SSO to SSB problems
We've been having an ongoing problem and Sungard has been almost no help at all (P1 ticket opened on 8/11 still not resolved).
Essentially, we are having intermittent problems when a user clicks one of the SSB links in our LCB channels. Most of the time, the user goes right through and there is no problem. However, in about 40% of cases, the user clicks the link and ends up on a page where the top frame loads (the one with the "back to ____ tab" link), but the bottom frame fails to load. If you wait long enough, IE returns a 404 error and Firefox yields what appears to be an Apache or Tomcat error saying the Banner process could not be found.
We believe we have tracked the problem back to the SSO CPIP connection failing. But I'm mostly wondering if anyone else has had this kind of problem before and what they might have done to fix it?
Hack Your Knowledge
Recent blog posts
- Luminis IV GCF Single Sign On with OSX=Failure PC=Working
- Cisco 4710 - Load Balancer
- First CPIP - ERROR
- Luminis Developer Job Available w/ Stable Organization
- Luminus Developer Job
- SSO to SSB mixed content error in IE
- Avoid email sending when add or delete user from group
- Luminis components
- Luminis 4 & Groupwise 7
- Luminis Developer Needed for Position w/ Stable Organization
Developer Links
Poll
- Login or register to post comments
- Older polls
Syndicate
SSO method
To clarify... are you using the new middle tier method or the older SSO method?
We recently found out that middle tier was giving us a similar issue when users had a : colon in their password.
SSO method
We're using CPIP to perform the sign on to SSB. This issue is sporadically effecting all users. It happens to me occasionally and I don't have any special characters in my passwords.
PD
Are you running parallel deployment or not? If so, perhaps it is "1 of x" of your web servers that is having an issue?
Todd
Single deployment
We've only deployed a single Luminis production instance. We are not doing parallel deployment.
Timeouts?
- What are the session timeouts in Luminis and in Banner self-service? The SSB session timeout needs to be at least as long as the Luminis session timeout.
- Are the Luminis server and the SSB server's clocks in sync?
Todd
Timeouts
The two clocks are in sync.
We have lengthy session timeout intervals. Admins 120, employees 60, students 15.
How many SSB servers?
You stated that you only have one Luminis server, but how many SSB servers do you have? Can you force your browser to be on one of them, so you can test them all in turn?
Todd
SSB Servers
We only have one SSB server.
sso to ssb
At one point, our self service server would occasionally stop responding via the configURL. In the apache/tomcat logs on the ssb server, we could see problems calling the package.
es.sctssb.configURL=https://yourserver.edu/yourinstance/gokssso.P_GetConfigVersion2_sserv
If you type https://yourserver.edu/yourinstance/gokssso.P_GetConfigVersion2_sserv?oid=123 in a browser, it should send back info to the screen always.
I'd grep your ssb logs for errors. You might be having intermittent package failures like we did. Or like others stated above, if you have multiple ssb servers, one might be bad and the rest good.