Skip to main content
Adobe Employee
Mar 13, 2020 1:22 AM UTC
Solved

SoapUI to ACC Access denied

I am trying to setup tests for a customer using SoapUI product as a quick test bench. I am successful in calling the session using the admin account and password to get logged in and it returns the sessionToken and securityToken.  I then try to call ExecuteQuery and with the sessionToken that I received from the prior call.  I can and error:  XTK-170019 Access denied. I saw some posts on security zones but I don't have it on this server, so I couldn't test that.  Does anyone have an idea what is the problem?  This environment is ACC fully hosted.  Here is the soap payload:

 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:xtk:queryDef">
<soapenv:Header/>
<soapenv:Body>
<urn:ExecuteQuery>
<urn:sessiontoken>took it out for security</urn:sessiontoken>
<urn:entity>
<queryDef operation="select" schema="nms:recipient">
<select>
<node expr="@email"/>
<node expr="@lastName"/>
<node expr="@firstName"/>
</select>
</queryDef>
</urn:entity>
</urn:ExecuteQuery>
</soapenv:Body>
</soapenv:Envelope>

 

Thanks!

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Craig_Thonis
Craig_ThonisAccepted solution
Adobe Employee
Mar 13, 2020 3:26 PM UTC

Hi Larry,

In addition to the other suggestions here, check your serverConf.xml file to see if the IP being used to make the connection has been whitelisted.  This is what the security zones is used for.  Depending on your version of Campaign, the security zones package should come pre-installed but if it's not, you can make a request to Campaign Support to provide the package which will allow you to manage your whitelistings from within the UI versus having to make the changes to the config.

 

Regards,

Craig

6 replies

Darren_Bowers
Level 9
Mar 13, 2020 4:03 AM UTC

Check if the user you are logging in remotely as has read rights to the actual root Recipient folder on the server.

 

Translate
lhand1Adobe EmployeeAuthor
Adobe Employee
Mar 13, 2020 6:08 AM UTC
The user is admin which should have all rights. Thanks for replying . I do appreciate it!
Translate
lhand1Adobe EmployeeAuthor
Adobe Employee
Mar 13, 2020 6:25 AM UTC
Do I have to whitelist my machine? I am trying to make the calls from my PC via the VPN
Translate
Milan_Vucetic
Level 9
Mar 13, 2020 8:56 AM UTC

Hi @lhand1 ,

 

just change sessionTokenOnly value to True in the serverConf.xml

That will work for you.

 

Regards,

Milan

Translate
Craig_Thonis
Adobe Employee
Craig_ThonisAdobe EmployeeAccepted solution
Adobe Employee
Mar 13, 2020 3:26 PM UTC

Hi Larry,

In addition to the other suggestions here, check your serverConf.xml file to see if the IP being used to make the connection has been whitelisted.  This is what the security zones is used for.  Depending on your version of Campaign, the security zones package should come pre-installed but if it's not, you can make a request to Campaign Support to provide the package which will allow you to manage your whitelistings from within the UI versus having to make the changes to the config.

 

Regards,

Craig

Translate
Darren_Bowers
Level 9
Mar 16, 2020 3:28 AM UTC
If your VPN is whitelised then you shouldn't have to whitelist you PC as your PC should have the VPN gateway IP
Translate