SoapUI to ACC Access denied | Community
Skip to main content
Adobe Employee
March 13, 2020
Solved

SoapUI to ACC Access denied

  • March 13, 2020
  • 5 replies
  • 6864 views

I am trying to setup tests for a customer using SoapUI product as a quick test bench. I am successful in calling the session using the admin account and password to get logged in and it returns the sessionToken and securityToken.  I then try to call ExecuteQuery and with the sessionToken that I received from the prior call.  I can and error:  XTK-170019 Access denied. I saw some posts on security zones but I don't have it on this server, so I couldn't test that.  Does anyone have an idea what is the problem?  This environment is ACC fully hosted.  Here is the soap payload:

 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:xtk:queryDef">
<soapenv:Header/>
<soapenv:Body>
<urn:ExecuteQuery>
<urn:sessiontoken>took it out for security</urn:sessiontoken>
<urn:entity>
<queryDef operation="select" schema="nms:recipient">
<select>
<node expr="@email"/>
<node expr="@lastName"/>
<node expr="@firstName"/>
</select>
</queryDef>
</urn:entity>
</urn:ExecuteQuery>
</soapenv:Body>
</soapenv:Envelope>

 

Thanks!

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Craig_Thonis

Hi Larry,

In addition to the other suggestions here, check your serverConf.xml file to see if the IP being used to make the connection has been whitelisted.  This is what the security zones is used for.  Depending on your version of Campaign, the security zones package should come pre-installed but if it's not, you can make a request to Campaign Support to provide the package which will allow you to manage your whitelistings from within the UI versus having to make the changes to the config.

 

Regards,

Craig

5 replies

Darren_Bowers
Level 9
March 13, 2020

Check if the user you are logging in remotely as has read rights to the actual root Recipient folder on the server.

 

lhand1Adobe EmployeeAuthor
Adobe Employee
March 13, 2020
The user is admin which should have all rights. Thanks for replying . I do appreciate it!
lhand1Adobe EmployeeAuthor
Adobe Employee
March 13, 2020
Do I have to whitelist my machine? I am trying to make the calls from my PC via the VPN
Milan_Vucetic
Level 9
March 13, 2020

Hi @lhand1 ,

 

just change sessionTokenOnly value to True in the serverConf.xml

That will work for you.

 

Regards,

Milan

Craig_Thonis
Adobe Employee
Craig_ThonisAdobe EmployeeAccepted solution
Adobe Employee
March 13, 2020

Hi Larry,

In addition to the other suggestions here, check your serverConf.xml file to see if the IP being used to make the connection has been whitelisted.  This is what the security zones is used for.  Depending on your version of Campaign, the security zones package should come pre-installed but if it's not, you can make a request to Campaign Support to provide the package which will allow you to manage your whitelistings from within the UI versus having to make the changes to the config.

 

Regards,

Craig

Darren_Bowers
Level 9
March 16, 2020
If your VPN is whitelised then you shouldn't have to whitelist you PC as your PC should have the VPN gateway IP