I am trying to use FileNet Java APIs to connect to FileNet CE & PE. I can connect to CE using CEWS transport, But when try using EJB Transport I am getting this error:
FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED: Access to Content Engine was not allowed because the request was made anonymously instead of by an authenticated user.
I tried few things IBM recommended here - http://pic.dhe.ibm.com/infocenter/p8docs/v5r0m0/index.jsp?topic=%2Fcom.ibm.p8.ce.msgs.doc%2Ffnrcs0001e.htm
Following are my Eclipse settings and configurations:
1. Eclipse JAVA_HOME set to IBM JDK
2. VM arguments as recommended by API documetation
3. Changes to both local and sever - sas.client.props file.
Despite these changes I still get the same error
This topic has been locked.
Pinned topic Java API over EJB transport - FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED
Answered question This question has been answered.
Unanswered question This question has not been answered yet.
Re: Java API over EJB transport - FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED2013-03-13T22:41:32ZThis is the accepted answer. This is the accepted answer.I am actually trying to run the sample code of IBM for FileNet 5.1
public class CEConnection
private Connection con;
private Domain dom;
private String domainName;
private ObjectStoreSet ost;
private Vector osnames;
private boolean isConnected;
private UserContext uc;
con = null;
uc = UserContext.get();
dom = null;
domainName = null;
ost = null;
osnames = new Vector();
isConnected = false;
* Establishes connection with Content Engine using
* supplied username, password, JAAS stanza and CE Uri.
public void establishConnection(String userName, String password, String stanza, String uri)
con = Factory.Connection.getConnection(uri);
Subject sub = UserContext.createSubject(con,userName,password,stanza);
dom = fetchDomain();
domainName = dom.get_Name();
ost = getOSSet();
isConnected = true;
* Returns Domain object.
public Domain fetchDomain()
// dom = Factory.Domain.getInstance(con, null);
dom = Factory.Domain.fetchInstance(con, null, null);
* Returns ObjectStoreSet from Domain
public ObjectStoreSet getOSSet()
ost = dom.get_ObjectStores();
* Returns vector containing ObjectStore
* names from object stores available in
public Vector getOSNames()
Iterator it = ost.iterator();
ObjectStore os = (ObjectStore) it.next();
* Checks whether connection has established
* with the Content Engine or not.
public boolean isConnected()
* Returns ObjectStore object for supplied
* object store name.
public ObjectStore fetchOS(String name)
ObjectStore os = Factory.ObjectStore.fetchInstance(dom, name, null);
* Returns the domain name.
public String getDomainName()
public static void main(String args)
CEConnection ceObj=new CEConnection();
// ceObj.establishConnection("pingu", "filenet", "FileNetP8WSI", "http://myservername:9080/wsi/FNCEWS40MTOM/");
ceObj.establishConnection("pingu", "filenet", "FileNetP8", "iiop://myservername:2809/FileNet/Engine");
Re: Java API over EJB transport - FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED2013-03-13T22:54:08ZThis is the accepted answer. This is the accepted answer.
- SystemAdmin 110000D4XK
if your jass is correct (can't tell since i don't know the contents of your jaas files) i'd bet you don't have the url patterns for your servlet endpoints restricted. WAS doesn't include your jaas idenity for unsecure resources by default.
You should secure your urls to a role and make sure your user is added to that role.
it's much easier to include identity for even unsecured URLs, this is a checkbox options in the security config of WAS.
Re: Java API over EJB transport - FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED2013-03-13T23:02:21ZThis is the accepted answer. This is the accepted answer.
- SystemAdmin 110000D4XK
Notice the "file:" prefix. Definitely needed for the second line, maybe needed (and doesn't hurt) for the first line.
Re: Java API over EJB transport - FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED2013-03-13T23:03:49ZThis is the accepted answer. This is the accepted answer.
Re: Java API over EJB transport - FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED2013-03-14T15:22:12ZThis is the accepted answer. This is the accepted answer.
Re: Java API over EJB transport - FNRCS0001E: SECURITY_ANONYMOUS_DISALLOWED2013-03-14T15:24:59ZThis is the accepted answer. This is the accepted answer.