Security Level Settings - Is this in effect for portal visit

Posted by Rollbase User on 01-Aug-2012 10:33

Are the customer zone security level settings in effect for the portal visitors as well? We have a client complaining that records being edited via the portal are not saving. My theory is that they are possibly being timed out because they are leaving the page open for a period of time and then saving. These are their settings: Security Level Low Passwords must be at least 6 characters long. Passwords are case-insensitive Block unsuccessful login attempts: Never # minutes of inactivity before expiring sessions: 480 # minutes of usage before forcing users to login again: 720 # minutes to wait before expiring record locks: 120

All Replies

Posted by Admin on 01-Aug-2012 11:12

No, portal visitors are not affected.

Posted by Admin on 01-Aug-2012 22:27

Is there a timeout for the portal visitors?

Posted by Admin on 02-Aug-2012 00:00

No.

Posted by Admin on 02-Aug-2012 12:09

Portal use cookies to keep track on logged in users. If cookie with valid JSESSION not found - user will be asked to login.



Posted by Admin on 22-Aug-2012 21:35

We've recently had a few of our users complain about being automatically logged out from portals. I checked the Online Portal Visitors log in the Settings and I see the same portal account & IP address logged in multiple times. For example, John Wesley, Logged in at:



08/22/2012 08:03 AM

08/22/2012 11:15 AM

08/22/2012 12:04 PM

08/22/2012 01:46 PM

08/22/2012 07:48 PM

08/22/2012 08:20 PM



The audit trail for that portal user shows the same thing. There are no entries indicating he Logged out - there are only entries for each time he logged in.



Is there anything I can do to debug this problem? The users would spend 20-30 minutes filling out a report form on the portal, only to click Submit and see a message "You've been logged out.. Please login..." and then they loose all of their work.



This is regarding our Key Tech zone (I was unable to submit support ticket via the zone because I would get logged out when I tried to start a new ticket).



Thanks,

Mike

Posted by Admin on 22-Aug-2012 22:24

I'll take a look ASAP.

Posted by Admin on 22-Aug-2012 23:15

1. I need to know exact error message, that would be very helpful.

2. HTTP session may be lost when popup window is opened. Is this your case?

Posted by Admin on 23-Aug-2012 11:21

Please let me know if you still see this issue

Posted by Admin on 23-Aug-2012 21:23

Pavel,



I haven't heard back from the user yet.



In response to your questions:



1) I will get a screenshot of the error msg the next time this happens,

2) There are no popups involved with our portal. There are the lookup popup windows but they are rarely (if ever) used in this specific portal.



Most of the users are accessing the portal using a Samsung Galaxy tablet.



I will let you know as soon as I hear back from them.



Thanks,

Mike

Posted by Admin on 23-Aug-2012 21:35

Do they have cookies enabled or disabled?

Posted by Admin on 23-Aug-2012 21:56

I will check that, too.

Posted by Admin on 28-Aug-2012 10:38

We have experienced very similar issues. (as you see from this post)

Posted by Admin on 28-Aug-2012 12:32

Please send me portion of your portal.log file which shows records on visitor's login and logout. I also would like to know exact error message shown to visitor.

Posted by Admin on 30-Aug-2012 08:09

Pavel,



Would you recommend having the browser set to Allow Session Cookies or is it just cookies in general?



We are also still trying to get enough data to troubleshoot this.



Thanks.

Posted by Admin on 30-Aug-2012 11:30

Session cookies should be fine.



However please note that portals are supposed to work even if browser does not accept cookies. In this case all links on portal page must include #jsession=12345 part, which is added automatically. If they don't - server-side session will be lost.



So I need to know how this apply to your portal in order to fix the problem.

Posted by Admin on 31-Aug-2012 09:48

I don't see the #jsession=##### as a part of the standard portal links. For example: https://www.mission.do/prod1/portal/portal.jsp?c=83520&p=91959&g=204536&returnId=205786



What does that mean for our installation? We are a private cloud version.

Posted by Admin on 03-Sep-2012 11:43

The system should add this part automatically only if client's browser does not accept cookies.

This thread is closed