Troubleshooting
Problem
Symptom
Cause
DWA was accessed over HTTP (http://<hostname>:8080) instead of HTTPS (https://<hostname>:8443).
Without HTTPS, secure session cookies such as JSESSIONID are not created or transmitted, resulting in the web application treating each request as unauthenticated.
Environment
-
IBM Engineering DOORS Web Access (DWA)
-
DWA accessed using Chrome and Edge
-
Access attempted over HTTP (port 8080)
Diagnosing The Problem
-
Review the HAR (HTTP Archive) file using Chrome Developer Tools or a HAR analyzer.
-
Observe that all network requests are made over port 8080 (HTTP).
-
Note the absence of
JSESSIONIDcookie in the HAR file, which indicates no session was established. -
Attempt to access the DWA URL via HTTPS (
https://<hostname>:8443) and compare behavior. -
Confirm that login proceeds successfully and session cookie is created over HTTPS.
Resolving The Problem
-
Configure the web server to enable and enforce HTTPS access (port 8443).
-
Ensure the user accesses DWA using the HTTPS URL:
https://<hostname>:8443/dwa/welcome/welcome.jsp -
Optionally, redirect all HTTP traffic to HTTPS to avoid similar issues.
-
After enabling HTTPS, verify successful login and presence of
JSESSIONIDin browser cookies.
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
01 August 2025
UID
ibm17240606