Layer7 API Management

  • Private Community

  • 1.  Getting Policy Falsified error

    Posted Nov 13, 2015 06:35 AM

    Hi,

    I have installed and configured gateway 8.3 as per the attached document (API Gateway - Configuration Guide - v8.3) and trying to do the labs (API Gateway - Foundations - Lab Workbook v8.3 2015).

    1st thing I did was

    LAB 1A: PUBLISHING A SERVICE

     

    Now when trying to do

    LAB 1B: SETUP THE SOAPUI CLIENT APP REQUEST

     

    I'm getting the following error in SoapUI (using URL:  http://gateway_url:8080/lab1 ):

    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">

       <soapenv:Body>

          <soapenv:Fault>

             <faultcode>soapenv:Server</faultcode>

             <faultstring>Policy Falsified</faultstring>

             <faultactor>http://voonair.ca.com:8080/reservation</faultactor>

             <detail>

                <l7:policyResult status="Service Not Found.  The request may have been sent to an invalid URL, or intended for an unsupported operation." xmlns:l7="http://www.layer7tech.com/ws/policy/fault"/>

             </detail>

          </soapenv:Fault>

       </soapenv:Body>

    </soapenv:Envelope>

     

    Can someone please suggest what I may be doing wrong here.



  • 2.  Re: Getting Policy Falsified error

    Posted Nov 13, 2015 05:02 PM

    Your "Route via HTTP..." assertion is failing because it cannot get to http://voonair.ca.com:8080/reservation. This is the 'Voonair Service" on Gateway 2(see the images on page 7 of the Lab Workbook). That service may not be available, or you may have a name resolution issue.

     

    If I recall correctly, this service is hosted on another VM in your lab environment. Are all of your lab machines running? Are you able to ping voonair,ca,com from the gateway? Assuming the machine that you have SoapUI on can resolve voonair,ca,com(ping test to check), you should also be able to bypass the gateway and add the http://voonair.ca.com:8080/reservation URL as an endpoint in SoapUI. This will tell you if the service is even available.



  • 3.  Re: Getting Policy Falsified error

    Posted Nov 17, 2015 02:42 AM

    Hi Bill,

    Thanks a lot for your response.

    I have 2 machine (Say G and P)

    In G I've uploaded the gateway image and have also installed the backend services as per API Gateway - Configuration Guide - v8.3.pdf

    This backend service must have installed gateway 2 on same G machine.

     

    On P machine (which is my desktop) I've installed Policy manager and SoapUI.

    I've made host file entry on both G and P as attached.

     

    Now, as per your suggestion I've checked pinging voonair.ca.com.

    • From G (Gateway) I'm able to ping voonair.ca.com
    • From P I'm not able to ping as ping is disabled.

     

    Moreover if i'm giving gateway1.l7tech.com:8080/lab1 in SoapUI (which is my gateway 1 url) it's giving the error

    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">

       <soapenv:Body>

          <soapenv:Fault>

             <faultcode>soapenv:Server</faultcode>

             <faultstring>Policy Falsified</faultstring>

             <faultactor>http://voonair.ca.com:8080/reservation</faultactor>

             <detail>

                <l7:policyResult status="Service Not Found.  The request may have been sent to an invalid URL, or intended for an unsupported operation." xmlns:l7="http://www.layer7tech.com/ws/policy/fault"/>

             </detail>

          </soapenv:Fault>

       </soapenv:Body>

    </soapenv:Envelope>

     

    where I can see it's getting redirected to voonair.ca.com:8080/reservation.

     

    1. How can I check if service is voonair.ca.com is enabled or not without pinging from system P.
    2. Also can I check the service from gateway itself. If yes how..??

     

    If I'm givng voonair.ca.com:8080/reservation directly into SoapUI I'm getting the following error:

    <HTML><HEAD>

     

     

    <TITLE>Access Denied</TITLE>

     

     

    </HEAD>

     

     

    <BODY>

     

     

    <FONT face="Helvetica">

     

     

    <big><strong></strong></big><BR>

     

     

    </FONT>

     

     

    <blockquote>

     

     

    <TABLE border=0 cellPadding=1 width="80%">

     

     

    <TR><TD>

     

     

    <FONT face="Helvetica">

     

     

    <big>Access Denied (authentication_failed)</big>

     

     

    <BR>

     

     

    <BR>

     

     

    </FONT>

     

     

    </TD></TR>

     

     

    <TR><TD>

     

     

    <FONT face="Helvetica">

     

     

    Your credentials could not be authenticated: "Credentials are missing.". You will not be permitted access until your credentials can be verified.

     

     

    </FONT>

     

     

    </TD></TR>

     

     

    <TR><TD>

     

     

    <FONT face="Helvetica">

     

     

    This is typically caused by an incorrect username and/or password, but could also be caused by network problems.

     

     

    </FONT>

     

     

    </TD></TR>

     

     

    <TR><TD>

     

     

    <FONT face="Helvetica" SIZE=2>

     

     

    <BR>

     

     

    For assistance, contact your network support team.

     

     

    </FONT>

     

     

    </TD></TR>

     

     

    </TABLE>

     

     

    </blockquote>

     

     

    </FONT>

     

     

    </BODY></HTML>

     

    Please suggest.

    TIA



  • 4.  Re: Getting Policy Falsified error

    Posted Nov 19, 2015 04:32 AM

    Hi,

    Is any more informational required?

    Please suggest. I'm really stuck here.

    Thanks



  • 5.  Re: Getting Policy Falsified error

    Broadcom Employee
    Posted Nov 19, 2015 10:31 AM

    Hi

     

    The policy error in this email shows you having a service not found error…Highlighted in red bold below.

     

     

     

     

    Can you highlight your soap service that you created here in the policy and services area and right click on it?  Click service properties….Copy the policy properties into this email.

     

     

     

     

     

     

    Please check this and post it in here.

     

     

    Thanks,

     

    Derek Orr

     

    CA Technologies |885 West Georgia Street Ste 500 | Vancouver, BC V6C 3G1

    Office: 1-778-328-5285 | Mobile: +1 778 980 0029 | Derek.Orr@ca.com

     

    <mailto:>[CA]

     

    <http://www.ca.com/us/default.aspx>[Twitter]<http://twitter.com/CAInc>[LinkedIn]<http://www.linkedin.com/company/1372?goback=.cps_1244823420724_1>[Facebook]<https://www.facebook.com/CATechnologies>[YouTube]<http://www.youtube.com/user/catechnologies>[Google]<https://plus.google.com/CATechnologies>[Slideshare]<http://www.slideshare.net/cainc>



  • 6.  Re: Getting Policy Falsified error

    Posted Nov 20, 2015 01:57 AM

    Hi Derek,

    Thanks for your reply.

    Please find the attached screenshots as requested.

    Do you also want the WSDL file with which I'm working?

     

     

     

    Regards

    Nikhil Trigunayat

    +91-971181139



  • 7.  Re: Getting Policy Falsified error

    Posted Nov 20, 2015 03:42 AM

    Hello Nikhil,

    You could check by going onto putty and as root (option 3) on the gateway and try a ping at voonair.ca.com to see if that will return an ip address or a 'unknown host' error, if it is the latter, then you will have to either use the ip address of the machine that has the wsdl instead of the hostname (in the routing assertion) or put an entry in the /etc/host of the gateway to point voonair.ca.com to the right ip address.

     

    I hope this helps

     

    Maurizio



  • 8.  Re: Getting Policy Falsified error

    Posted Nov 20, 2015 05:10 AM

    Hi Maurizio,

    I've already done the same as replied to Bill.

    As voonair.ca.com is installed in the same gateway, it's returning the same IP address as of gateway.

    also I've made the hostfile entries in both systems.

    Please check my first two replies for attached files.

     

     

    Tahnsk & Regards

    Nikhil Trigunayat



  • 9.  Re: Getting Policy Falsified error

    Broadcom Employee
    Posted Nov 20, 2015 10:31 AM

    Hi Nikhil

     

    I’ve tested out the wsdl that you provided and have some other questions.

     

    I’d like to move away from the communities thread for the time being until we’ve figured out exactly what you’re doing.

     

    Please email me directly.

     

    Thanks,

     

    Derek Orr

     

    CA Technologies |885 West Georgia Street Ste 500 | Vancouver, BC V6C 3G1

    Office: 1-778-328-5285 | Mobile: +1 778 980 0029 | Derek.Orr@ca.com

     

    <mailto:>[CA]

     

    <http://www.ca.com/us/default.aspx>[Twitter]<http://twitter.com/CAInc>[LinkedIn]<http://www.linkedin.com/company/1372?goback=.cps_1244823420724_1>[Facebook]<https://www.facebook.com/CATechnologies>[YouTube]<http://www.youtube.com/user/catechnologies>[Google]<https://plus.google.com/CATechnologies>[Slideshare]<http://www.slideshare.net/cainc>



  • 10.  Re: Getting Policy Falsified error

    Posted Nov 23, 2015 12:49 AM

    Sure Derek,

    Thanks..We'll take it offline.

    I'll email you and we can work it out.

     

    Thanks & Regards

    Nikhil Trigunayat