Validating and invalidating a session

I now have a login jsp working and when the user enters the right username and password the user will be directed to the appropriate page. I have included the following code in each of my pages to prevent caching:
<%
response.setHeader("Cache-Control","no-cache,no-store,must-revalidate");
response.setHeader("Pragma","no-cache");
response.setDateHeader ("Expires", -1);
response.setIntHeader("max-age", 0);
response.addHeader("cache-Control", "private");
%>
I also have a logout jsp where I invalidate the session which looks like this:
<body>
<% request.getSession().invalidate();%>
<% response.sendRedirect(response.encodeRedirectUrl("login.jsp"));
</body>
I continue to have problems in that if the user once loggin out and going the an invalidation in the logout.jsp, they are still able to reload the admin page by pressing the IE browser BACK button and then clicking on REFRESH.
Could someone please let me know how to properly validate and invalidate the session and where I should do this (which JSP)???
I want to make sure that there is no way possible to get back to that admin page once the user has logged out. With the exception of loggin back in of course.
Thank you.

You should use POST actions, and all problems solved.

Similar Messages

What are valid and invalid email address characters

What are valid and invalid email address characters in Exchange 2010, for example can you have Conan.O'[email protected] is there a document that shows the valid and invalid sysmbols?

Hi
The format of email addresses is
local-part@domain where the local-part may be up to 64 characters long and the
domain name may have a
maximum of 253 characters - but the maximum 256 characters length of a forward or reverse path restricts the entire email address to be no more than 254 characters.[1]
The formal definitions are in RFC 5322 (sections 3.2.3
and 3.4.1) and RFC 5321 - with a more readable form given in
the informational RFC 3696[2]
and the associated errata.
Local part
The local-part of the email address may use any of these
ASCII characters
RFC 5322 Section
3.2.3:
Uppercase and lowercase English letters (a–z, A–Z) (ASCII: 65-90, 97-122)
Digits
0 to
9 (ASCII: 48-57)
Characters
!#$%&'*+-/=?^_`{|}~ (ASCII: 33, 35-39, 42, 43, 45, 47, 61, 63, 94-96, 123-126)
Character
. (dot, period, full stop) (ASCII: 46) provided that it is not the first or last character, and
provided also that it does not appear two or more times consecutively (e.g. [email protected] is not allowed.).
Special characters are allowed with restrictions. They are:
o
Space and
"(),:;<>@[\] (ASCII: 32, 34, 40, 41, 44, 58, 59, 60, 62, 64, 91-93)
The restrictions for special characters are that they must only be used when contained between quotation marks, and that 3 of them (The
space, backslash \ and
quotation mark " (ASCII: 32, 92, 34)) must also be preceded by a backslash
\ (e.g.
A quoted string may exist as a dot separated entity within the local-part, or it may exist when the outermost quotes are the outermost characters of the local-part
(e.g. abc."defghi"[email protected] or
"abcdefghixyz"@example.com are allowed. Conversely,
abc"defghi"[email protected] is not; neither is
abc\"def\"[email protected]). Quoted strings and characters however, are not commonly used.
RFC 5321 also
warns that "a host that expects to receive mail SHOULD avoid defining mailboxes where the Local-part requires (or uses) the Quoted-string form".
The local-part "postmaster" is treated specially - it is case-insensitive, and should be forwarded to the server's administrator. Technically all other local-parts
are case sensitive, therefore [email protected] and [email protected] specify different mailboxes. However most organizations treat uppercase and lowercase letters as equivalent, and also do not allow use of the technically valid characters
(space, ? and ^). Organizations are free to restrict the forms of their own email addresses as desired, e.g.,
Windows Live Hotmail,
for example, only allows creation of email addresses using alphanumerics, dot (.), underscore (_)
and hyphen (-).[3]
Systems that send mail must be capable of handling outgoing mail for all valid addresses. Contrary to the relevant standards, some defective systems treat certain
legitimate addresses as invalid and fail to handle mail to these addresses. Hotmail, for example, refuses to send mail to any address containing any of the following standards-permissible characters:
!#$%*/?^`{|}~
Domain part
The domain name part of an email address has to conform to strict guidelines: it must match the requirements for a
hostname,
consisting of letters, digits, hyphens and dots. In addition, the domain part may be an
IP address
literal, surrounded by square braces, such as jsmith@[192.168.2.1], although this is rarely seen except
in email spam.
Examples
Valid email addresses
<tt>[email protected]</tt>
<tt>[email protected]</tt>
<tt>[email protected]</tt>
<tt>much."more\ unusual"@example.com</tt>
<tt>very.unusual."@"[email protected]</tt>
<tt>very."(),:;<>[]".VERY."very@\\\ \"very"[email protected]</tt>
Invalid email addresses
<tt>Abc.example.com</tt> (an @ character must separate the local and domain parts)
<tt>[email protected]</tt> (character dot(.) is last in local part)
<tt>[email protected]</tt> (character dot(.) is double)
<tt>A@b@[email protected]</tt> (only one @ is allowed outside quotation marks)
<tt>a"b(c)d,e:f;g<h>i[j\k][email protected]</tt> (none of the special characters in this local part
is allowed outside quotation marks)
<tt>just"not"[email protected]</tt> (quoted strings must be dot separated, or the only element making
up the local-part)
<tt>this is"not\[email protected]</tt> (spaces, quotes, and backslashes may only exist when within
quoted strings and preceded by a slash)
<tt>this\ still\"not\\[email protected]</tt> (even if escaped (preceded by a backslash), spaces, quotes,
and backslashes must still be contained by quotes)
Terence Yu
TechNet Community Support

Needto find no. of valid and invalid objects in a tablespace

Hi,
Can anyone tell me how to find the no. of objects that are valid and invalid in a tablespace.Below are the 2 tablespace that i want the info for
SQL> select
2 fs.tablespace_name "Tablespace",
(df.totalspace - fs.freespace) "Used MB",
3    4 fs.freespace "Free MB",
5 df.totalspace "Total MB",
6 round(100 * (fs.freespace / df.totalspace)) "Pct. Free"
7 from
8 (select
9 tablespace_name,
10 round(sum(bytes) / 1048576) TotalSpace
11 from
12 dba_data_files
13 group by
14 tablespace_name
15 ) df,
16 (select
17 tablespace_name,
18 round(sum(bytes) / 1048576) FreeSpace
19 from
20 dba_free_space
21 group by
22 tablespace_name
23 ) fs
24 where
25 df.tablespace_name = fs.tablespace_name
26 and fs.tablespace_name IN ('FPR_GL_I02','FPR_GL_D02');
Tablespace                        Used MB    Free MB   Total MB Pct. Free
FPR_GL_I02                             18       4500       4518        100
FPR_GL_D02                           1980     119250     121230         98Thanks in advance...........

You can try with below query too.
idle> select b.object_name,b.object_type,b.status,b.owner,a.tablespace_name from dba_objects b, dba_segments a where b.status='INVALID' and a.tablespace_name='USERS';
OBJECT_NAME OBJECT_TYPE STATUS OWNER TABLESPACE
QSRO_DDL_TRIG TRIGGER INVALID DB_QIPS USERS
QSRL_USRDT_TRIG TRIGGER INVALID DB_QIPS USERS
QSRL_DDL_TRIG TRIGGER INVALID DB_QIPS USERS
DEMO VIEW INVALID DAVID USERS
QSRO_DDL_TRIG TRIGGER INVALID DB_QIPS USERS
QSRL_USRDT_TRIG TRIGGER INVALID DB_QIPS USERS
QSRL_DDL_TRIG TRIGGER INVALID DB_QIPS USERS
DEMO VIEW INVALID DAVID USERS
QSRO_DDL_TRIG TRIGGER INVALID DB_QIPS USERS

Select option for selection valid and invalid data.

Hi All,
Any one pleas help in validating following case :-
In the selection screen there is a select option for equipment number like EQUI-EQUNR
if any user will give wrong equipment no. It will generate an error message from the range of equipment no.
and put it to an internal table it error.
and if any value in between the select option(equipment no) is correct then that value I need to proceed for some other logic.
Iu2019d appreciate if some one help me in generation code for the above case or logic.
Thanks

Hi,
Use FM 'RS_REFRESH_FROM_SELECTOPTIONS'
DATA: RSPAR TYPE STANDARD TABLE OF RSPARAMS.
 REFRESH RSPAR.
 CALL FUNCTION 'RS_REFRESH_FROM_SELECTOPTIONS'
 EXPORTING
 CURR_REPORT = 'prog name'
 IMPORTING
 SP =
 TABLES
 SELECTION_TABLE = RSPAR
 EXCEPTIONS
 NOT_FOUND = 1
 NO_REPORT = 2
 OTHERS = 3.
 IF SY-SUBRC <> 0.
 MESSAGE I000.
 ENDIF.
In table parameter you ll get the all entries entered .
Check out the values with respective tables.If value is not correct tk it into internal table
else proceed ahead. You can Remove incorrect entries this way.
regards,
ajit.

Invalid Kiosk session configuration...

Guys,
I have a Solaris-based SRSS 4.2 installation. I have Global Kiosk set to connect to VMware View server (and it works fine).
I have certain people that need to connect to their Linux desktops. So I created another Kiosk configuration using the Kiosk Mode Generic Session (http://wiki.sun-rays.org/index.php/SRSS_Addon:_Kiosk_Mode_Generic_Session)
My generic.conf looks like this:
KIOSK_SESSION_EXEC=$KIOSK_SESSION_DIR/generic-session
KIOSK_SESSION_LABEL="SGD"
KIOSK_SESSION_DESCRIPTION="Provides an SGD X session for running a Kiosk script."
KIOSK_SESSION_ARGS="/usr/bin/firefox http://sgdserver/sgd"
KIOSK_SESSION_PROTOTYPE=generic-session
I have then ran these commands to import the configuration and assign it to certain users:
# utkiosk -i SGD -f generic.conf
# utkiosk l
SGD
session
Now assign the SGD configuration to users token:
# utkioskoverride -r Payflex.xxxxxxx -s kiosk -c SGD
Heres the kick If I set Global Kiosk to SGD, it works fine and brings up SGD login page as it is supposed to.
If I set Global Kiosk back to View and try to use a smartcard to bring up SGD for the particular user, I get:
Login Incorrect, please try again
then an error stating:
Error starting Kiosk session: Invalid Kiosk session configuration
In the logs I see this:
kiosk:initsession[14382]: [ID 702911 user.error] Error: $KIOSK_SESSION not specified
Jan 12 15:30:55 dsys-vfrb-sray1 kiosk:initsession[14383]: [ID 702911 user.error] Error: failed to load Session Descriptor
Jan 12 15:30:55 dsys-vfrb-sray1 dtlogin[14250]: [ID 705508 user.error] pam_kiosk: pam_sm_open_session: Child process /opt/SUNWkio/lib/initsession failed with exit code 1.
Any ideas? It works fine in my Lab, but at a customer site, it does not work!
Thank you in advance for your help!

Vitaly91 wrote:
I have a Solaris-based SRSS 4.2 installation. I have Global Kiosk set to connect to VMware View server (and it works fine).
I created another Kiosk configuration using the Kiosk Mode Generic Session (http://wiki.sun-rays.org/index.php/SRSS_Addon:_Kiosk_Mode_Generic_Session)
My generic.conf looks like this:
KIOSK_SESSION_EXEC=$KIOSK_SESSION_DIR/generic-session
KIOSK_SESSION_LABEL="SGD"
KIOSK_SESSION_DESCRIPTION="Provides an SGD X session for running a Kiosk script."
KIOSK_SESSION_ARGS="/usr/bin/firefox http://sgdserver/sgd"
KIOSK_SESSION_PROTOTYPE=generic-session
I have then ran these commands to import the configuration and assign it to certain users:
# utkiosk -i SGD -f generic.confUnfortunately Kiosk has two kinds of *.conf files: session descriptors (see the kiosk(5) man page) and session configurations (see the session.conf(4) man page). And these types are rather similar - some settings can be in the descriptor as default, but also in the session configuration. The generic.conf you have is a session descriptor. Those must be stored into /etc/opt/SUNWkio/sessions/. But for import into utkiosk you need a session configuration. Probably utkiosk should do more validation of the configuration you are importing to protect against this confusion.
The generic session is intended for configuring any command to be executed from the admin UI. If you know your command and need a prototype, you should go the extra step and make a specific session. Here is how:
Rename your file to /etc/opt/SUNWkio/sessions/SGD.conf and change it to be:
KIOSK_SESSION_EXEC=/usr/bin/firefox
KIOSK_SESSION_LABEL=SGD
KIOSK_SESSION_DESCRIPTION=Provides an SGD X session for running a Kiosk script.
KIOSK_SESSION_PROTOTYPE=SGDAlso rename your /etc/opt/SUNWkio/prototypes/generic-session directory to /etc/opt/SUNWkio/prototypes/SGD, as per the last line above.
You can leave the KIOSK_SESSIONS_ARGS line in the file, if you wish, but it will just be a default, so I'll show how to set the arguments via utkiosk.
To verify that you have set up the descriptor correctly, use
/opt/SUNWkio/bin/kioskdesc print SGD Now create your session configuration:
# utkiosk -i SGD <<!
KIOSK_SESSION=SGD
KIOSK_SESSION_ARGS=http://sgdserver/sgd
! Of course you can also put these two lines into a file and use it with the -f argument to utkiosk.

Invalid Portal Session

While browsing through the forums, I got the message below :
Invalid Portal Session*
An error was encountered while processing your Portal request, because your portal session is no longer valid. You have been logged out and you will automatically be redirected to the OracleAS Portal home page in 30 seconds. Click OracleAS Portal home page to go directly to the OracleAS Portal home page, or if your browser does not automatically redirect you. If you continue to have problems while accessing OracleAS Portal, close all your browser instances and try again.
Nicolas.

user11945767 wrote:
Hello,
In our case, I have tried Opera, Safari, Chrome and Mozilla browsers and none of them show 'Invalid Portal Session' error. It only occurs with Microsoft Internet Explorer. And this happens consistently with IE. Not a single time it succeeds unless F5/Refresh is hit.
What could be the reason for this and how can it be resolved. We are running Oracle 10.1.2 AS.
Thanks.Nicolas asked the question about the Oracle Forums. Since this is a Forums Community issue, he correctly asked it in the "Community Feedback and Suggestions (Do Not Post Product-Related Questions Here)" Forums area.
You seem to be asking the question about the Oracle Application Server Portal product. Even though it appears your question and Nicolas' may be related, you are probably asking the question in the wrong area.
Your question is likely better asked
1) of Support (by opening a service request) and/or
2) asking in http://forums.oracle.com/forums/category.jspa?categoryID=193 and/or
3) asking in http://forums.oracle.com/forums/category.jspa?categoryID=196

The certificate is not valid and cannot be used to verify the identity of this website

Question posted in Stack Overflow too: java - How to solve "The certificate is not valid and cannot be used to verify the identity of this website" error? - St…
The question is, How to solve "The certificate is not valid and cannot be used to verify the identity of this website" error?.
Here are the details:
I have a signed applet that has been working fine, until I updated Java to 8u25 (1.8.0_25-b18). Now, the application shows an alert message "Do you want to continue? The connection to this website is untrusted". There is a note in this message too, "The certificate is not valid and cannot be used to verify the identity of this website".
The applet is loaded without problems. But when the user tries to use a specific function of that application, the warning message is displayed.
I've checked the java console when this happens, and this warning message is displayed right after these lines:
security: Obtain certificate collection in SSL Root CA certificate store
security: Invalid certificate from HTTPS server
network: Cache entry not found [url: https://sub.domain.net:9876, version: null]
The application is downloaded from a different domain, say "https://app.domain.net/ .....", so no jars are downloaded from "https://sub.domain.net:9876 ", but the applet connects to "https://sub.domain.net:9876 " to send/receive data.
The applet is signed correctly, and so far, it meets all the security requirements according to Java. This issue seems to happen when the application tries to connect internally with an HTTPS url like https://sub.domain.net:9876. That sites' SSL certificate is valid, issued by GoDaddy and has not expired.
Again, this started to happen after updating my JRE to 8u25. I've tested adding the offending URL to Java security exception list, with no success.
Here are a few screenshot of this problem:
This is the warning message displayed:

For what it's worth we discovered what the issue was. When we installed the new certificates onto our servers we also discovered that you have to install the certificates of all intermediate servers listed in your certificate. This mean that all URLs listed on your certificate, have to have the intermediate certificate for the certificate authority installed. This also includes all the Alt Names of your domains, even if they do not use the applet.

When I open firefox I get this message; The address isn't valid The URL is not valid and cannot be loaded.

I get this message whenever I open firefox or a new tab. Anything I had tabbed to the top has gone, and the original homepage which shows all my recent visits is invalid. The full message is:
The address isn't valid
The URL is not valid and cannot be loaded.
Web addresses are usually written like http://www.example.com/
Make sure that you're using forward slashes (i.e. /).
Try Again.
Help mee!!!

Hi fredmcd-hotmail
It's not that I'm typing anything in wrong, it's when I first open Firefox or a new tab. Instead of displaying the firefox page showing my recently viewed websites it's just an invalid URL. Why would I be blocked from this page?
Thanks

I am getting an Alert, that says, "The URL is not valid and cannot be loaded.

Can't think of anything else to say.

i get the same message, "The URL is not valid and cannot be loaded.".
i've narrowed it down a bit more.
i've got a freshly installed firefox US 9.0.1 on a freshly installed windows xp pro sp3 US (fully patched). a freshly installed separate firefox 3 install is on this machine too, but that does not seem relevant.
the problem only occurs when i load https-urls with invalid certificates (eg self-signed) in the case that i use a firefox with a non-default profile.
so the "default" profile displays a "this page cannot be trusted" screen as expected, i can open the url. but in a different firefox instance/profile, when going to the same https url, i get the error popup. the firefox profile/instance is started like this: firefox.exe -P dev -no-remote.
i have reinstalled firefox 9 & 3 because of this issue. the problem stayed. i didn't remember whether i could load the https url with the default before the reinstall. perhaps i couldn't...

Choice between start new session and restore previous session

I have refused to update firefox since 2.0.0.14. That's mid 2008. The reason? Because EVERY update I have seen has a critical flaw and I am sick of it never having been addressed. Oh, I have tested it many times. I am impatient in general. I have allowed it to update just now for instance with the naive hope that MAYBE you'd put it back the way it should be, and NOPE, you STILL have the critical epic fail that you introduced some time after 2.0.0.14, and I then had to uninstall firefox and reinstall my copy of 2.0.0.14 and restore my passwords and bookmarks from the key3.db and bookmarks.htm files (which also aren't compatible with the later versions, and that's bad too since it was more efficiently done and more comprehensible and more compatible with common knowledge that way, what the hell is a .json file anyway????), and I am sick of it. It's getting harder and harder to use 2.0.0.14, things constantly say snide things like 'upgrade (downgrade) to a modern browser, your browser is not supported', 'you are using md5 for certificate validation, are you insane?', that sort of thing, and things often don't work right, but it is WORTH every bit of it to avoid the critical epic fail.
Ok, enough suspense. That critical epic fail is this: when I start firefox after the previous session crashed (or was killed by the task manager), it does NOT give the NICE CHOICE 2.0.0.14 does between "begin new session" and "restore previous session". It automatically restores the previous session. Do you have any idea how many times I have gone to a webpage only to observe it is infected with a virus which it tries to put on my computer, or just a horrible page with a horrible script that seems to involve an infinite loop or at least something incredibly excessive and inefficiently coded that totally eats up the CPU processing power and I BARELY managed to KILL firefox with the task manager? Do you think I want it to go right back to loading that page when I start firefox again? Do you have the BATSH*T INSANE notion that I should always WANT to restore my previous session? Well I DON'T! I killed it with good reason in the first place. 100% of the time mozilla gets killed by the task manager and 90% of the time it crashes, I don't WANT to restore my previous session. Is there some secret hidden feature representing providing this choice that 2.0.0.14 provided that is by default DISABLED that I can maybe enable, or do I have to continue using 2.0.0.14 and watch as more and more and more things refuse to work with it?
Also, you need to have the "stop" button within reach of the bookmarks and the left side of the address bar, not on the far right of the screen. And I'd also rather not have it be in the same place as the refresh button, though I understand the justification for having the stop button become the refresh button. Is there any way I can also have the "forward, back, stop, refresh" buttons all together and in the most convenient place as they were in 2.0.0.14 while I'm at it?

Set the pref browser.sessionstore.max_resumed_crashes to 0 on the about:config page to get the about:sessionrestore page immediately with the first restart after a crash has occurred or the Task Manager was used to close Firefox.
*http://kb.mozillazine.org/browser.sessionstore.max_resumed_crashes
That will allow you to deselect the tab(s) that you do not want to reopen, but will allow to reopen other tabs.
See:
* http://kb.mozillazine.org/Session_Restore#Restoring_a_session_after_a_crash
* http://kb.mozillazine.org/Browser.sessionstore.max_resumed_crashes

"The interface name given does not specify a valid and existing interface."

Hi nice guys,
I'm trying to use the XNET APIs to set Master task to Slave with LIN protocol. As I have no Experience before, there's something problem like the Interface of the NI USB-8476S can't be detected. The prompted windows presents following infomation:
Error -1074384758 occurred at XNET Create Session (Signal Output Single-point).vi:1
Possible reason(s):
NI-XNET: (Hex 0xBFF6308A) The interface name given does not specify a valid and existing interface. Solution: Use a valid and existing interface. These can be obtained using MAX, XNET system properties, or the LabVIEW XNET Interface IO name. If you are using CompactRIO, refer to the topic "Getting Started with CompactRIO" in the NI-XNET Hardware and Software Help.
but in the NI MAX, the device is detected as "LIN0". Even the interface input control in the NI examples shows the error. But if I take the CAN Frame API, it works well.
Does anyone have some idea. I'm so preciate. Tanks in advance.
best regards
Melo

Melonetern,
When do you receive these errors? Does this happen when you try to run your code or our examples? On top of that, does this error happen immediately or does it take a while? Is this happening in LabVIEW or another interface?
If you could give us the versions of software you are using as well as the XNET driver versions that would be very helpful.
Matt J
Professional Googler and Kudo Addict
National Instruments

How to find the invalid form session in oracle Apps

Oracle Apps R12
Hai All
How to find the invalid form session in oracle Apps R12 and How to Kill the that.
Thanks & Regards
Srikkanth.M

Hi,
Please refer to these docs (for 11i and R12).
How to Kill Inactive Sessions Based on the Information in the Monitor User Form [ID 103516.1]
Script: How To Identify The apps User Using The O/S PID For Forms Users In 11i [ID 185762.1]
Thanks,
Hussein

Authentication Fault: Invalid User Session Token

Hi,
I am trying to protect a call to third party webservices using OWSM and OAM. I followed the steps mentioned in Oracle Web Services Manager
Deployment Guide to integrate OAM in OWSM, but not able to make any break through. I am getting following error if I test my web service using OWSM's inbuilt test tool:
<SOAP-ENV:Envelope
xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode
xmlns:p="http://schemas.oblix.com/ws/2003/08/Faults">p:Client.AuthorizationFault</faultcode>
<faultstring>Authentication Fault: Invalid User Session Token</faultstring>
null</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
In gateway.log file, I get following oneliner message:
security.SimpleXMLCredsExtractor - SimpleXMLCredsExtractor failed to Extract creds.
I am using standalone OWSM installation.
Installed OAM SDK on the same machine of OWSM.
Added OAM SDK libraries into OWSM's path.
Please advise as I have already wasted 3-4 weeks into it.
.. Paresh
Edited by: user10301925 on Sep 29, 2009 2:24 AM
Edited by: user10301925 on Sep 29, 2009 2:24 AM

Hi,
Yes, I have registered the service in OWSM and calling that service through OWSM testing tool only...
Following is the request message:
<?xml version="1.0" encoding="UTF-8" ?>
- <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
- <soap:Header>
- <wsse:Security env:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
- <wsse:UsernameToken xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:Username>owsmuser</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">welcome11</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
- <soap:Body xmlns:ns1="http://service/">
<ns1:getDateTime />
</soap:Body>
</soap:Envelope>
Please advise.
.. Paresh

ECC-- SAP PI-- Successfactor Integration: Invalid SFAPI session

Hello Experts,
 I am working on EmployeeData Synchronization interface the content of which is predelivered from SAP.
I configured the interface and while testing
as first step I was able to retrieve the session ID from Successfactor,
but using the session ID retrieved from Successfactor cloud application when I am trying to upsert data in the second step I am getting an error "Invalid SFAPI session".
How can I overcome this error?
I have done my research on the SDN and went through the blogs but for not much use.
I am sure about the content and the version being used by me as the correct one.
Has anybody seen this error and if yes how did you overcome the same?
Please let me know.
One point that I have to make is that since I was able to retrieve the session ID I did not install the certificates from Successfactors.
Is installing the certificates mandatory and if yes which step is this being referred?
Any help is really appreciated.
Anu Patyath

First of all, you should get it running with SOAP UI:
Please make sure, you got those steps right behind each other:
login
upsert
logout
The important step is to set "Main HTTP session":
You can use the payloads for login, upsert and logout as they are generated by SOAP UI when importing the WSDL.
e.g. upsert:
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:urn="urn:sfobject.sfapi.successfactors.com">
 <soap:Header/>
 <soap:Body>
 <urn:upsert>
 <urn:type>User</urn:type>
 
 <urn:sfobject>
 <urn:upsert>
 <urn:type>User</urn:type>
 
 <urn:sfobject>
 <urn:type>User</urn:type>
 <urn:type>User</urn:type>
 <urn:status>active</urn:status>
 <urn:externalId>testuser</urn:externalId>
 <urn:username>testuser</urn:username>
 </urn:sfobject>
 <urn:processingParam>
 <urn:name>sendWelcomeMail</urn:name>
 <urn:value>true</urn:value>
 </urn:processingParam>
 </urn:upsert>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>

After updating to firefox 9 when i click on the "home" icon i get an alert that the url is not valid and can't be loaded. Why?

my computer updated to firefox 9. update was ok, but now when i click on the "home" icon, i get an alert that the url is not valid and cannot be loaded. everything is good to go as far as web surfing and so forth, but i want the firefox start page as my home page. also the private browsing option won't work because of the invalid url.

Hi ozzie427,
What URL do you have bookmarked as your home page? You might want to look at the Knowledge Base article [[How to set the home page]]. There are steps in there to restore the home page to default. I would try that first to see if it clears up any strangeness. If that works, you can set the home page to anything you like.
Hopefully this helps!

Validating and invalidating a session

Similar Messages

Maybe you are looking for