Forum Post: RE: CLIENT-PRINCIPAL:VALIDATE-SEAL failed because keys do not match error when...

  • Thread starter Thread starter knavneet
  • Start date Start date
Status
Not open for further replies.
K

knavneet

Guest
Looking at your code and .xml file, I feel the problem is that while generating the .cp file you provide seal-key (using –password option in genspacp.bat) that is different from the Domain Access code of the domain in the database. You have a screen shot that shows HelpdeskMobile has a Domain Access Key which on encoding appears as oech1::19011c0xxxx , whereas the .cp file is sealed with and validated using oech1::18161c1xxxx. My suggestion would be to (a) generate .cp using a separate domain that is not defined in the database or (b) use the same key as the Domain Access code of that domain Just to add some more information, ValidateClient() is optional. If you implement and call it in realm class methods, ValidateClient() does an additional check to see if the incoming request to the OERealm methods has a valid Client-Principal (C-P)sealed by a key that you choose. In your case it is “oech1::18161c171315322023”. You provide this value as –password in genspacp.bat. So you can have this C-P that REST Adapter sends while calling OERealm belong to a domain different from the domain to which requests for Mobile Service classes belong. Your appSecurity-form-oerealm.xml indicates that you want your Mobile Service request to belong to HelpdeskMobile. For ValidateClient() you may chose a different domain. Also, it appears that you use same appserver i.e. restbroker for running both OERealm and REST classes. You may want to run OERealm on a different appserver so that you can keep startup, activate procs etc separate. From: Jean Richert [ mailto:bounce-jri@community.progress.com ] Sent: Saturday, April 11, 2015 2:02 AM To: TU.Mobile@community.progress.com Subject: RE: [Technical Users - Mobile] CLIENT-PRINCIPAL:VALIDATE-SEAL failed because keys do not match error when using SPA with a domain RE: CLIENT-PRINCIPAL:VALIDATE-SEAL failed because keys do not match error when using SPA with a domain Reply by Jean Richert riche as the one being in charge of our Community, I just wanted to let you know that I'm getting error messages when trying to move this thread in the correct OE Forum. I'm investigating what could be the reasons but it may take me a little while. May I suggest you re-post your issue in the following forum community.progress.com/.../19.aspx Stop receiving emails on this subject. Flag this post as spam/abuse.

Continue reading...
 
Status
Not open for further replies.
Back
Top