Issue with Authentication Tokens

Sreenivas_Angara

Content Web Services 10.0

I am able to invoke AuthenticationService-AuthenticateUser using a valid userId and password. I receive a token. When I pass this token back to the service and invoke RefreshToken operation. And I receive the following error.

<S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/">
   <S:Body>
      <S:Fault xmlns:ns4="http://www.w3.org/2003/05/soap-envelope">
         <faultcode>S:Server</faultcode>
         <faultstring>java.lang.NegativeArraySizeException</faultstring>
      </S:Fault>
   </S:Body>
</S:Envelope>

DocumentManagement-GetNodesbyNickanme also fails with the same message.

Any ideas on how to troubleshoot this issue.

Thank you

Sreenivas

 

eLink User

In many companies Livelink or Content Server is served using a Load Balancer so what I would hazard a guess is basically your calls are not getting to a single server.To alleviate it you might try to research these possibilities.

1. Use the IP address or name of the computer who is hosting the WS
2. Check if a LB appliance is involved if so ask the livelink team whether or not they can put you in a "sticky" session.
3. See if the Cookie or OTDS appliance is behaving properly. Are you getting auth service form OTDS or livelink itself?
4. OT has ways to understand a "X Forwarded for" although many leave things at default.
   

I am not familar with what Refreshtoken does but another way is for your livelink admin to put debug=2 and wantlapiLogs=true into the LLserver that is responding to your wsapi call.

FYI every WSAPI call is accompanied with a token that is used to login to a livelink.In livelink the default way it is setup is regardless if you come in form the web  or thru a program a cookie or token is given to your browser.The default setting is puts the cookie info with this mask see my screen cap.Now if you put it as "Do not use IP Address for authentication",if you intercept the cookie and come to livelink form another computer(client) it may work.I do not know the whole things in Security but what is default is the most safe way against spoofing.OT has a article that says you can relax it according to your choice but one should be careful if you go that route.What I really wanted to say if the authtoken is not understood by the server it is going to tell you that

..Appu

I wonder how one could debug livelink  if Fiddler, Wireshark and Softerra LDAP browser was not invented and not free

On Wed, Mar 11, 2015 at 12:43 PM, eLink Entry: Content Web Services Forum <otdncontentwebservices971forum@elinkkc.opentext.com> wrote:

Issue with Authentication Tokens

Posted bysreenivas.angara@tcs.com (Angara, Sreenivas)On 03/11/2015 01:36 PM

Content Web Services 10.0I am able to invoke AuthenticationService-AuthenticateUser using a valid userId and password. I receive a token. When I pass this token back to the service and invoke RefreshToken operation. And I receive the following error.<S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/">    <S:Body>       <S:Fault xmlns:ns4="http://www.w3.org/2003/05/soap-envelope">          <faultcode>S:Server</faultcode>          <faultstring>java.lang.NegativeArraySizeException</faultstring>       </S:Fault>    </S:Body> </S:Envelope>DocumentManagement-GetNodesbyNickanme also fails with the same message.Any ideas on how to troubleshoot this issue.Thank youSreenivas

---

[To post a comment, use the normal reply function]
Forum:	Content Web Services Forum
Content Server:	Knowledge Center