The server encountered an unexpected condition which prevented it from fulfilling the request when logging out of Self-Service page for RSA Authentication Manager web tier
Originally Published: 2015-04-14
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Issue
- RSA Authentication Manager 8.x is configured with web tiers.
- Log into the Self-Service page via the virtual hostname.
- Log out by clicking the log off link. An error is displayed:
Error: Internal Server Error
The server encountered an unexpected condition which prevented it from fulfilling the request.
- If the user clicks Log off again, the error is gone.
Cause
If you check the adminserver.log on the web tier, you will find the following message identifying the issue:
####<Apr 10, 2015 9:21:57 AM EDT> <Error> <HTTP> <edavis-vm153.na.rsa.net> <AdminServer> <[ACTIVE] ExecuteThread: '1'
for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <d8b9e2ac4e1b2d06:-7cd0996a:14c9ef65fad
:-8000-000000000000015f> <1428672117179> <BEA-101017> <[ServletContext@452341788[app:console-selfservice module:
console-selfservice-8.1.1.2.0.war path:null spec-version:3.0]] Root cause of ServletException.
com.rsa.command.AuditedLocalizableSystemException: COMMAND_EXECUTION_UNEXPECTED_ERROR
Caused by: com.rsa.common.SystemException: Logout request exceeds the configured time window. The webtier time
is not in sync with the biz-tier or a possible replay
at com.rsa.ims.sso.service.CheckAccessCommand.performExecute(CheckAccessCommand.java:180)
at com.rsa.command.LocalTarget.executeCommand(LocalTarget.java:119)
at com.rsa.ims.command.LocalTransactionalCommandTarget.access$0(LocalTransactionalCommandTarget.java:1)
at com.rsa.ims.command.LocalTransactionalCommandTarget$2.doInTransaction(LocalTransactionalCommandTarget.java:268)
at com.rsa.ims.command.LocalTransactionalCommandTarget$2.doInTransaction(LocalTransactionalCommandTarget.java:1)
at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:130)Resolution
If time needs to be updated on the RSA Authentication Manager servers, proceed with caution. Varying the time too much will cause authentication failures. Contact RSA customer support for more information.
