Lost Authentication Data in a Web Service Endpoint Implementation 

Problem Description

Whenever you call a Web service (WS) endpoint implementation, the HTTP session timeout expires and all session data is lost. The former authenticated user is also stored in the session. This happens when the time consumed by the WS implementation is significant – more then several minutes (hours).

Scenario Type:	Error analysis
NetWeaver Component:	J2EE Engine
Validity:	J2EE Engine 6.40 and higher

Decision Roadmap

Increasing the default session timeout value (for example, to two minutes) will prevent the session from expiring during a WS endpoint implementation call.

Main Tools

SAP NetWeaver Developer Studio

Execution

...

       1.      In the Web services development project, open Web Services Configurations.

The WS Deployment Descriptor is displayed.

       2.      In the WS configuration, select Advanced.

       3.      Choose Servlet Settings  ® Edit.

       4.      Enter a new session timeout value.

Bear in mind that increasing the timeout value means that the session remains in the memory until it expires. Thus, you increase the load of the J2EE Engine.

       5.      Choose Save.

       6.      Update the Web service archive and redeploy it.