HPSM - SSO - ESS session problem - urgent

[dfilipovic2]

Hello guys,

I need help with one problem, we are using:

1. NTLM authentication

2. Apache24 for SSO
3. Tomcat for web server

Problem is when user opens browser and HPSM ess portal, then closes browser without logging out.

When he opens browser (1 minute after) and tries to log in he gets message "unauthorized" which is tomcat message.

On tomcat we have setup (default) paremeter:

    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />

This should kill session after 20 seconds... did anyone got this problem and how to solve it?

Best regards,

Dino

[Kelalek2]

Please provide more information - what is the SM version, have you done any changes lately (installed patches, renwed certificates etc)?

I mean, did this situtation escalate "out of blue" or occured after some other event?

[brettalanchristlieb]

So the steps are:

1. The user is automatically logged in to Service Manager ESS via TSO

2. The user "logs out" of their session by clicking the the browser X instead of selecting 'Logout). 

3. The user attempts to log back in right away and gets an 'unauthorized' message

When logging out using the X the session is abnormally terminated. It can take up to 15 minutes for the orphaned session to be removed. My question is what happens if the user waits - say - 30 minutes and tries to log back in? Do they get the same error?

You can make adjustments to how SM cleans up orphaned sessions in the web.xml and sm.ini.

[dfilipovic2 · Accepted solution]

Hello,

we have modified so that users are logged out in 5 minutes (session timeout) in HPSM and now everything is OK.

Best regards,

Dino