APAR status
Closed as program error.
Error description
When Portals session protection feature detects an invalid session, it should invalidate the portlet web module sessions and the Portal session. Due to an invalid order of code execution, only the Portal session is invalidated and all portlet sessions remain on the server. This can lead to the case that the old session data is picked up if after invalidation a client comes back with the same session id.
Local fix
Problem summary
When Portals session protection feature detects an invalid session, it should invalidate the portlet web module sessions and the Portal session. Due to an invalid order of code execution, only the Portal session is invalidated and all portlet sessions remain on the server. This can lead to the case that the old session data is picked up if after invalidation a client comes back with the same session id.
Problem conclusion
Fixed code to change order to first invalidate portlet sessions. Manual Steps: None Failing Module(s): Engine: State handling Affected Users: All Users Version Information: Portal Version(s): 6.0.1.1 Pre-Requisite(s): PK68670 Co-Requisite(s): --- Platform Specific: This fix applies to all platforms. A fix is available from Fix Central: http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde r?apar=PM05147&productid=WebSphere%20Portal&brandid=5 You may need to type or paste the complete address into your Web browser.
Temporary fix
Comments
APAR Information
APAR number
PM05147
Reported component name
WEBSPHERE PORTA
Reported component ID
5724E7600
Reported release
600
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2010-01-14
Closed date
2010-02-02
Last modified date
2010-05-19
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBSPHERE PORTA
Fixed component ID
5724E7600
Applicable component levels
R60E PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSHRKX","label":"WebSphere Portal"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
19 May 2010