PI85931: JAVA.LANG.ILLEGALSTATEEXCEPTION THROWN WHEN CHANGING THE IDENTITY OF A USER ALREADY AUTHENTICATED TO A REALM.

APAR status

• Closed as program error.

Error description

• * Product component: Foundation Server
  * Mobile Devices impacted: All
  * User role impacted: Mobile Application User
  * Distribution: Fix Central
  During the end user login process, timing issues may occur that
  may appear to the user as an intermittent login failure.  This
  failure can also result in the loss of customer-specific data
  in the application that is associated with the "Remember Me"
  function.
  In messages.log you may see an error like the following:
  com.worklight.gadgets.serving.GadgetAPIServlet               E
  FWLSE0117E: Error code: 1, error description: INTERNAL_ERROR,
  error message: FWLSE0069E: An internal error occurred during
  gadget request  [project ___] Environment identity is null or
  not proven for realm ApplicationRealm, User Identity
  {SubscribeServlet=null, wl_directUpdateRealm=(name:null,
  loginModule:WLDirectUpdateNullLoginModule),
  ApplicationRealm=(name:5007660000089709,
  loginModule:ApplicationLoginModule)
  , wl_authenticityRealm=(name:null,
  loginModule:wl_authenticityLoginModule), DebitpDebitcRealm=null,
  DebitpDebitcCreditpRealm=null,
  AuthenticationRealm=(name:5007660000089709,
  loginModule:AuthenticationLoginModule),
  wl_remoteDisableRealm=(name:null,
  loginModule:WLRemoteDisableNullLoginModule),
  DebitpCreditpRealm=null,
  wl_antiXSRFRealm=(name:oac3bj64n0h9a2538tkaja5uem,
  loginModule:WLAntiXSRFLoginModule),wl_deviceAutoProvisioningReal
  m=null,
  wl_deviceNoProvisioningRealm=(name:CA71C748-6ADC-479C-9DE4-963B0
  0924010,loginModule:WLDeviceNoProvisioningLoginModule),
  myserver=(name:5007660000089709,loginModule:ApplicationLoginModu
  le),wl_anonymousUserRealm=(name:b5657b18-20dd-4e53-9344-9e90bc29
  87d4 ,
  loginModule:WeakDummy), DebitpRealm=null}. [project ____]
  The failure is due to a timing issue that occurs if server side
  logout processing has not completed before login processing
  begins again for that same user.  When login starts before
  logout completes on the server, application's login challenge
  handler never receives the expected response.
  

Local fix

• After a user logs out of the app, add a few second delay before
  the user can log back in.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * A subset of Worklight 7.1 users who uses setActiveUser() API *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * User gets "java.lang.IllegalStateException: Cannot change    *
  * identity of an already logged in user in realm"              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Fix has been added to throw java.lang.IllegalStateException when
  that occurs in server on a call to setActiveUser().
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MOBILE1ST PLATF

• Fixed component ID

  5725I4301

Applicable component levels

• R710 PSY

     UP