Session Lost When Submitting Form to Remote Satellite Server via Load Balancer (Doc ID 2259321.1)

Last updated on MAY 01, 2017

Applies to:

Oracle WebCenter Sites - Version 11.1.1.8.0 and later
Information in this document applies to any platform.

Symptoms

Session lost (SS_X_JSESSIONID changed) after form submit on page served by Remote Satellite Server.

- Architecture:
- External LB --> OHS1,OHS2 --> RSS1,RSS2 --> Internal LB --> Sites1,Sites2
- sticky session configured at LBs



1. tcpdumps from External LB show initial request to OHS --> RSS:
  - GET /ss/Sites?lookuphost=www.example.com&lookuppage=/testformpage&d=Desktop HTTP/1.1\r\n
   Cookie pair:SS_X_JSESSIONID=ABCDE12345

2. tcpdumps from Internal LB show the subsequent request from RSS to internal LB:
  - GET /cs/ContentServer?d=Desktop&c=Page&childpagename=TestSite%2FPage%2FTestFormPage&WRAPPERPAGE=TestWrapper&lookuphost=www.example.com&pagename=TestWrapper&lookuppage=%2Ftestformpage
  - Cookie pair: ft_ss=true
  - Cookie2: $Version=1\r\n

3. More information can be seen in the RSS sites.log with the following loggers set to TRACE:
   - com.fatwire.logging.cs.satellite.host=TRACE
   - com.fatwire.logging.cs.satellite.request=TRACE

a. Cookies received by RSS:
     [2017-04-17 21:42:26.355][CS.SATELLITE.REQUEST][TRACE] Method: GET
     [2017-04-17 21:42:26.355][CS.SATELLITE.REQUEST][TRACE] Remote Satellite Server capturing parameters from client for GET
     [2017-04-17 21:42:26.782][CS.SATELLITE.REQUEST][TRACE] Satellite Server handling session
     [2017-04-17 21:42:26.782][CS.SATELLITE.REQUEST][TRACE] Creating a new session for the client
     [2017-04-17 21:42:26.782][CS.SATELLITE.REQUEST][TRACE] Capturing cookies from client in order to proxy them to CS
     ...
     ...
     ...
     [2017-04-17 21:42:26.783][CS.SATELLITE.REQUEST][TRACE] Client sent back the encoded session cookie for Content Server that we had previously given it (SS_X_JSESSIONID=ABCDE12345)

 b. Headers captured by RSS:
     [2017-04-17 21:42:26.783][CS.SATELLITE.REQUEST][TRACE] Capturing header from client: Cookie->....SS_X_JSESSIONID=ABCDE12345....


  c. Cookies sent to Sites by RSS:
    [2017-04-17 21:42:26.787][CS.SATELLITE.HOST][TRACE] Sending cookie to CS : (JSESSIONID=ABCDE12345)

 - This shows that RSS received the correct session cookies and headers and sent them to Sites (via the Internal LB).



4. Subsequent request from internal LB to Sites:
     - GET /cs/ContentServer?d=Desktop&c=Page&childpagename=LFG%2FPage%2FQuestionnairePage&WRAPPERPAGE=LFGWrapper&lookuphost=www.lfg.com&pagename=LFGWrapper&lookuppage=%2Fpublic%2Findividual%2Freachyourgoals%2Fstartwithourquestionnair
       Cookie pair: ft_ss=true
       Cookie2: $Version=1\r\n

5. tcpdumps from Internal LB show response header from Sites to internal LB with a new sessionid set, indicating that the session was "lost":
    - Set-Cookie: JSESSIONID=VWXYZ56789; path=/cs; HttpOnly\r\n

Changes

 Recent Load balancer upgrade

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms