Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Websphere session error after CLM logout - login

Questions
Tags
Users
Badges
Dieter Paul
(103●1●16●20) Jan 16 '13, 5:19 a.m.
Using CLM as a administrator (admin). Then "logout", the login window appears. Login as another user (user). The last used screen appears.
When using any Link, the following error message appears:

Error 500: com.ibm.websphere.servlet.session.UnauthorizedSessionRequestException: SESN0008E: A user authenticated as user:defaultWIMFileBasedRealm/CN=user,OU=P,OU=Useraccounts,OU=A,DC=B,dc=C,dc=com has attempted to access a session owned by user:defaultWIMFileBasedRealm/CN=admin,OU=P,OU=Useraccounts,OU=A,DC=B,dc=C,dc=com.

Any idea why this happens? It seems that the session is not terminated when logging out.

Using CLM 4.0.1 with Websphere 8.0.0.5 and Win 2008R2 SP1 (Federated LDAP)


1

1 vote

3 answers
12,392 views
1 vote

Accepted answer

Permanent link
Sandy Grewal
JAZZ DEVELOPER (1.6k●12●23) Mar 20 '13, 3:56 p.m.

Enable the fix on WebSphere Application Server (8.0.0.3+) by adding a custom session manager property. Click Application servers > server1 > Session management > Custom properties

and add the InvalidateOnUnauthorizedSessionRequestException = true custom property.

See jazz.net WI: https://jazz.net/jazz/web/projects/Jazz%20Foundation#action=com.ibm.team.workitem.viewWorkItem&id=190040
Dieter Paul selected this answer as the correct answer

1 vote

Comments
Dieter Paul
Mar 21 '13, 3:37 a.m.

Thank youSandy for the answer. It solves the problem for me.

2 other answers

Permanent link
Daniel Toczala
FORUM MODERATOR / JAZZ DEVELOPER (882●1●15●14) Jan 16 '13, 7:40 a.m.
This seems to be working correctly, in that Jazz is not letting the "new" user access anything using the credentials of the older user.  So that sounds correct.  Is the issue here that the old session is not cleared away, and that the new user doesn't start out on their own "launch" page?  I have seen strange behavior when I am logged out by a time out - essentially because I leave a dashboard up overnight.  Since Jazz tries to update the dashboard, it forces me to reauthenticate.  When I do reauthenticate, I often see strange window behavior until I hit the refresh button, or until I navigate to a different screen.,

1 vote

Comments
Dieter Paul
Jan 16 '13, 8:06 a.m.

>> Is the issue here that the old session is not cleared away, and that the new user doesn't start out on their own "launch" page?

Yes, I think this is the problem. And as the result I see only a blank page with the error message and no other action is possible.

When I wait for some time (session timout) than a refresh works and everything is fine.

1 vote

Dieter Paul
Jan 16 '13, 8:37 a.m.

I made some further tests.

This error only occurs, when switching between the applications. This means if I'm working in the ccm application, then logout and login with another user, I still can work in the ccm application with the new user. But when switching to jts then there is this error.

1 vote

Sergio Cedillo
Feb 08 '13, 7:32 p.m.

 Dan, Paul,


Same thing is happening to me, however, in my case it only happens with RM
application. Not with JTS or QM, only with RM. Also using federated LDAP

The message is the same:
"Error 500: com.ibm.websphere.servlet.session.UnauthorizedSessionRequestException: SESN0008E: A user authenticated as anonymous has attempted to access a session owned by user:was-server.svr-domain.mx:10389/cn=Administrador Plataforma Jazz+sn=Administrador+uid=jazzadmin,ou=users,ou=system."
or
"UnauthorizedSessionRequestException: SESN0008E: A user authenticated as anonymous has attempted to access a session owned by user"

My admin userid is: jazzadmin
I'm using CLM 4.0.1 on SuSE Linux 11, WAS8.0.0.3
it only happens when logging out. Actually looks like not really logging out,
it keeps the session open if I go back with the browser.

Any idea or help would be appreciated!

Permanent link
Rajat Singh
(598●3●35●45) Feb 09 '13, 8:55 a.m.
 Please try clearing the browser cookies or use a different supported browser.

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 7,512

Question asked: Jan 16 '13, 5:19 a.m.

Question was seen: 12,392 times

Last updated: Mar 21 '13, 3:37 a.m.

Related questions
Confirmation Cancel Confirm