WebSecurityException: Cannot associate security session

[Former Member]

Hi All,

I am getting this strange Exception after adding 2 webdynpro iViews in one page. Below I am pasting the text what I am getting when I try to open that page(3 different times). This Exception I am getting only first time I try to open that page after that how many times I may click its working fine until I close the browser. Again once I open a new browser first time it shows this Exception and works fine later.

FYI: If I add only one webdynpro iView in that page it works fine. I am using NW2004s SP 12.

1) com.sap.engine.services.servlets_jsp.server.exceptions.WebSecurityException: Cannot associate security session when the http session has already another security session associated. Logout first. Http session id is [(J2EE6729100)ID0110482350DB00213697876401447663End]. Security session in the http session is [[<b>Security Session (116)</b> for test created at Wed <b>Aug 22 11:59:18</b> EDT 2007]]. Security session in thread is [[<b>Security Session (117)</b> for test created at Wed <b>Aug 22 11:59:22</b> EDT 2007]].

2) com.sap.engine.services.servlets_jsp.server.exceptions.WebSecurityException: Cannot associate security session when the http session has already another security session associated. Logout first. Http session id is [(J2EE6729100)ID1454641250DB01294928550734371711End]. Security session in the http session is [[<b>Security Session (382)</b> for test created at Wed <b>Aug 22 12:42:57</b> EDT 2007]]. Security session in thread is [[<b>Security Session (383)</b> for test created at Wed <b>Aug 22 12:42:57</b> EDT 2007]].

3) com.sap.engine.services.servlets_jsp.server.exceptions.WebSecurityException: Cannot associate security session when the http session has already another security session associated. Logout first. Http session id is [(J2EE6729100)ID0316373650DB02204634979898341102End]. Security session in the http session is [[<b>Security Session (549)</b> for test created at Wed <b>Aug 22 13:07:44</b> EDT 2007]]. Security session in thread is [[<b>Security Session (550)</b> for test created at Wed <b>Aug 22 13:07:44</b> EDT 2007]].

Did anybody face this problem?

Please advice.

Thanks

Joe

[former_member265210]

have you ativated the parameter SessionIdRegenerationEnabled?

If yes, please try to set it to false and reproduce the issue.

For more details, please check the SAP help documenation below:

http://help.sap.com/saphelp_nw70/helpdata/en/ac/2bc55a78e54d60b561140048eaa80c/frameset.htm

Regards

Shridhar Gowda

[bruno_ricciardi2]

Hi All!!

I find a Note with the correction of this problem: 1068501

Kind Regards!

[Former Member]

Hi,

There is a SAP Note about this problem - 1095702.

Kind regards,

Svilen

[Former Member]

Hi

Have raise a SAP message?

It seems has something to so with browser. In IE 7.0, this problem seldom happens.

[Former Member]

Same issue here...

com.sap.engine.services.servlets_jsp.server.exceptions.WebSecurityException: Cannot associate security session when the http session has already another security session associated. Logout first. Http session id is [(J2EE104512500)ID0833822050DB10867444267334349449End]. Security session in the http session is [[Security Session (2246) for z_userman created at Mon Sep 10 16:02:15 CEST 2007]]. Security session in thread is [[Security Session (2247) for z_userman created at Mon Sep 10 16:02:15 CEST 2007]].
	at com.sap.engine.services.servlets_jsp.server.security.policy.PolicyDomain.registerNewSessionIfExist(PolicyDomain.java:99)
	at com.sap.engine.services.servlets_jsp.server.runtime.client.ApplicationSession.assignSecuritySession(ApplicationSession.java:947)
	at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.getLoggedInUser(SAPJ2EEAuthenticator.java:149)
	at com.sap.tc.webdynpro.serverimpl.wdc.um.ClientUserFactory.getLoggedInClientUser(ClientUserFactory.java:218)
	at com.sap.tc.webdynpro.serverimpl.wdc.um.ClientUserFactory.checkAuthentication(ClientUserFactory.java:249)
	at com.sap.tc.webdynpro.services.sal.um.api.WDClientUser.checkAuthentication(WDClientUser.java:217)
	at com.sap.tc.webdynpro.clientserver.session.RequestManager.checkAuthentication(RequestManager.java:626)
	at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:144)
	at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
	at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
	at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
	at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
	at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)
	at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)
	at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)
	at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)
	at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
	at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
	at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
	at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
	at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
	at java.security.AccessController.doPrivileged(AccessController.java:215)
	at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
	at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

Deployed Software Components:

sap.com  VCFLEX  7.00 SP12 (1000.7.00.12.0.20070509052742)  SAP AG  SAP AG  20070823152721  
sap.com  KMC-COLL  7.00 SP12 (1000.7.00.12.0.20070509052223)  SAP AG  SAP AG  20070823152108  
sap.com  NET-PDK  7.00 SP12 (1000.7.00.12.0.20070509052327)  SAP AG  SAP AG  20070823152123  
sap.com  RTC  7.00 SP12 (1000.7.00.12.0.20070509052421)  SAP AG  SAP AG  20070823152135  
sap.com  CAF-UM  7.00 SP12 (1000.7.00.12.0.20070510102611)  SAP AG  MAIN_APL70VAL_C  20070823134831  
sap.com  EPBC  7.00 SP12 (1000.7.00.12.0.20070509051700)  SAP AG  SAP AG  20070823135135  
sap.com  KM-KW_JIKS  7.00 SP12 (1000.7.00.12.0.20070507080500)  SAP AG  SAP AG  20070823135242  
sap.com  VCFRAMEWORK  7.00 SP12 (1000.7.00.12.0.20070509052750)  SAP AG  SAP AG  20070823152743  
sap.com  BI-REPPLAN  7.00 SP10 (1000.7.00.10.0.20061025062314)  SAP AG  MAIN_APL70VAL_C  20070130173347  
sap.com  VCKITBI  7.00 SP10 (1000.7.00.10.0.20061024214800)  SAP AG  SAP AG  20070130173357  
sap.com  BP_ERP4EXP  60.2 SPnull (1000.60.2..0.20041019151948)  SAP AG  SAP AG  20061120112202  
sap.com  BP_ERP4SLS  60.1.0 SPnull (1000.60.1.0.0.20040531051541)  SAP AG  SAP AG  20061120112123  
sap.com  BI_MMR  7.00 SP12 (1000.7.00.12.0.20070507084106)  SAP AG  SAP AG  20070823134223  
sap.com  BI_UDI  7.00 SP12 (1000.7.00.12.0.20070507084125)  SAP AG  SAP AG  20070823134619  
sap.com  CAF-KM  7.00 SP12 (1000.7.00.12.0.20070510091043)  SAP AG  MAIN_APL70VAL_C  20070823153704  
sap.com  EP-PSERV  7.00 SP12 (1000.7.00.12.2.20070806162029)  SAP AG  SAP AG  20070823153920  
sap.com  EP-WDC  7.00 SP12 (1000.7.00.12.0.20070509051945)  SAP AG  SAP AG  20070823154129  
sap.com  EPBC2  7.00 SP12 (1000.7.00.12.0.20070509051723)  SAP AG  SAP AG  20070823154147  
sap.com  KMC-BC  7.00 SP12 (1000.7.00.12.0.20070509052008)  SAP AG  SAP AG  20070823154548  
sap.com  KMC-CM  7.00 SP12 (1000.7.00.12.0.20070509052145)  SAP AG  SAP AG  20070823154912  
sap.com  LM-PORTAL  7.00 SP12 (1000.7.00.12.0.20070510091752)  SAP AG  MAIN_APL70VAL_C  20070823154926  
sap.com  SAP_JTECHS  7.00 SP12 (1000.7.00.12.7.20070820045144)  SAP AG  SAP AG  20070824112012  
sap.com  LM-TOOLS  7.00 SP12 (1000.7.00.12.0.20070515151430)  SAP AG  MAIN_APL70VAL_C  20070823150109  
sap.com  UMEADMIN  7.00 SP12 (1000.7.00.12.0.20070510104230)  SAP AG  MAIN_APL70VAL_C  20070823150227  
sap.com  RTC-STREAM  7.00 SP12 (1000.7.00.12.0.20070509052421)  SAP AG  SAP AG  20070823150855  
sap.com  VCKITGP  7.00 SP12 (1000.7.00.12.0.20070509052751)  SAP AG  SAP AG  20070823150900  
sap.com  VCKITXX  7.00 SP12 (1000.7.00.12.0.20070509052751)  SAP AG  SAP AG  20070823150904  
sap.com  BASETABLES  7.00 SP12 (1000.7.00.12.0.20070507084030)  SAP AG  SAP AG  20070823124509  
sap.com  SAP-EU  7.00 SP12 (1000.7.00.12.0.20070510092235)  SAP AG  MAIN_APL70VAL_C  20070823161016  
sap.com  WDEXTENSIONS  7.00 SP12 (1000.7.00.12.0.20070510092549)  SAP AG  MAIN_APL70VAL_C  20070823161305  
sap.com  UWLJWF  7.00 SP12 (1000.7.00.12.0.20070509052701)  SAP AG  SAP AG  20070823161115  
sap.com  VCBASE  7.00 SP12 (1000.7.00.12.0.20070509052709)  SAP AG  SAP AG  20070823161229  
sap.com  CORE-TOOLS  7.00 SP12 (1000.7.00.12.0.20070507080100)  SAP AG  SAP AG  20070823124628  
sap.com  JLOGVIEW  7.00 SP12 (1000.7.00.12.0.20070507080300)  SAP AG  SAP AG  20070823124754  
sap.com  SAP_JTECHF  7.00 SP12 (1000.7.00.12.6.20070820044931)  SAP AG  SAP AG  20070824115826  
sap.com  SAP-JEE  7.00 SP12 (1000.7.00.12.0.20070507080200)  SAP AG  SAP AG  20070823125007  
sap.com  BIWEBAPP  7.00 SP10 (1000.7.00.10.0.20061025012900)  SAP AG  SAP AG  20070130172846  
sap.com  BI-BASE-S  7.00 SP10 (1000.7.00.10.0.20061025012900)  SAP AG  SAP AG  20070130172910  
sap.com  BI-IBC  7.00 SP10 (1000.7.00.10.0.20061025005900)  SAP AG  SAP AG  20070130172933  
sap.com  BI-WDALV  7.00 SP10 (1000.7.00.10.0.20061025062313)  SAP AG  MAIN_APL70VAL_C  20070130173017  
sap.com  SAP-JEECOR  7.00 SP12 (1000.7.00.12.0.20070507085421)  SAP AG  SAP AG  20070823125847  
sap.com  JSPM  7.00 SP12 (1000.7.00.12.0.20070507080400)  SAP AG  SAP AG  20070823113454  
sap.com  ADSSAP  7.00 SP12 (1000.7.00.12.0.20070507083121)  SAP AG  SAP AG  20070823133958  
sap.com  CAF  7.00 SP12 (1000.7.00.12.0.20070510102601)  SAP AG  MAIN_APL70VAL_C  20070823145444

[Former Member]

Does anybody know solution for this issue?

[Former Member]

We have the same problem, it started when we upgraded the portal from SPS09 to SPS12... It happens "sometimes" - meaning not every time, but in like 1 out of 5 times we launch a webdynpro application, with 2 iViews on a page, through the portal navigation...

Does anyone have a fix for this issue?

[Former Member]

Hi,Sreekanth

We are facing the same problem, the version of our EP is 2004s SP12 either. Our EP is installed on HP-UX.

Beside this, our EP is writing log to the j2ee/cluster/sever0/log/system/userinterface.log file all the time. The log is like :

Session expiration: Request with URI= was sent to expired session: Destruction reason=Destroyed by a logoff request, destruction timestamp=Thu Aug 16 23:36:26 GMT+08:00 2007. Please restart the application. Hint: see SAP note 842635 for more details on session expiration. RID=

I think there maybe some thing to do with the problem.