mdn authentication failure
AdamCox,
if the remote machine delivers an MDN with "processed/error: authentication-failed" there is one of the following problems:
*The AS2 id (either sender or receiver) is not defined on the remote machine
*Signature verification problem
---
RFC 4130 defines this in this way:
For internet EDI use, the following "error" AS2-disposition-modifier
values are defined:
o "Error: decryption-failed" - the receiver could not
decrypt the message
contents.
o "Error: authentication-failed" - the receiver could not
authenticate the sender.
o "Error: integrity-check-failed" - the receiver could not
verify content integrity.
o "Error: unexpected-processing-error" - a catch-all for any
additional processing
errors.
----
Anyway there should be a log on the remote machine what happened there, what product is it?
Could you please update to the latest version, there are fixed compatibility issues with every new version. Perhaps this issue will be gone then?
Regards
Heller
still the same after upgrading. I'm still waiting on their response with errors on their system.
I went and opened the mdn that I am assume is failing:
- content-length = 2185
- as2-to = ImprovementDirect.com
- message-id = <13356371.1215706219078.JavaMail.TcIsUser@PITTTNP02>
- as2-version = 1.1
- as2-from = TrueCommerceNG.Net
- set-cookie = ssnid=; path=/;
- content-type = multipart/signed; micalg=sha1;
- protocol="application/pkcs7-signature";
- boundary="----=_Part_69908_25471577.1215706219078"
- connection = Close
so, the "MDN state is [ processed/error: authentication-failed]"
in the messages\_rawincoming
there is a decrypted file:
- Reporting-UA: webMethods Integration Server
- Original-Recipient: rfc822; TrueCommerceNG.Net
- Final-Recipient: rfc822; TrueCommerceNG.Net
- Original-Message-ID:
- Disposition: automatic-action/MDN-sent-automatically;
- processed/error: authentication-failed
AdamCox,
I am sorry but without any process log information from the receiver side I have no idea what happens there.
As far as I know there are several versions of webMethods server. Perhaps you could find someone who already integrated to this webMethods interface if you could find out the version and post a request here.
The HTTP 200 is valid in this case. It is no processing success sign but only a sign that the message exchange works fine (transport level). And it works fine, you sent your message and received your MDN.
There is only a small point but it could be without any meaning: In the MDN text there is no message id displayed. Is there perhaps a problem on the webMethods side to parse the AS2 message id from m-e-c as2? Or is this normal that this field is empty in the human readable comment for this system?
MDN for -
Message ID:
From: ImprovementDirect.com
To: TrueCommerceNG.Net
Regards
Heller
Heller -
I think that you're going to kill me ;-)
there has been some major progress.. as in I was able to send!
Some things just get taken for granted when I don't do them often.
everyone remember that you must generate your self signed keypairs as RSA!! portecle defaults to DSA.
This is the only thing that I can think of that I did differently.
© 1999-2008 mendelson-e-commerce GmbH. All right reserved.
I recently started receiving this error in my logs:
"MDN state is [ processed/error: authentication-failed]"
I'm not really sure what "processed/error" means, but the vendor I am transmitting to is saying that they are not seeing the document in their system. Which I find odd because my log returns an [http 200].
From looking over the forum, I found that there may be a problem with my .cer that I am using. low and behold it had expired 4 days ago.. ugh. I used Portecle. to create a new signed key pair. I rightclicked the key pair and exported it. then gave the new .cer file to TrueCommerce.
I then went into the partners, and updated my configuration in the security tab to refernece the new key.
True commerce has confirmed that they have the new cert in their system.
Can anyone point out where I went wrong as to why my MDN's are failing? I'm on b21 and the log is below (my changes has not effected the result of the log[same before and same after])
------------------------------------------------
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: Incoming transmission is
a MDN.
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: MDN is the answer to AS2
message "mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net".
[7/9/08 9:02:14 PM]
mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net: Outgoing message
signed with the algorithm SHA-1,using keystore alias "improvementdirect.com".
[7/9/08 9:02:14 PM]
mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net: Outgoing message
encrypted with the algorithm 3DES, using keystore alias "TrueCommerce".
[7/9/08 9:02:14 PM]
mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net: The file "Kenroy-
LightingDirect-1212003-0B219962.850" has been deleted and enqueued into the
processing message queue of the server.
[7/9/08 9:02:14 PM]
mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net: Sending message
to http://network.truecommerce.net:5755/invoke/wm.EDIINT/receive, sync MDN requested.
[7/9/08 9:02:18 PM]
mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net: Message sent
successfully (HTTP 200).
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: Incoming transmission is
a MDN.
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: MDN is the answer to AS2
message "mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net".
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: MDN state is [ processed/
error: authentication-failed].
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02:
Details of MDN received from remote AS2 server:
--------------
MDN for -
Message ID:
From: ImprovementDirect.com
To: TrueCommerceNG.Net
Received on: 2008-07-10 at 24:03:12 (EDT)
Status: processed/error: authentication-failed
Comment: This is not a guarantee that the message has been completely processed
or understood by the receiving translator
--------------
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: MDN is not encrypted.
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: MDN is signed.
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: Using certificate "TrueCommerce"
to verify signature.
[7/9/08 9:02:18 PM]
1791995.1215662592093.JavaMail.TcIsUser@PITTTNP02: Digital signature verified
successful.
[7/9/08 9:02:18 PM]
mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net: Transaction
state written to D:\mec\as2_p1\messages\TrueCommerce\sent\Kenroy-LightingDirect-
1212003-0B219962.850_mec_as2-1215662534622-6@ImprovementDirect.com_TrueCommerceNG.Net.sent.state.