SDK/J | Ricoh Developer Program (RiDP)

MAINTENANCE SIGNATURE REQUEST FOR RICOH ESA COMBINED CLIENT 7.7.5.70

Incident Properties

Product:

SDK/J

Category:

Request

How would you categorize this Request?:

Maintenance Signature

Origin of Incident:

Other

Application Type:

Embedded Application (SDK/J)

Application Version Number:

7.7.5.70

Product ID's:

33956099

Question

Incident Question:

The minor changes are to fix a customer issue with PIN registration. A wrong call (regression issue) to server was made. The fix is just to correct the call. Other minor changes include minor cosmetic changes for branding from the Nuance logo.

Please see detailed changes in Change Summary - Release Notes 7.7.5.70.txt

SDKJ application update for Wells Fargo

Incident Properties

Product:

SDK/J

Category:

Request

How would you categorize this Request?:

Maintenance Signature

End User - Customer Name:

Wells Fargo

Origin of Incident:

End User Customer Name

Application Type:

Embedded Application (SDK/J)

Application Version Number:

1.4.6

Product ID's:

34088704

Question

Incident Question:

This is not a request for a maintenance signature, but I have a few questions.

Wells Fargo has begun transitioning to devices that support SmartSDK, but they will still have several hundred devices, that don't, that they don't intend to replace this year. I know that they're working closely with their Ricoh sales rep on this, but they have raised some security concerns on our old SDKJ offering.
They have asked us to address some of the current security vulnerabilities for our SDKJ application.

1 - Are you still doing SDKJ certifications or would we be able to just get an updated one signed for production use?

2 - Do you know if there have been any conversations between Ricoh sales and the RIDP team?

If Gerardo has 10-15 minutes to talk briefly about this customer, it woudl be greatly appreciated.. just email to work out a time.

Unable to send SOAP request to our server on Ricoh MP C4503

Incident Properties

Product:

SDK/J

Category:

Development

How would you categorize this Development request?:

Runtime Issue

Origin of Incident:

Other

Application Type:

Embedded Application (SDK/J)

Application Version Number:

7.7.5.55

Question

Incident Question:

Hi,

Our customer deploy this application to their devices. Other devices work fine but with Ricoh MP C4503 when our app sends a SOAP mesasge to our server (http), it failed with error 503 Service Unavailable.

The server is accessible because it is working for other device.

The Rlog.zip is attached.

In this log, i.e.: 010.132.003.028_125_auto_20200622_154448.log, we can see that whenever we send the SOAP mesasge (java.net.HttpURLConnection), code-snip below:

urlConnection.setRequestMethod( "POST");

urlConnection.setDoOutput(true);

urlConnection.setRequestProperty("Content-Type", "text/xml; charset=utf-8");

//String strLen = "" + envolope.length();

//urlConnection.setRequestProperty("Content-Length", strLen);

urlConnection.setRequestProperty("Content-Length", Integer.toString(byteRequest.length));

String action = "\"" + nsString

+ (nsString.endsWith("/") ? "" : "/") + itfString + "/" + method + "\"";

urlConnection.setRequestProperty("SOAPAction", action);

urlConnection.setRequestProperty("Host", host);

urlConnection.setRequestProperty("Expect", "100-Continue");

OutputStream out = null;

try

{

// send the soap request

out = urlConnection.getOutputStream();

out.write(byteRequest);

We see the stacktracke of ricoh esdk seems not related to our code But related to javax.servlet.http.HttpServlet.service(HttpServlet.java:865)

It prints out:

[stderr] jp.co.ricoh.dip.devicemanagement.DeviceManagementException: SoapFault exception.:SOAP Service is not ready.

[stdout] DeviceManagementException.errorCode=7

[stderr] java.lang.IllegalStateException: service is not opened yet.

[stdout] [SDK_P_WSFW_] fail to login.

[stderr] javax.security.auth.login.LoginException: basic auth error!

and then print outs a html page resposne as below.

It seems to me that on this device, there is a mechanism (component) that acts like proxy and capture request our application sends, examine it before sending to the expected host.

Could you please advise?

======

****************** <LOG TIME> DATE:2020.06.22 TIME:15:48:03 ******************

[stderr] <HTML><HEAD>

<TITLE>Network Error</TITLE>

</HEAD>

<BODY>

<big>Network Error (tcp_error)</big>

</TD></TR>

A communication error occurred: "Operation timed out"

</TD></TR>

The Web Server may be down, too busy, or experiencing other problems preventing it from responding to requests. You may wish to try again at a later time.

</TD></TR>

For assistance, contact your network support team.

</TD></TR>

</TABLE>

</blockquote>

</BODY></HTML>

[stderr] jp.co.ricoh.dip.devicemanagement.DeviceManagementException: SoapFault exception.:SOAP Service is not ready.

[stderr] at jp.co.ricoh.dip.devicemanagement.SoapErrorTranslator.translateSoapException(Unknown Source)

[stderr] at jp.co.ricoh.dip.devicemanagement.DeviceManagementServiceStub.call(Unknown Source)

[stderr] at jp.co.ricoh.dip.devicemanagement.DeviceManagementServiceStub.getProtocolVersion(Unknown Source)

[stderr] at jp.co.ricoh.dip.devicemanagement.DeviceManagementServiceStub.getVersion(Unknown Source)

[stderr] at jp.co.ricoh.dip.devicemanagement.DeviceManagementServiceStub.openSession(Unknown Source)

[stderr] at jp.co.ricoh.dip.devicemanagement.DeviceConfigurationImpl.openService(Unknown Source)

[stderr] at jp.co.ricoh.dip.devicemanagement.DeviceManagementService.open(Unknown Source)

[stderr] at jp.co.ricoh.dip.devicemanagement.DeviceConfigurationImpl.open(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.auth.DMPAccess.openDeviceConfiguration(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.auth.DMPAccess.checkBasicUserNameAndPassword(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.auth.SubjectResolverImpl.checkBasicUserNameAndPassword(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.auth.SubjectResolverImpl.basicAuthentication(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.auth.SubjectResolverImpl.resolve(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.provider.PreprocessConditionChecker.canProcessAsNonNrs(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.provider.PreprocessConditionChecker.canProcessAsNonNrsAndNrs(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.provider.AbstractCommonProvider.nrsAndNonNrsPreProcess(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.provider.AbstractCommonProvider.preProcess(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.provider.AbstractCommonProvider.process(Unknown Source)

[stderr] at jp.co.ricoh.esdk.service.webserviceframework.common.provider.AbstractCommonProvider.get(Unknown Source)

[stderr] at jp.co.ricoh.atome.server.impl.DefaultRequestHandler.getMethodOutput(Unknown Source)

[stderr] at jp.co.ricoh.atome.server.impl.DefaultRequestHandler.output(Unknown Source)

[stderr] at jp.co.ricoh.atome.server.impl.DefaultRequestHandler.process(Unknown Source)

[stderr] at jp.co.ricoh.atome.server.Dispatcher.service(Unknown Source)

[stderr] at javax.servlet.http.HttpServlet.service(HttpServlet.java:865)

[stderr] at org.knopflerfish.bundle.http.RequestDispatcherImpl.service(RequestDispatcherImpl.java:142)

[stderr] at org.knopflerfish.bundle.http.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:395)

[stderr] at org.knopflerfish.bundle.http.Transaction.run(Transaction.java:142)

[stderr] at java.lang.Thread.run(Thread.java:619)