Why does the Portal Authentication Page get displayed very frequently?

I have an application running on iAS. I have integrated it with the iPlanet Portal Server 3.0 sp3a using URLScraper channel.

I am encountering a problem.

While running the Application, intermittently the Authentication Page of the Portal comes up and the user has to log in again.

I have set both the Session idle time and Session max duration as 800 minutes, while this problem occurs anytime, say, within 10 minutes or half an hour of logging-in.

This has led me to think that the session is getting invalidated / destroyed. (Is this reason why the Authentication Page would come up?)

In our Application, in the entry servlet, we are reading the user id from the Portal session.

String lSessionID= new String();

Session lPortalSession= null;

SessionID lsid = null;

HttpSession lSession = null;

lSession = req.getSession();

lsid = new SessionID(req);

lPortalSession = Session.getSession( lsid );

lsUserID = lPortalSession.getClientID().toString();

We are thenceforth, not reading from / writing to the Portal Session. The http session that we have fetched

in lSession is what we are using throughout in all our JSPs and Servlets by doing getSession(false). We are writing and retrievig data from this http session. Is it possible that this could have something to do with the Portal Authentication Page coming up?

This is not occurring after any specific duration or in any specific sequence of activities.

I tried to have a look at the iwtSession log file.

I could see that there were multiple sessions created, even when only one user was logged on. The log does not show these sessions getting destroyed.

Also, there were some sessions that seemed to have got destroyed soon after being created.

e.g.

10/26/01 4:08:39 PM GMT-05:00: Thread[iwtSession.Thread#30,5,main]

SESSION NOTIFICATION : <Session sid="55odrnjfxryafwlgyxpmo0pr5o6119044o@uggc@JvfcreFha.jvfcre.pbz@11000@/jvfcre .pbz" stype="user" cid="VKumar" cdomain="/wisper.com" maxtime="800" maxidle="30" maxcaching="3" timeidle="0" timeleft="47978" state="valid">

<Property name="iwtSession-authLevel" value="0"></Property>

<Property name="ips.cookieSupport" value="true"></Property>

<Property name="authMethName" value="Membership"></Property>

<Property name="ips.clientType" value="genericHTML"></Property>

<Property name="WT.gateway" value="wispersun.wisper.com"></Property>

<Property name="WT.client" value="157.227.15.228"></Property>

</Session>

10/26/01 4:16:11 PM GMT-05:00: Thread[iwtSession.Thread#30,5,main]

SESSION NOTIFICATION : <Session sid="55odrnjfxryafwlgyxpmo0pr5o6119044o@uggc@JvfcreFha.jvfcre.pbz@11000@/jvfcre .pbz" stype="user" cid="VKumar" cdomain="/wisper.com" maxtime="800" maxidle="30" maxcaching="3" timeidle="1" timeleft="47526" state="destroyed">

<Property name="iwtSession-authLevel" value="0"></Property>

<Property name="ips.cookieSupport" value="true"></Property>

<Property name="authMethName" value="Membership"></Property>

<Property name="ips.clientType" value="genericHTML"></Property>

<Property name="WT.gateway" value="wispersun.wisper.com"></Property>

<Property name="WT.client" value="157.227.15.228"></Property>

</Session>

What could be the raeson for the user being displayed the Authentication menu and having to log in again?

[3648 byte] By [708858] at [2007-11-25 4:34:42]
# 1
Your getting the login page because the session is getting destroyed as seen in the log files. Also take a look at the iwtPll log file to see what happens during the time of the session beyong destroyed.
Karthik_Krishnamoorthy at 2007-6-29 2:46:05 > top of Java-index,Web & Directory Servers,Portal Servers...