IBM Support

Session time out error while launching the Application manager

Technical Blog Post


Abstract

Session time out error while launching the Application manager

Body

It has been observed in SSFS 9.3, that the Application Manager does not open while users are able to login to the console. SSFS was deployed on Websphere 8.5.5.2.
The error message observed is 'Session timeout'. From the java console trace Level 5, the following error stack was seen.

security: Trust for: http://support06:9080/smcfs/yfscommon/xml-apis.jar?token=1433455865900w2FMN78izrmq0CiGg15DpRwZhri has ended: Wed Dec 31 16:00:00 PST 1969
Missing Codebase manifest attribute for: http://support06:9080/smcfs/yfscommon/xml-apis.jar?token=1433455865900w2FMN78izrmq0CiGg15DpRwZhri
security: Validate the certificate chain using CertPath API
security: The certificate has expired, need to check timestamping info
security: No timestamping info available
basic: Plugin2ClassLoader.getPermissions CeilingPolicy allPerms
network: Connecting http://support06:9080/smcfs/servlets/com.yantra.app.config.YantraConfigServlet with proxy=DIRECT
network: Connecting http:/support06:9080/ with proxy=DIRECT
network: Connecting http://support06:9080/smcfs/servlets/com.yantra.app.config.YantraConfigServlet with proxy=DIRECT
network: Connecting http://support06:9080/ with proxy=DIRECT
<?xml version="1.0" encoding="UTF-8"?>
<Errors>
    <Error ErrorCode="YCP0047" ErrorDescription="YCP: Login Failed" ErrorRelatedMoreInfo="">
        <Attribute Name="ErrorCode" Value="YCP0047"/>
        <Attribute Name="ErrorDescription" Value="YCP: Login Failed"/>
        <Stack>com.yantra.yfc.util.YFCException&#xd;
    at com.yantra.app.config.YantraConfigServlet.login(YantraConfigServlet.java:596)&#xd;
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)&#xd;
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)&#xd;
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)&#xd;
    at java.lang.reflect.Method.invoke(Method.java:613)&#xd;
    at com.yantra.yfc.servlets.YFCServlet.handleMethod(YFCServlet.java:251)&#xd;
    at com.yantra.util.YFSServlet.handleMethod(YFSServlet.java:328)&#xd;
    at com.yantra.yfc.servlets.YFCServlet.service(YFCServlet.java:172)&#xd;
    at com.yantra.util.YFSServlet.service(YFSServlet.java:319)&#xd;
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:668)&#xd;
    at com.ibm.ws.webcontainer.servlet.SingleThreadModelServlet.service(SingleThreadModelServlet.java:123)&#xd;
    at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1230)&#xd;
    at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:779)&#xd;
    at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:478)&#xd;
    at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:136)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:97)&#xd;
    at com.sterlingcommerce.security.dv.web.SCUIRequestValidatorFilter.doFilter(SCUIRequestValidatorFilter.java:43)&#xd;
    at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)&#xd;
    at com.sterlingcommerce.security.dv.web.SCUISafeRequestFilter.doFilter(SCUISafeRequestFilter.java:64)&#xd;
    at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)&#xd;
    at com.sterlingcommerce.security.csrf.SCUIcsrfFilter.doFilter(SCUIcsrfFilter.java:67)&#xd;
    at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)&#xd;
    at com.sterlingcommerce.woodstock.security.FileNotFoundSuppressor.doFileNotFoundSuppressedFilter(FileNotFoundSuppressor.java:17)&#xd;
    at com.sterlingcommerce.woodstock.security.CrossFrameProtectionFilter.doFilter(CrossFrameProtectionFilter.java:60)&#xd;
    at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)&#xd;
    at com.sterlingcommerce.woodstock.security.UserAuthenticationFilter.doFilter(UserAuthenticationFilter.java:121)&#xd;
    at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:967)&#xd;
    at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1107)&#xd;
    at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:87)&#xd;
    at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:919)&#xd;
    at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1662)&#xd;
    at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:200)&#xd;
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:463)&#xd;
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:530)&#xd;
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:316)&#xd;
    at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:287)&#xd;
    at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:214)&#xd;
    at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:113)&#xd;
    at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:175)&#xd;
    at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)&#xd;
    at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)&#xd;
    at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)&#xd;
    at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)&#xd;
    at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)&#xd;
    at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)&#xd;
    at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1881)&#xd;
</Stack>
    </Error>
</Errors>

Cause of the error:
This is an issue with WAS 8.5.2.2. The cookie value in the request originated from the customer servlet has a double quote.

Solution:
Set the custom property CookiesRemoveQuotes to true
This property can be configured under the following location for Non SSL:
Application servers > servername > Web container transport chains >WCInboundDefault > HTTP inbound channel (HTTP_2)> custom properties

Set this custom property under the following location for SSL:
Application servers > Servername > Web container transport chains > WCInboundDefaultSecure > HTTP inbound channel (HTTP_4)

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS6PEW","label":"Sterling Order Management"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}},{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS6PEW","label":"Sterling Order Management"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

UID

ibm11124691