End User asked to change the password though changed 7 days ago

[Former Member]

Hi Guru's

One of our enduser changed the SAP frontnd password 7 days ago but she was asked to change the password again today..The log file in the default trace file is as below: please guide for avoiding future further problems:

*New security session is not assigned to the http session.*

*[EXCEPTION]*

*com.sap.engine.services.servlets_jsp.server.exceptions.WebSecurityException: Cannot associate security session when the http session has already another security session associated. Logout first. Http session id is [(J2EE53700900)ID1331465750DB20089627299665902813End]. Security session in the http session is [[Security Session (118106) for R0856 created at Thu Jun 12 08:22:35 CDT 2008]]. Security session in thread is [[Security Session (118107) for R0856 created at Thu Jun 12 08:22:35 CDT 2008]].*

*at com.sap.engine.services.servlets_jsp.server.security.policy.PolicyDomain.registerNewSessionIfExist(PolicyDomain.java:99)*

*at com.sap.engine.services.servlets_jsp.server.runtime.client.ApplicationSession.assignSecuritySession(ApplicationSession.java:947)*

*at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.getLoggedInUser(SAPJ2EEAuthenticator.java:149)*

*at com.sapportals.portal.prt.service.authenticationservice.AuthenticationService.getLoggedInUser(AuthenticationService.java:303)*

*at com.sapportals.portal.prt.connection.UMHandler.handleUM(UMHandler.java:96)*

*at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:186)*

*at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:522)*

*at java.security.AccessController.doPrivileged(AccessController.java:242)*

*at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:405)*

*at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)*

*at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)*

*at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)*

*at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)*

*at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)*

*at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)*

*at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)*

*at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)*

*at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)*

*at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)*

*at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)*

*at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)*

*at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)*

*at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)*

*at java.security.AccessController.doPrivileged(AccessController.java:215)*

*at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)*

*at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)*

Thank you

[Former Member]

Hi,

Check the parameter login/password_expiration_time in RSPARAM.

Use RZ10 to change the parameter if it is set to 7 in your case.

Rakesh

[Former Member]

Hi Thanks for the reply,

its not the problem of parameter, the parameter is set to a much higher value.