Technical Blog Post
Abstract
Session time out error while launching the Application manager
Body
It has been observed in SSFS 9.3, that the Application Manager does not open while users are able to login to the console. SSFS was deployed on Websphere 8.5.5.2.
The error message observed is 'Session timeout'. From the java console trace Level 5, the following error stack was seen.
security: Trust for: http://support06:9080/smcfs/yfscommon/xml-apis.jar?token=1433455865900w2FMN78izrmq0CiGg15DpRwZhri has ended: Wed Dec 31 16:00:00 PST 1969
Missing Codebase manifest attribute for: http://support06:9080/smcfs/yfscommon/xml-apis.jar?token=1433455865900w2FMN78izrmq0CiGg15DpRwZhri
security: Validate the certificate chain using CertPath API
security: The certificate has expired, need to check timestamping info
security: No timestamping info available
basic: Plugin2ClassLoader.getPermissions CeilingPolicy allPerms
network: Connecting http://support06:9080/smcfs/servlets/com.yantra.app.config.YantraConfigServlet with proxy=DIRECT
network: Connecting http:/support06:9080/ with proxy=DIRECT
network: Connecting http://support06:9080/smcfs/servlets/com.yantra.app.config.YantraConfigServlet with proxy=DIRECT
network: Connecting http://support06:9080/ with proxy=DIRECT
<?xml version="1.0" encoding="UTF-8"?>
<Errors>
<Error ErrorCode="YCP0047" ErrorDescription="YCP: Login Failed" ErrorRelatedMoreInfo="">
<Attribute Name="ErrorCode" Value="YCP0047"/>
<Attribute Name="ErrorDescription" Value="YCP: Login Failed"/>
<Stack>com.yantra.yfc.util.YFCException
at com.yantra.app.config.YantraConfigServlet.login(YantraConfigServlet.java:596)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:613)
at com.yantra.yfc.servlets.YFCServlet.handleMethod(YFCServlet.java:251)
at com.yantra.util.YFSServlet.handleMethod(YFSServlet.java:328)
at com.yantra.yfc.servlets.YFCServlet.service(YFCServlet.java:172)
at com.yantra.util.YFSServlet.service(YFSServlet.java:319)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
at com.ibm.ws.webcontainer.servlet.SingleThreadModelServlet.service(SingleThreadModelServlet.java:123)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1230)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:779)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:478)
at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:136)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:97)
at com.sterlingcommerce.security.dv.web.SCUIRequestValidatorFilter.doFilter(SCUIRequestValidatorFilter.java:43)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
at com.sterlingcommerce.security.dv.web.SCUISafeRequestFilter.doFilter(SCUISafeRequestFilter.java:64)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
at com.sterlingcommerce.security.csrf.SCUIcsrfFilter.doFilter(SCUIcsrfFilter.java:67)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
at com.sterlingcommerce.woodstock.security.FileNotFoundSuppressor.doFileNotFoundSuppressedFilter(FileNotFoundSuppressor.java:17)
at com.sterlingcommerce.woodstock.security.CrossFrameProtectionFilter.doFilter(CrossFrameProtectionFilter.java:60)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
at com.sterlingcommerce.woodstock.security.UserAuthenticationFilter.doFilter(UserAuthenticationFilter.java:121)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:195)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:967)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1107)
at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:87)
at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:919)
at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1662)
at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:200)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:463)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:530)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:316)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:287)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:214)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:113)
at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:175)
at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1881)
</Stack>
</Error>
</Errors>
Cause of the error:
This is an issue with WAS 8.5.2.2. The cookie value in the request originated from the customer servlet has a double quote.
Solution:
Set the custom property CookiesRemoveQuotes to true
This property can be configured under the following location for Non SSL:
Application servers > servername > Web container transport chains >WCInboundDefault > HTTP inbound channel (HTTP_2)> custom properties
Set this custom property under the following location for SSL:
Application servers > Servername > Web container transport chains > WCInboundDefaultSecure > HTTP inbound channel (HTTP_4)
UID
ibm11124691