Invalid Session String - WTF?

All of a sudden in our 6.7.1 Solaris installation, users are attempting to kick off a workflow and getting this nonsense:

TeamSite: Wrapper
Error: Invalid Session String

I tried a 'iwreset -a' and a 'iw/server stop/start'. Didn't solve it. WTF??????

Find more posts tagged with

Comments

nipper

Log out of TS and back in.

Migrateduser

Thank goodness I'm not a complete idiot (much like our friends to the very far east) and I tried that, not once but twice and still no luck. Maybe TeamSite is just a piece of ****? Hmmmm....

nipper

What browser are you running ?

It looks like the permissions on TS have been modified. Is there a program that runs and looks for setuid programs ? 6.7.1 has a new way of impersonating the user and so a new process will run. That could be the issue if setuid was taken away

Andy

Migrateduser

We're running IE6. We've been using the same setup since we started with 6.7.1 and it's been working fine. All of a sudden today this is happening. I'm not sure what the setuid stuff you're referring to is.

nipper

among others, httpd/iw-bin/iw_cgi_wrapper.cgi

Think anyone messed with the permissions on iw-home ?

Migrateduser

DANG IT!!!! I hate when I have to thank you for help. You jerk. That was it. I had a script that had wrong permissions this morning and I set permissions on all .ipl and .cgi files to 755. Whoops. I seriously owe you a beer. **** you...

And thank you. What a pain that would have been to figure out...

nipper

DANG IT!!!! I hate when I have to thank you for help. You jerk. That was it. I had a script that had wrong permissions this morning and I set permissions on all .ipl and .cgi files to 755. Whoops. I seriously owe you a beer. **** you...

And thank you. What a pain that would have been to figure out...

Could you speak up, I could not hear that. It almost sounded like a thank you.

Migrateduser

Yeah yeah yeah. I'm glad I never **** you off back in the day when I was **** everyone off. You seriously saved the day - I was not looking forward to going through the wonderful Interwoven support system.

Turn your hearing aid up for a sec...

THANK YOU!

kirthiraman

I have been having hard time figuring why a new session string gets created.
Here is the program

/* ***********************************************************
* @(#)TeamSiteLogin.java 1.1 07/08/20
* Copyright 2005-2007 National Library Of Medicine (NIH/NLM).
* All rights reserved.
* NIH/NLM PROPRIETARY AND CONFIDENTIAL.
* ********************************************************** */
package gov.nih.nlm.teamsite;

import com.interwoven.cssdk.factory.*;
import com.interwoven.cssdk.common.CSClient;
import com.interwoven.cssdk.common.CSException;
import com.interwoven.cssdk.filesys.*;
import com.interwoven.cssdk.access.*;

import java.util.*;

import org.apache.log4j.*;

import java.beans.XMLDecoder;
import java.beans.XMLEncoder;

import gov.nih.nlm.teamsite.xml.ExtendedAttributes;
import gov.nih.nlm.teamsite.NlmConfig;

import java.io.*;

/** ***********************************************************
@Author: Kirthi Raman
** ********************************************************** */
public class TeamSiteLogin {
/**
* username is one of the mandatory fields for
* login.
*/
private String username;
/**
* password is one of the mandatory fields for
* login.
*/
private String password;
/**
* role is one of the mandatory fields for
* login.
*/
private String role;
/**
* A handle to CSClient client for further levels of access.
*/
private CSClient client;
/**
* loghandle to the log interface, used for all logging purposes.
*/
private Logger log;

Properties props = new Properties();
/**
* Creates a new TeamSiteLogin using the mandatory fields
* username, password and role.
*
* @Param username The username for authentication
*
* @Param password The password for authentication
*
* @Param role The role for authorization
*/
public TeamSiteLogin(String username, String password, String role) {
this.log = Logger.getLogger(this.getClass().getName());
this.username = username;
this.password = password;
this.role = role;
}

public String getUserId(){
return this.username;
}

public String getUserPassword(){
return this.password;
}

/**
* Gets an instance of the specified factory.
* All the properties required to initialize the factory of the specified type must be provided
* through the Properties passed to the props argument.
*
* @return a fully-initialized, ready-to-go CSFactory
*
*/
public CSFactory getFactory() {
CSFactory factory = null;
String name="";

try {
props.load(new FileInputStream("/somepath/samples.properties"));
} catch(FileNotFoundException fnf) {
System.out.println("The properties file was not found");
} catch(IOException io) {
System.out.println("Some type of I/O exception has occurred");
}
log.debug("PROPERTIES HERE ");
log.debug("---------------------------------");
Enumeration e = props.propertyNames();
String str="";
while ( e.hasMoreElements() ){
str = (String)e.nextElement();
log.debug(str+": "+props.getProperty(str));
}
//props.list(System.out);
log.debug("---------------------------------");

try {
factory=CSFactory.getFactory(props);
name = factory.getClass().getName();
} catch (CSFactoryInitializationException fie) {
System.out.println("The factory cannot be initialized");
fie.printStackTrace();
name = "";
}

//factory = CSFactory.getFactory(props);
System.out.println("Factory name = "+name);
log.debug("Got Factory Instance:: Factory name = "+name);
return factory;
}
/**
* Initializes CSClient object, that is used to create other kinds of objects.
*
* @throws CSException if the user credentials are not authenticated.
*
*/
public void initClient() throws CSException {
CSFactory factory = null;
boolean authenticated = true;
factory = getFactory();
if(factory == null) {
System.out.println(
"Could not get factory instance... check your parameters");
return;
}
System.out.println("Getting client with username [" + username + "], password ["
+ password + "], and role [" + role+"]");

String username= props.getProperty("username");
String password = props.getProperty("password");
String role = props.getProperty("role");

client = null;

String fact = props.getProperty("com.interwoven.cssdk.factory.CSFactory");

try {
//factory=CSFactory.getFactory(props);
client = factory.getClient( username, role, password, Locale.getDefault(),
"cssdk", null );

} catch ( CSException e ) {
e.printStackTrace();
authenticated = false;
client = null;
log.error("Could not get client instance...", e);
throw new CSException(e);
}

if(authenticated) {
log.debug("Client object obtained");
System.out.println("Client object obtained");
}
}
/**
* Gets the CSClient object that was initialized.
*
* @return a CSClient object, that is used to create other kinds of objects.
*/
public CSClient getClient() {
return this.client;
}

static public void main(String[] args){
TeamSiteLogin tlogin = new TeamSiteLogin("userhere", "passwordhere", "rolehere");
try {
tlogin.initClient();
}catch(Exception exc){ exc.printStackTrace(); }
}
}

I get the following error:

DEBUG: gov.nih.nlm.teamsite.TeamSiteLogin: 1513: Got Factory Instance:: Factory name = com.interwoven.cssdk.factory.CSLocal
Factory
ERROR: gov.nih.nlm.teamsite.TeamSiteLogin: 1559: Could not get client instance...
com.interwoven.cssdk.access.CSInvalidSessionStringException: 52616e646f6d4956172034fa880304b9c28b9128526887111dda1e29942302
2a60d67fde46015cd8be3927f4416f56f2313056bb737cc2aa(Invalid session string)
at com.interwoven.cssdk.access.jni.CSUserJNIServer.beginSessionUsingPassword(Native Method)
at com.interwoven.cssdk.access.jni.AccessServiceAdapterImpl.beginSessionUsingPassword(AccessServiceAdapterImpl.java
:45)
at com.interwoven.cssdk.factory.CSLocalFactory.getClient(CSLocalFactory.java:95)
at gov.nih.nlm.teamsite.TeamSiteLogin.initClient(TeamSiteLogin.java:153)
at gov.nih.nlm.teamsite.TeamSiteLogin.main(TeamSiteLogin.java:181)

samples.properties has the following contents

data.cache.timeoutms=100000000
cssdk.cfg.path=/usr//cssdk.cfg

# use the machine name and HTTP port of the TeamSite server
serviceBaseURL=http://:90

username=usernamehere
password=passwordhere
role=rolehere

#openapi.server.host=hostnamehere
#openapi.server.port=1099

java.library.path=/usr/iw-home/cssdk/:/usr/iw-home/lib/

# creates a CS SOAP factory (We are not using SOAP)
#com.interwoven.cssdk.factory.CSFactory=com.interwoven.cssdk.factory.CSSOAPFactory

namithapai

I had modified the owner and group of the iw-bin folder.

I am getting
TeamSite : Wrapper
Error: Did not get the session string.

for some of the ipl s that I am trying to execute with the wrapper cgi, but others work fine. All the ipl's I am trying to execute are inside the iw-bin folder.

After reading this thread, I reset the permissions to "root" for both owner and group. I also reset the server. I still have the same problems.

Could you please tell me what is the correct owner and group for the iw-bin folder? Also, is there something else that is the problem?

Adam Stoller

I had modified the owner and group of the iw-bin folder.

I am getting
TeamSite : Wrapper
Error: Did not get the session string.

for some of the ipl s that I am trying to execute with the wrapper cgi, but others work fine. All the ipl's I am trying to execute are inside the iw-bin folder.

After reading this thread, I reset the permissions to "root" for both owner and group. I also reset the server. I still have the same problems.

Could you please tell me what is the correct owner and group for the iw-bin folder? Also, is there something else that is the problem?

Did you reset the permissions on any of the files within the iw-bin/ directory? If so - that's likely to be the problem since some of those files need to be run as setuid root (or iwts or iwui) - I believe there's a KB article and/or an appendix in one of the manuals that covers this.

namithapai

I reset the permissions and also logged out and back into teamsite and that seemed to fix the problem.
Thanks