SoapUI to ACC Access denied | Community
Skip to main content
Employee
March 13, 2020
Solved

SoapUI to ACC Access denied

  • March 13, 2020
  • 5 replies
  • 6862 views

I am trying to setup tests for a customer using SoapUI product as a quick test bench. I am successful in calling the session using the admin account and password to get logged in and it returns the sessionToken and securityToken.  I then try to call ExecuteQuery and with the sessionToken that I received from the prior call.  I can and error:  XTK-170019 Access denied. I saw some posts on security zones but I don't have it on this server, so I couldn't test that.  Does anyone have an idea what is the problem?  This environment is ACC fully hosted.  Here is the soap payload:

 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:xtk:queryDef">
<soapenv:Header/>
<soapenv:Body>
<urn:ExecuteQuery>
<urn:sessiontoken>took it out for security</urn:sessiontoken>
<urn:entity>
<queryDef operation="select" schema="nms:recipient">
<select>
<node expr="@email"/>
<node expr="@lastName"/>
<node expr="@firstName"/>
</select>
</queryDef>
</urn:entity>
</urn:ExecuteQuery>
</soapenv:Body>
</soapenv:Envelope>

 

Thanks!

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Craig_Thonis

Hi Larry,

In addition to the other suggestions here, check your serverConf.xml file to see if the IP being used to make the connection has been whitelisted.  This is what the security zones is used for.  Depending on your version of Campaign, the security zones package should come pre-installed but if it's not, you can make a request to Campaign Support to provide the package which will allow you to manage your whitelistings from within the UI versus having to make the changes to the config.

 

Regards,

Craig

5 replies

Darren_Bowers
New Participant
March 16, 2020
If your VPN is whitelised then you shouldn't have to whitelist you PC as your PC should have the VPN gateway IP
Craig_Thonis
Craig_ThonisAccepted solution
Employee
March 13, 2020

Hi Larry,

In addition to the other suggestions here, check your serverConf.xml file to see if the IP being used to make the connection has been whitelisted.  This is what the security zones is used for.  Depending on your version of Campaign, the security zones package should come pre-installed but if it's not, you can make a request to Campaign Support to provide the package which will allow you to manage your whitelistings from within the UI versus having to make the changes to the config.

 

Regards,

Craig

Milan_Vucetic
New Participant
March 13, 2020

Hi @lhand1 ,

 

just change sessionTokenOnly value to True in the serverConf.xml

That will work for you.

 

Regards,

Milan

lhand1Author
Employee
March 13, 2020
Do I have to whitelist my machine? I am trying to make the calls from my PC via the VPN
Darren_Bowers
New Participant
March 13, 2020

Check if the user you are logging in remotely as has read rights to the actual root Recipient folder on the server.

 

lhand1Author
Employee
March 13, 2020
The user is admin which should have all rights. Thanks for replying . I do appreciate it!