Issue with sticky sessions

My application has the following architecture:
1.) a load balanced Flex frontend with sticky sessions which queries
2.) a load balanced REST service also with sticky sessions
The flex frontend queries the service using a Flex HTTPService object. However, although sticky sessions are enabled on both the flex frontend and
rest service, we are seeing queries go to different instances. For example
user will request Flex App1 which will then call RestService1
then user will request Flex App1 again which will call RestService2(instead of RestService1).
Has anyone seen this issue before in a load balanced environment? I need this to work because the REST service does not have a distributed cache, so subsequent requests must hit the same box to use the cache.
thanks

NW6 SP5 needs nw6nss5c in order for NSS to work properly; once applied
then do
nss /poolrebuild /purge
on all pools. Make sure you have tested backups first, just in case.
Also Load Monitor - Server Parameters - NCP. Set Level 2 OpLocks Enabled
= Off, and Client File Caching Enabled = Off.
What lan driver, date and version, on the server?
Andrew C Taubman
Novell Support Forums Volunteer SysOp
http://support.novell.com/forums
(Sorry, support is not provided via e-mail)
Opinions expressed above are not
necessarily those of Novell Inc.

Similar Messages

Issue with locked sessions

I am having some issues with locked sessions. I attempt to clear the
connections from the console but it doesn work. The only way to clear the
session is to reboot server. NW6.0 SP5

NW6 SP5 needs nw6nss5c in order for NSS to work properly; once applied
then do
nss /poolrebuild /purge
on all pools. Make sure you have tested backups first, just in case.
Also Load Monitor - Server Parameters - NCP. Set Level 2 OpLocks Enabled
= Off, and Client File Caching Enabled = Off.
What lan driver, date and version, on the server?
Andrew C Taubman
Novell Support Forums Volunteer SysOp
http://support.novell.com/forums
(Sorry, support is not provided via e-mail)
Opinions expressed above are not
necessarily those of Novell Inc.

Grant issue with Monitoring Sessions

I've searched high and low for the answer to this. I get an error when trying to Monitor Sessions (table/view don't exist) and that I need select grants on these objects:
V$SESSION to beadiadbo, V$PROCESS, V$SESS_IO, V$SESSION_WAIT, V$SESSION_EVENT, V$ACCESS, V$SESSSTAT, V$STATNAME, V$OPEN_CURSOR, V$SQL, V$LOCK, V$SESSION_LONGOPS, SYS.V_$TRANSACTION, SYS.V_$ROLLNAME, V$SQLTEST_WITH_NEWLINES
I've given SELECT grant to the user, but still get the error. Am I missing any other privileges?
Much appreciated,
Adam

Hi Adam,
According to the following forum search hit (monitor AND sessions), try GRANT SELECT ANY DICTIONARY:
Monitor Sessions
MONITOR SESSIONS on a user with just CONNECT, RESOURCE role grants will fail. Adding SELECT ANY DICTIONARY fixes it.
Getting any finer grained than that gets hairy, e.g., doing a sql trace on your session to see which dictionary views get referenced.
Regards,
Gary Graham
SQL Developer Team

Issue with Session ID during POST

Hi All,
I am using Weblogic server version weblogic 9.2 and facing an issue with the session ID.
I have a client side script with numerous GET calls and one POST call that it makes in a single session. Frequently I come across with issue that the session ID that I send in POST request is not the same as received and this affects my subsequent GET calls not to be in the same session. The call order is like this
GETij/POSTij where i is the sent and j is the recieved session IDs.
[GET11, GET11, GET11, POST12, GET11, GET11, <after few secs interval> GET22, GET22]
I store the session id in a cookie. And I always create a session using the HttpServletRequest.getSession();
Can some one advice on this.
Thanks
Shankar

Hi,
Again as a follow-up, I am using net scape ns plugin for load balancing (iPlanet/Weblogic). The issue happens when the primary server id and the secondary server id are same in the session id (set in the cookie) when the cookie is sent and received, where session id is of the default format <session id>!<primary server id>!<secondary server id>
Any clue?

Appcrash with multitrack sessions in Audition CS6 on a MacBook Pro with Windows 7

This is an issue with multitrack sessions different from 44100 Hz in Audition CS6 (as part of a Premium Suite CS6). While multitrack sessions with a sampling rate of 44100 Hz works normally (as long as I use clips with 44100 Hz) any other sampling rate causes an APPCRASH (s. below). Also with the insertion ( in a 44100 Hz multitrack session, of course) of any clip with a sampling rate different from 44100 Hz, the programme crashes in the moment it's going to generate a adapted copy for the multitrack timeline.
Audition is installed on a MacBook Pro Retina 15" ,Mid 2014, Model 11,3, Intel Core i7 4870HQ 2,5 GHz, 16GB RAM with Windows 7 SP1.
I tried all advices of the Adobe troubleshooting site and some of the community.
Especially:
- the simplified mode with user-defined system start
- deactivated user account control
- new user account
- deactivated data execution prevention (DEP)
Also the use of different audio interfaces affords no effect:
- build in Cirrus Logic CS4208 with MME drivers
- Motu UltraLight mk3 hybrid via USB with Asio drivers.
In spite of an extensive search I can't find any similar case in the net.
So, please, can you help me?
Sorry, it's a german version of windows 7:
Problem signature
Problemereignisname:    APPCRASH
Anwendungsname:   Adobe Audition CS6.exe
Anwendungsversion:    5.0.2.7
Anwendungszeitstempel:           505806ee
Fehlermodulname:    StackHash_0a9e
Fehlermodulversion: 0.0.0.0
Fehlermodulzeitstempel:           00000000
Ausnahmecode:        c0000005
Ausnahmeoffset:       45ef2b00
Betriebsystemversion: 6.1.7601.2.1.0.256.48
Gebietsschema-ID:   1031
Zusatzinformation 1:    0a9e
Zusatzinformation 2:    0a9e372d3b4ad19135b953a78882e789
Zusatzinformation 3:    0a9e
Zusatzinformation 4:    0a9e372d3b4ad19135b953a78882e789

I'm afraid you are right. At the worst I'm more than 50% of the audition users on a mac with windows.To solve the problem within a passable time I would like to change to the mac version of audition. But unfortunately it's impossible to use the mac version with a windows licence. And CS6 licences (mac audition) are not longer available (only at a moon rate).
Because of the weekend we can pass the time with the latest news of my trouble-shooting.
The crash is not only within the multitrack session but also within the waveform view: when I try to change the sampling rate (Edit -> Convert Sample Type) the programme crashes with the same problem signature. And here it crashes with all sampling rates , including 44.1k audio files. On the other hand I can play all sampling rates within the waveform view.
I compared the logfile from the predecessor of the MacBook , a LG Notebook with windows vista and a working Au CS6 with the current logfile of the Mac: They are identical at the beginning and at the end (termination sequence). But after " Initializing AuScripting" there is a "DLMS 6.0x39 FileServer startup code: 0" and the listing of a couple of codecs in the Notebook logfile - but not so in the Mac logfile.
Also the logfile of my workstation with a working Au CS6 shows this "DLMS 6.0x39 FileServer startup code" - line. Because of the two working and one crashing computer this part of the logfile seems to be important ??
Logfile audition predecessor (Notebook) - detail
A blank line is only to arrange the logfile more clearly - it doesn't stand for missing lines.
Ticks = 60014      <4068> <AuLog.DisplaySurface> <5>     Initialize PRM
Ticks = 60014      <4068> <AuLog.DisplaySurface> <5>     Initialize DS
Ticks = 60076      <4068> <AuLog.DisplaySurface> <5>     DS Initialize succeeded
Ticks = 60076      <4068> <AuLog.DisplaySurface> <5> Video Panel is using the Display Surface
Ticks = 64304      <4068> <AuLog.Startup> <5> Initializing AuScripting
Ticks = 86191      <3796> <AuLog.Plug-in> <5> DLMS 6.0x39 FileServer startup code: 0
Ticks = 86191      <3796> <AuLog.Plug-in> <5>     AVI Movie (*.avi)
Ticks = 86191      <3796> <AuLog.Plug-in> <5>         *.AVI
Ticks = 86191      <3796> <AuLog.Plug-in> <5>     FLV (*.flv)
Ticks = 86191      <3796> <AuLog.Plug-in> <5>         *.FLV
Logfile MacBook Pro - detail
Ticks = 3510      <3976> <AuLog.Startup> <5> AuUI initialization sequence complete.
Ticks = 3869      <3976> <AuLog.DisplaySurface> <5>     Initialize PRM
Ticks = 3869      <3976> <AuLog.DisplaySurface> <5>     Initialize DS
Ticks = 3900      <3976> <AuLog.DisplaySurface> <5>     DS Initialize succeeded
Ticks = 3915      <3976> <AuLog.DisplaySurface> <5> Video Panel is using the Display Surface
Ticks = 4493      <3976> <AuLog.Startup> <5> Initializing AuScripting
Ticks = 22948      <3976> <AuLog.Plug-in> <5> Loading AMIO plug-in: AmioWav
Ticks = 22948      <3976> <AuLog.Plug-in> <5> Audition Wave Amio-Plug-In. ID: 60df8553-00c8-4fd7-8a07-6f25e30ab79c
Ticks = 45958      <3976> <AuLog.Shutdown> <5> AuUI termination sequence started...

Sticky sessions and Load Balancing in WL Clusters

We are using iPlanet Web Server 4.1 with WebLogic App Server; and would like
to implement load balancing with sticky sessions and in-memory state
replication.
The documentation in Weblogic says that -
When using in-memory state replication, your WebLogic Server Cluster must
live behind one or more proxy servers. The proxy servers are smart enough to
send servlet requests, belonging to the same HTTP session, back to the same
server in the cluster that holds the session data.
(Ref: http://www.weblogic.com/docs51/cluster/setup.html)
Does this mean that the sticky session configuration has to be done on the
iPlanet Web Server itself ?
Also, if WebLogic is used as the Web server, does WebLogic provide any
support for sticky sessions?
Any help, suggestions or links to useful info are welcome.
Regards,
Milind.

Mike,
im curious as to why you would recomend using weblogic as a web server in 6.1?
I would not for the following reasons:
- it costs 10x more per cpu list
- it doesnt support hardware accell cards (afaik, please let me know if this has
changed)
iplanet is really good a serving up static html and gif's, especially in ssl if you
have a hardware accell card. So if you have a site with lots of graphics and you use
ssl a lot, I think its still a better solution.
-Joel
Mike Reiche wrote:
You get sticky round-robin by default.
You need to have session tracking turned on (i think it is on by default). You
need to have the WL plugin configured in iPlanet.
When WL creates an httpSession, it writes a cookie (or rewrites the URL) back
to the browser. On subsequent requests, the browser sends the cookie and iPlanet
plug-in directs the request to the correct WL instance based on the ip address
of the WL server embedded in the cookie.
If you are using WLS 6.1, I would recommend using it as a web server (and not
using iPlanet). I imagine that it supports stickly load balancing as well.
Mike
Joel Nylund <[email protected]> wrote:
you get round robin by default, if you want a different scheme you can
use one
of the other 3 options (weight, random or parameter).
-Joel
I think weight can be set in weblogic properties. I havent used any other
than
round robin.
Milind Prabhu wrote:
We are using iPlanet Web Server 4.1 with WebLogic App Server; and wouldlike
to implement load balancing with sticky sessions and in-memory state
replication.
The documentation in Weblogic says that -
When using in-memory state replication, your WebLogic Server Clustermust
live behind one or more proxy servers. The proxy servers are smartenough to
send servlet requests, belonging to the same HTTP session, back tothe same
server in the cluster that holds the session data.
(Ref: http://www.weblogic.com/docs51/cluster/setup.html)
Does this mean that the sticky session configuration has to be doneon the
iPlanet Web Server itself ?
Also, if WebLogic is used as the Web server, does WebLogic provideany
support for sticky sessions?
Any help, suggestions or links to useful info are welcome.
Regards,
Milind.

ACE Graceful Server Shutdown with Sticky

I would like a way to gracefully shutdown a server without killing the sessions of the current users on that server.
I know the "no inservice" command will allow the server to finish servicing existing TCP connections, but what happens to the users that are 'stuck' to that server?
What happens with sticky sessions when you reduce the connection limit for a server below the current connection count? How about reducing the weight of the server in the farm? Will the 'stuck' sessions continue to go to the correct server in the farm?

switch/Admin(config)# serverfarm linux1
switch/Admin(config-sfarm-host)# rserver linux1
switch/Admin(config-sfarm-host-rs)# inservice ?
standby Only allow connections reassigned from failed servers
Carriage return.
switch/Admin(config-sfarm-host-rs)# do sho ver
Cisco Application Control Software (ACSW)
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2008, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained herein are owned by
other third parties and are used and distributed under license.
Some parts of this software are covered under the GNU Public
License. A copy of the license is available at
http://www.gnu.org/licenses/gpl.html.
Software
loader: Version 12.2[121]
system: Version A2(1.0a) [build 3.0(0)A2(1.0a) adbuild_04:14:49-2008/04/18_
As you can see I run A2(1.0a) and the command is there.
G.

Having an issue with passing the text of a link to a session variable.

I am having an issue with passing the text from a link to a session variable. I am adding this html as a literal for each item in the list that i have populated with a query.
List<Literal> lit = new List<Literal>();
for (int i = 0; i < posts.Count; i+=4)
Literal someLit = new Literal();
someLit.Text=
@"<div class='row'>" +
"<div class='col-md-12'>" +
"<div class='panel'>" +
" <div class='panel-body'>" +
" " +
" <div class='row'> " +
" <br>" +
"<div class='col-md-2 col-sm-3 text-center' id='javascript'> <h3>" +
" <a href='#' runat='server' onserverclick='UserProfile_Click'>" + posts[i + 3] + " </a>" +
"</h3>" +
" </div>" +
" <div class='col-md-10 col-sm-9'>" +
"<h3><a href='Thread.aspx' runat='server' onserverclick='MyFuncion_Click'> " + posts[i] + " </a></h3>" +
" <div class='row'>" +
" <div class='col-xs-9'> " +
posts[i + 1] +
" </div>" +
"<div class='col-xs-3'></div>" +
posts[i + 2] +
" </div>" +
"<br><br>" +
" </div>" +
" </div>" +
" " +
" </div>" +
" </div>" +
" </div>" +
" </div>" +
"</div>";
lit.Add(someLit);
for(int i=0; i<lit.Count; i++)
this.Controls.Add(lit[i]);
I use one of the list positions as the text for a link in two different spots. For now, lets only talk about the line:
<a href='#' runat='server' onserverclick='UserProfile_Click'>" + posts[i + 3] + " </a>
Since I am generating these controls at pageLoad, I can't make them <asp:Linkbutton>s. And since they are anchor elements, I don't have access to an onCommand attribute or onservercommand attribute.
All I want to do is access the content from inside the specific link tags that I generate on link click and set it as a session variable. That's what I would like my UserProfile_Click function to do. I cant commandargs it in like i can with a linkbutton's
OnCommnad attribute, however.
My fear is that the onserverclick attribute resolves so something else on pageLoad normally and since I am generating it the way I am similar to the way a <asp:linkButton> resolves to a generated JavaScript.
Any help?

@Brunellus
For questions related to ASP.NET use the ASP.NET forum http://forums.asp.net
You should get more, better and faster answers on the other forum. Thanks, ahead of time.
Best Regards,
Kristin
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Issue with "read by other session" and a parallel MERGE query

Hi everyone,
we have run into an issue with a batch process updating a large table (12 million rows / a few GB, so it's not that large). The process is quite simple - load the 'increment' from a file into a working table (INCREMENT_TABLE) and apply it to the main table using a MERGE. The increment is rather small (usually less than 10k rows), but the MERGE runs for hours (literally) although the execution plan seems quite reasonable (can post it tomorrow, if needed).
The first thing we've checked is AWR report, and we've noticed this:
Top 5 Timed Foreground Events
Event     Waits     Time(s)     Avg wait (ms)     % DB time     Wait Class
DB CPU           10,086           43.82
read by other session     3,968,673     9,179     2     39.88     User I/O
db file scattered read     1,058,889     2,307     2     10.02     User I/O
db file sequential read     408,499     600     1     2.61     User I/O
direct path read     132,430     459     3     1.99     User I/OSo obviously most of the time was consumed by "read by other session" wait event. There were no other queries running at the server, so in this case "other session" actually means "parallel processes" used to execute the same query. The main table (the one that's updated by the batch process) has "PARALLEL DEGREE 4" so Oracle spawns 4 processes.
I'm not sure how to fix this. I've read a lot of details about "read by other session" but I'm not sure it's the root cause - in the end, when two processes read the same block, it's quite natural that only one does the physical I/O while the other waits. What really seems suspicious is the number of waits - 4 million waits means 4 million blocks, 8kB each. That's about 32GB - the table has about 4GB, and there are less than 10k rows updated. So 32 GB is a bit overkill (OK, there are indexes etc. but still, that's 8x the size of the table).
So I'm thinking that the buffer cache is too small - one process reads the data into cache, then it's removed and read again. And again ...
One of the recommendations I've read was to increase the PCTFREE, to eliminate 'hot blocks' - but wouldn't that make the problem even worse (more blocks to read and keep in the cache)? Or am I completely wrong?
The database is 11gR2, the buffer cache is about 4GB. The storage is a SAN (but I don't think this is the bottleneck - according to the iostat results it performs much better in case of other batch jobs).

OK, so a bit more details - we've managed to significantly decrease the estimated cost and runtime. All we had to do was a small change in the SQL - instead of
MERGE /*+ parallel(D DEFAULT)*/ INTO T_NOTUNIFIED_CLIENT D /*+ append */
USING (SELECT
      FROM TMP_SODW_BB) S
ON (D.NCLIENT_KEY = S.NCLIENT_KEY AND D.CURRENT_RECORD = 'Y' AND S.DIFF_FLAG IN ('U', 'D'))
...(which is the query listed above) we have done this
MERGE /*+ parallel(D DEFAULT)*/ INTO T_NOTUNIFIED_CLIENT D /*+ append */
USING (SELECT
      FROM TMP_SODW_BB AND DIFF_FLAG IN ('U', 'D')) S
ON (D.NCLIENT_KEY = S.NCLIENT_KEY AND D.CURRENT_RECORD = 'Y')
...i.e. we have moved the condition from the MERGE ON clause to the SELECT. And suddenly, the execution plan is this
OPERATION                           OBJECT_NAME             OPTIONS             COST
MERGE STATEMENT                                                                 239
MERGE                             T_NOTUNIFIED_CLIENT
    PX COORDINATOR
      PX SEND                       :TQ10000                QC (RANDOM)         239
        VIEW
          NESTED LOOPS                                      OUTER               239
            PX BLOCK                                        ITERATOR
              TABLE ACCESS          TMP_SODW_BB             FULL                2
                Filter Predicates
                  OR
                    DIFF_FLAG='D'
                    DIFF_FLAG='U'
              TABLE ACCESS          T_NOTUNIFIED_CLIENT       BY INDEX ROWID    3
                INDEX               AK_UQ_NOTUNIF_T_NOTUNI    RANGE SCAN        2
                  Access Predicates
                    AND
                      D.NCLIENT_KEY(+)=NCLIENT_KEY
                      D.CURRENT_RECORD(+)='Y'
                  Filter Predicates
                    D.CURRENT_RECORD(+)='Y' Yes, I know the queries are not exactly the same - but we can fix that. The point is that the TMP_SODW_BB table contains 1639 rows in total, and 284 of them match the moved 'IN' condition. Even if we remove the condition altogether (i.e. 1639 rows have to be merged), the execution plan does not change (the cost increases to about 1300, which is proportional to the number of rows).
But with the original IN condition (that turns into an OR combination of predicates) in the MERGE ON clausule, the cost suddenly skyrockets to 990.000 and it's damn slow. It seems like a problem with cost estimation, because once we remove one of the values (so there's only one value in the IN clausule), it works fine again. So I guess it's a planner/estimator issue ...

Issue with session management with portal 701 AFP

Hi portal experts,
We are facing an issue with one of our portal 7 ehp1 running the AJAX framework pages.
When logging off, the DSM popup is shown and it disappears. However, the backend sessions are kept alive when we look in transaction SM12, which indicates that the backend session has not been closed (proven in transaction SM04)
The same issue arises when closing a popup window. In this case, no DSM popup is shown and the sessions are maintained as well.
Popup blockers are disabled
Portal url and backend url are in the trusted sites collection
Does this have something to do with the AJAX framework?
Does anyone have any pointers for us?
Thanks in advance!
Regards,
Luk

Hi Tom,
I already came across this note earlier. Currently I'm unable (not allowed) to install the httpwatch utility.
To add to the complexity, web dispatchers are used to access the portal and used between the portal and the backend systems. If I understood correctly, we need to have the ABAP Security Sessions Enabled setting turned on in this sort of landscape. Is this correct?
If it is not required, couldn't we just turn off this setting?
Thanks in advance!
kr,
Luk

Facing issue with concurrent use of session

Hi All,
We are facing concurrent use of session.save call in our LDAP sycn up process. Issue we got while performing performance test for multiple user and issue is at com.day.crx.security.ldap.LDAPUserSync.performUpdate api. Please guide me what could be wrong missing in code due to this Out of box service is showing error.
Below are logs:
02.01.2013 14:32:07 WARN SessionState: Attempt to perform session.save() while another thread is concurrently writing to session-system-1. Blocking until the other thread is finished using this session. Please review your code to avoid concurrent use of a session. (SessionState.java, line 149)
java.lang.Exception: Stack trace of concurrent access to session-system-1
at org.apache.jackrabbit.core.session.SessionState.perform(SessionState.java:147)
at org.apache.jackrabbit.core.SessionImpl.perform(SessionImpl.java:355)
at org.apache.jackrabbit.core.SessionImpl.save(SessionImpl.java:758)
at com.day.crx.security.ldap.LDAPUserSync.performUpdate(LDAPUserSync.java:230)
at com.day.crx.security.ldap.LDAPUserSync.syncUser(LDAPUserSync.java:178)
at com.day.crx.security.ldap.LDAPLoginModule.commit(LDAPLoginModule.java:266)
at sun.reflect.GeneratedMethodAccessor36.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
Regards,
Yogesh

Hey Jorg,
Your comments are much appreicated!
question about the statement "it seems, that you import lot of users concurrently from the LDAP". for us yes we are but the question is should that me problamatic? We do see that it is causing issues for us in CQ5.5 with CRX 2.3.15:
com.day.crx.security.ldap.LDAPLoginModule commit: could not commit: javax.jcr.InvalidItemStateException: property /some/LDAP/group/rep:lastsynced: the property cannot be saved because it has been modified externally.
However we had no such issue with CQ5.3 with CRX2.0
-Faraz

Known Issues with Session Vars and non-IE browsers?

Are there any known issues with non-Internet Explorer
browsers storing or reading session variables. Or loops and
ListGetAt functions? I'm using CF 5.
The code works fine in IE, but not in FireFox or Netscape.
Thanks,
Josh

This testing will not really address any cross domain issues, due to the content being hosted by ScormCloud.
What I found interesting, is that in ScormCloud, using the links below, my results were opposite those that I obtained through my LMS.
In LMS, Captivate 5 worked, Captivate 6 did not in IE8, both worked in FF
In ScormCloud, Captivate 5 did not work in IE8, but worked in FF, and Captivate 6 did work in FF and IE8.
Here are the links:
captivate 5 http://cloud.scorm.com/sc/InvitationConfirmEmail?publicInvitationId=3c04f298-d0db-4d10-ab6 3-80b9aaf2890b
captivate 6 http://cloud.scorm.com/sc/InvitationConfirmEmail?publicInvitationId=e2b05753-2f03-421a-87d 9-62b92ad199af
Thanks for your attention, every bit of information that I can get will help.
Thanks,
SL

Case sensitivity issue with hostname and sessions

I'm running into a strange issue with mixed cases and my webservice.
I have a JAX-WS service running at my host http://sumac.us.oracle.com/interlace/services/AdminService. When I connect my JAX-WS client to this, using the same URL, I have no problems and the session management code seems to work.
However, if I set my JAX-WS client to connect to http://SUMAC.us.oracle.com/interlace/services/AdminService, the session management doesn't work any more. It seems that the client does not send the JSessionID cookie back to the server.
I did notice that my webservice sends the following Set-Cookie header and the host that is sent in the original request is SUMAC.us.oracle.com
Set-Cookie: JSESSIONID=vWjmMJwJXVLf2LBwYN82rxpqbwyKPP4SpD8kd7zLYVkLDJG2Bnnp!-234350174; path=/interlace; HttpOnly
I'm wondering if anyone has run into this. I'm just using the standard JAX-WS client which is generated from a WSDL file. Let me know if this is sufficient information and I'll add more if necessary.
Thanks,
Anil

I tracked this down and the issue has to do with the CookieJar class used to store the cookie information. It seems that this has already been patched in the JAX-WS 2.2.x line, but I believe that JDK 1.6 u21 uses a version of the 2.1.x branch.
The JAX-WS issue number is 834.

Authentication issue with Xcelsius/Portal integration

I am facing an issue with the way we have integrated our Xcelsius dashboard with our corporate portal. I know this probably is more of a SDK question than Administration, but I figured I will ask it here anyway since Tim and some others are diverse enough in their knowledge base. This might be LONG post but please advise if anyone has any good pointers.
We have an Xcelsius dashboard that needs to be served up via our corporate intranet (based on MS Sharepoint 2007). Now we are NOT using the MS Sharepoint Portal Integration Kit, but just doing a basic integration of the SWF call within a web part on Sharepoint. All this means is that within a portlet (web-part) on Sharepoint, I am making a HTTP call to the openDocument URL to invoke the SWF file. So the SWF is actually served up from our Tomcat App Server, and displayed onto this frame within the portal. That is the basic idea.
To achieve this, what I did was write some custom code using the Java SDK to modify the openDocument a little bit. By doing so, I was able to insert some behind-the-scenes-login code wherein no matter who the portal user (Win AD-based) is, he is logged in to BOE as a generic "dashboard-user" and the dashboard is served up. This worked fine for the first dashboard where all we had was SWF and some WebI linking using openDocument (no full-InfoView access).
But in this second dashboard now, what we also have is a hyperlink for users to get to InfoView to do Ad-hoc reporting. What this does is open a child browser window from within the portal (dashboard) --- and it remembers the BOE session for the generic user id "dashboard-user" and logs the end-user in to InfoView using that. But what I actually want is that the end-users, on this new window, should only be prompted at the traditional InfoView logon screen where they can manually enter their Windows AD password and get in. Thus, I would like to keep the dashboard SWF page session separate from the InfoView ad-hoc session, which I cannot seem to do because of the browser relationship and session maintenance.
I am trying to find a way where I can simulate a single sign-on for dashboard viewers on the portal, but at the same time let them jump off to InfoView as themselves.
Any thoughts on how I can do this?
Notes:
We DO NOT have Single Sign-On enabled for InfoView
We are using Windows AD authentication (manual, no SSO)
We are on Tomcat

Sarang Deshpande wrote:
1) If the InfoView app on Tomcat (desktoplaunch) is configured with Vintela, openDocument calls from the portal with automatically work using behind the scenes SSO, correct?
in XIR2 everything that falls under infoview should SSO when infoview is setup for SSO (not the case in XI 3.x)
Sarang Deshpande wrote:
2) What is the best practice when it comes to the service accounts needed? I have implemented Windows AD manual auth already so I have a service account that use for that. Should I be using the same on and making vintela/SSO-specific changes to it...or should I have a separate vintela service account and deal with two different ones..each for a diff purpose?
There is no best practice per se but the less service account the lower your chances to duplicate an SPN, functionally everything seems to work just as well with multiple as it does with 1 (of course with 1 there is less management work) If you click the SSO link in my forum sticky post I have a section explaining this with some suggested methods of deploying a service account(s)
Sarang Deshpande wrote:
3) Other than some minor browser configurations that might be required, is there anything else that I should communicate to the team about what might be required to be "pushed" to users' PCs?
Using the default config nothing should be required on the client machine (unless SSO has been disabled in the browser or you intend to use a url that contains a period ..... (i.e. FQDN or IP) with hostname URL (the default) it should just work.
To note if you have XP SP2 or older there is a microsoft spnego bug you may need to apply a fix if you aren't patched to SP3 (about 5% of our customers run into this).
Regards,
Tim

CSS sticky session when source ip changes

I work for an ASP and am having problems with customers dropping their ssl connection to our app across the internet on wireless connections. The customer was using a verizon wireless card and the ip assigned to his computer was a 70.x.x.x (ipconfig) but I had the user go to http://myipaddress.com because I could not see the ip on the sniff trace. The ip changed in the verizon network to a 66.x.x.x. I was able to trace the 66 ip and found that when the user was dropped his 66 ip changed. Has anyone experienced this?? I am looking for a long term fix. Currently SSL is termingation at the server farm and I am using a sticky source ip at 4 hours. I would be willing to move the ssl to the content switch if needed but what can i do to keep the same session after a source ip change?
Thanks,
Steve
CSSIP
CSSP

by terminating ssl on the css, you could use cookie stickyness which is independent of the ip address.
This would solve your problem for sure.
Without the SSL module, you don't have much option.
If you can't use IP address, you also can't use TCP ports, so the only thing left is the SSL ID.
You could 'advanced-balance ssl' with 'application ssl'.
However, IE browsers are known to change frequently the SSLID even during a single session.
So, by using this optin, you may fix the problem of this particular client but create more issues with other customer.
Unfortunately that's the only choices available.
Gilles.

Issue with sticky sessions

Similar Messages

Maybe you are looking for