IZ87232: LIMIT NUMBER OF CONCURRENT REQUESTS FOR A SINGLE USER SESSION

6.0.0-ISS-TAM-IF0039-LIN_NPTL
6.0.0-ISS-TAM-IF0039-WIN
6.0.0-ISS-TAM-IF0039-SOL-X86
6.0.0-ISS-TAM-IF0039-SOL
6.0.0-ISS-TAM-IF0039-S390
6.0.0-ISS-TAM-IF0039-LIN-PPC
6.0.0-ISS-TAM-IF0039-LIN
6.0.0-ISS-TAM-IF0039-HP-IA64
6.0.0-ISS-TAM-IF0039-HP
6.0.0-ISS-TAM-IF0039-AIX
6.0.0-ISS-TAM-IF0037-WIN
6.0.0-ISS-TAM-IF0037-SOL-X86
6.0.0-ISS-TAM-IF0037-SOL
6.0.0-ISS-TAM-IF0037-S390
6.0.0-ISS-TAM-IF0037-LIN-PPC
6.0.0-ISS-TAM-IF0037-LIN_NPTL
6.0.0-ISS-TAM-IF0037-LIN
6.0.0-ISS-TAM-IF0037-HP-IA64
6.0.0-ISS-TAM-IF0037-HP
6.0.0-ISS-TAM-IF0037-AIX
Tivoli Access Manager for e-Business WebSEAL, Patch 6.0.0-TIV-AWS-FP0025

APAR status

• Closed as program error.

Error description

• An SSE has been requested so that WebSEAL
  can be protected against a single user session from consuming
  too many worker threads.  The specific example which they
  are trying to protect against is when a user continually
  presses shift-reload whilst waiting for an application to
  respond (the application will always take a reasonable
  period of time to respond).  Each 'shift-reload' will
  consume an additional worker thread.
  
  The solution to this problem is to provide 2 new configuration
  entries, as described below:
  
  [server]
  
  #
  # The maximum number of concurrent threads which can be consumed
  # by a single user session before warning messages are
  generated.  WebSEAL
  # will continue to process requests for this session until the
  corresponding
  # hard-limit is reached.
  #
  # concurrent-session-threads-soft-limit = 5
  
  #
  # The maximum number of concurrent threads which can be consumed
  # by a single user session.  Once the thread limit for the user
  session has
  # been reached the request will not be processed by WebSEAL and
  an error
  # will be returned to the client.
  #
  # If no value is specified for this configuration item there
  will be no
  # limit to the number of concurrent threads that a user session
  can
  # consume.
  #
  # concurrent-session-threads-hard-limit = 10
  
  
  CMVC 101016.
  

Local fix

Problem summary

• SSE to protect against a single user session fr
  om consuming too many worker threads.
  

Problem conclusion

• The fix for this APAR is expected to be cont
  ained in the following maintenance delivery vehicle:
  | fix pack | 6.0.0-TIV-AWS-FP0025
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ACCESS MGR WEBS

• Fixed component ID

  5724C0811

Applicable component levels

• R600 PSN

     UP