nim-sm.war to OUTSIDE JBoss.

4. Finally, remove nim folder from modules/com/ca/iam to OUTSIDE Jboss.

 

Remove standalone/tmp folder to avoid older compiled artifacts, restart JBoss, and test your PX call from IdentityManager.

 

The ca-nim.war maybe interfering with JAX-WS runtime implementation and is recommended to be removed from the iam_im.ear.