ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Socket Error

Post new topic  Reply to topic
 Socket Error « View previous topic :: View next topic » 
Author Message
phaniIIB
PostPosted: Wed Aug 19, 2015 9:54 am    Post subject: Socket Error Reply with quote

Acolyte

Joined: 28 Jul 2015
Posts: 51

The below error occurs when I send a request from SOAP Request to HTTP Input node(not HTTPS)

'An error occurred whilst performing a socket operation: getsockopt'

Can anyone propose a resolution. I can provide more details in further posts.
Back to top
View user's profile Send private message
Vitor
PostPosted: Wed Aug 19, 2015 9:59 am    Post subject: Re: Socket Error Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

phaniIIB wrote:
Can anyone propose a resolution.


Fix whatever's causing the socket problem.

phaniIIB wrote:
I can provide more details in further posts.


Why not provide them in the first place? Thought it would be fun to make us guess? Or assumed we'd just know the only possible cause and resolution of a massively generic error description.

When you post more details of your configuration as well as the rest of the Exception Tree, be sure to include what you have determined from your research and what you have already attempted in terms of problem resolution.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
phaniIIB
PostPosted: Wed Aug 19, 2015 11:02 am    Post subject: Reply with quote

Acolyte

Joined: 28 Jul 2015
Posts: 51

I apologize to not have included much info.

Please understand I am a newbie.

Motto: To add WSSecurity header in the SOAP Request node

My Message Flows:

1. HTTP web service(HTTP Input(no HTTPS), Trace for

collecting the request, HTTP Reply at catch terminal

of input)
2. Client (SOAP Request using the existing WSDL in

the sub flow) pointing to above HTTP web service(not

HTTPS)

My Configuration:

I am running a multi-instance Integration node with 2 securities configured,

- SSL security : To support SSL 3 configurations are made at broker, listener and connector levels

1. enableSSLConnector
2. allowSSLv3
3. sslProtocol=SSL

- WS Security : Policy sets, bindings, Security profile, Configurable service have been configured for the broker

PF the message tree in the Code block.

what I did for resolution is
1. Checked different SSL options in SOAPRequest node (SSL,SSLv3,TLS etc.,). It dint work out.
2. Checked if policy sets, Bindings are perfectly set. Answer is yes.


Code:

        (0x01000000:Name     ):RecoverableException = (
          (0x03000000:NameValue):File            = '/build/slot1/S000_P/src/WebServices/WSLibrary/ImbWSRequest.cpp' (CHARACTER)
          (0x03000000:NameValue):Line            = 470 (INTEGER)
          (0x03000000:NameValue):Function        = 'ImbWSRequest::makeWSRequest' (CHARACTER)
          (0x03000000:NameValue):Type            = '' (CHARACTER)
          (0x03000000:NameValue):Name            = '' (CHARACTER)
          (0x03000000:NameValue):Label           = '' (CHARACTER)
          (0x03000000:NameValue):Catalog         = 'BIPmsgs' (CHARACTER)
          (0x03000000:NameValue):Severity        = 3 (INTEGER)
          (0x03000000:NameValue):Number          = 3152 (INTEGER)
          (0x03000000:NameValue):Text            = 'A Web Service request has detected a SOCKET error whilst invoking a web service located at host &1, on port &2, on path &3.' (CHARACTER)
          (0x01000000:Name     ):Insert          = (

            (0x03000000:NameValue):Type = 5 (INTEGER)
            (0x03000000:NameValue):Text = 'localhost' (CHARACTER)
          )
          (0x01000000:Name     ):Insert          = (
            (0x03000000:NameValue):Type = 2 (INTEGER)
            (0x03000000:NameValue):Text = '7800' (CHARACTER)
          )
          (0x01000000:Name     ):Insert          = (
            (0x03000000:NameValue):Type = 5 (INTEGER)
            (0x03000000:NameValue):Text = '/otsWebWS/services/OTSWebSvcs' (CHARACTER)
          )
          (0x01000000:Name     ):SocketException = (
            (0x03000000:NameValue):File     = '/build/slot1/S000_P/src/CommonServices/ImbBasicSocket.cpp' (CHARACTER)
            (0x03000000:NameValue):Line     = 706 (INTEGER)
            (0x03000000:NameValue):Function = 'ImbBasicSocket::connectTimeout' (CHARACTER)
            (0x03000000:NameValue):Type     = '' (CHARACTER)
            (0x03000000:NameValue):Name     = '' (CHARACTER)
            (0x03000000:NameValue):Label    = '' (CHARACTER)
            (0x03000000:NameValue):Catalog  = 'BIPmsgs' (CHARACTER)
            (0x03000000:NameValue):Severity = 3 (INTEGER)
            (0x03000000:NameValue):Number   = 3150 (INTEGER)
            (0x03000000:NameValue):Text     = 'An error occurred whilst performing a socket operation: getsockopt' (CHARACTER)
            (0x01000000:Name     ):Insert   = (
              (0x03000000:NameValue):Type = 5 (INTEGER)
              (0x03000000:NameValue):Text = '::connect::poll()' (CHARACTER)
            )
            (0x01000000:Name     ):Insert   = (
              (0x03000000:NameValue):Type = 2 (INTEGER)
              (0x03000000:NameValue):Text = '111' (CHARACTER)
            )
            (0x01000000:Name     ):Insert   = (
              (0x03000000:NameValue):Type = 5 (INTEGER)
              (0x03000000:NameValue):Text = 'Connection refused' (CHARACTER)
            )
          )
        )
      )
    )
  )
)
[/quote]
Back to top
View user's profile Send private message
Vitor
PostPosted: Wed Aug 19, 2015 11:08 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

phaniIIB wrote:
(0x01000000:Name ):Insert = (
(0x03000000:NameValue):Type = 5 (INTEGER)
(0x03000000:NameValue):Text = 'Connection refused' (CHARACTER)


Whatever you're trying to reach won't permit the connection. This could be a firewall on the target server, or an intermediate network appliance, or something.

Before you say "but I can telnet to the target server" or "I can open the web service WSDL on my local browser", firewall rules are often port specific (so you might be able to connect to the telnet port but not the web service one) or IP specific (so you can connect from your local machine but not from the IIB server).

Obviously not so relevant when the destination IP is "localhost" as shown above, but attempting some value add here in return for the more detailed problem description.
_________________
Honesty is the best policy.
Insanity is the best defence.


Last edited by Vitor on Wed Aug 19, 2015 11:12 am; edited 1 time in total
Back to top
View user's profile Send private message
phaniIIB
PostPosted: Wed Aug 19, 2015 11:12 am    Post subject: Reply with quote

Acolyte

Joined: 28 Jul 2015
Posts: 51

The target service is running in the same integration server and hence I believe there will not be any firewall that blocks the client.

To be clear,

The dummy http service is running in the same server as that of the SOAP Request node which is trying to connect.
Back to top
View user's profile Send private message
Vitor
PostPosted: Wed Aug 19, 2015 11:18 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

phaniIIB wrote:
The target service is running in the same integration server and hence I believe there will not be any firewall that blocks the client.


So there's no firewall protection on your machine at all? No basic firewall (such as Windows Defender) or other protective software? You must get Christmas cards from botnet operators.

phaniIIB wrote:
To be clear,

The dummy http service is running in the same server as that of the SOAP Request node which is trying to connect.


I got that from the use of "localhost" as a destination IP address. So much for trying to be nice and adding value.

"Connection refused" is a network level error. Something in the IP stack is blocking access. It's not an IIB error, or something that can be fixed with IIB configuration.

Unless the IIB configuration is for the web service flow not to be using port 7800, which the exception shows as the target. Trying to call a web service using the wrong port might do it, like making an HTTP call (and you specifically say it's not an HTTPS service) to a service that's using HTTPS (because all that SSL configuration you carefully list checking must be doing something. Especially that "enableSSLConnector" parameter.....)
_________________
Honesty is the best policy.
Insanity is the best defence.


Last edited by Vitor on Wed Aug 19, 2015 11:18 am; edited 1 time in total
Back to top
View user's profile Send private message
mqjeff
PostPosted: Wed Aug 19, 2015 11:18 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

I guess I'm not sure off the top of my head what the SOAPRequest node will do when it tries to make an SSL connection to a non-SSL service.

I'd also take a user trace of the HTTP flow and see if there's any hints.

As well as maybe use the TCP/IP Monitor in Toolkit to act as a proxy between the request and the service.
Back to top
View user's profile Send private message
Vitor
PostPosted: Wed Aug 19, 2015 11:24 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

mqjeff wrote:
I guess I'm not sure off the top of my head what the SOAPRequest node will do when it tries to make an SSL connection to a non-SSL service.


Normally blow up, because there's nothing listening on the non-SSL port and hence the connector (broker or EG) is down.

If you do have other flows and the connector's up, you'll get a "can't map URL" error.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
mqjeff
PostPosted: Wed Aug 19, 2015 11:25 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

Vitor wrote:
mqjeff wrote:
I guess I'm not sure off the top of my head what the SOAPRequest node will do when it tries to make an SSL connection to a non-SSL service.


Normally blow up, because there's nothing listening on the non-SSL port


I'm sure you meant "SSL port"....
Back to top
View user's profile Send private message
joebuckeye
PostPosted: Wed Aug 19, 2015 11:51 am    Post subject: Reply with quote

Partisan

Joined: 24 Aug 2007
Posts: 365
Location: Columbus, OH

Quote:
2. allowSSLv3

You should not be allowing SSLv3 due to the poodle vulnerability.

https://isc.sans.edu/forums/diary/SSLv3+POODLE+Vulnerability+Official+Release/18827/

From the above link:

Quote:
What should you do: Disable SSLv3. There is no patch for this. SSLv3 has reached the end of its useful life and should be retired.
Back to top
View user's profile Send private message
Vitor
PostPosted: Wed Aug 19, 2015 12:06 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

mqjeff wrote:
Vitor wrote:
mqjeff wrote:
I guess I'm not sure off the top of my head what the SOAPRequest node will do when it tries to make an SSL connection to a non-SSL service.


Normally blow up, because there's nothing listening on the non-SSL port


I'm sure you meant "SSL port"....



_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
smdavies99
PostPosted: Wed Aug 19, 2015 10:09 pm    Post subject: Reply with quote

Jedi Council

Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.

Vitor wrote:



I sort of got the impression that you were not drinking coffee any more?
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995

Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions.
Back to top
View user's profile Send private message
Vitor
PostPosted: Thu Aug 20, 2015 4:39 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

smdavies99 wrote:
Vitor wrote:



I sort of got the impression that you were not drinking coffee any more?


Coffee was unavailable on site yesterday. It was not a good day, especially by the afternoon.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
mqjeff
PostPosted: Thu Aug 20, 2015 5:10 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

Vitor wrote:
smdavies99 wrote:
Vitor wrote:



I sort of got the impression that you were not drinking coffee any more?


Coffee was unavailable on site yesterday. It was not a good day, especially by the afternoon.



_________________
chmod -R ugo-wx /
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Socket Error
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.