-1

While running two app servers (which has mobilefirst servers hosted 7.1 version) from ibm http server, only one server runs successfully on keeping only one of the Route attribute active in the plugin-cfg.xml of the http server. In the server which is not running, the following error is seen in the messages.log.

CWWKS4001E: The security token cannot be validated. This can be for the following reasons 1. The security token was generated on another server using different keys. 2. The token configuration or the security keys of the token service which created the token has been changed. 3. The token service which created the token is no longer available.

Kindly guide in resolving the error above. Thanks.

user1618655
  • 1
  • 5
  • You mention "only one server runs successfully on keeping only one of the Route attribute active ". What do you mean by only one server runs successfully? Does the server not start? Or does it not handle requests? Does this issue occur if you by-pass IHS and hit the server directly from the client? – Vivin K Sep 01 '16 at 11:01
  • Hi @VivinK, When I have both the Route attributes active, only one server works with the runtimes in it, while the other jus opens the console with no runtime. Both servers are in running state. If we bypass IHS both the servers work perfectly fine rendering the runtimes and deployed apps. – user1618655 Sep 01 '16 at 11:59
  • @VivinK any updates for this issue – user1618655 Sep 07 '16 at 12:55

2 Answers2

0

Sounds like your two servers have not exchanged/shared LTPA keys and IHS and the WAS Plugin are a red herring.

http://www.ibm.com/support/knowledgecenter/SSAW57_liberty/com.ibm.websphere.wlp.nd.doc/ae/twlp_sec_ltpa.html http://www.ibm.com/support/knowledgecenter/SSAW57_liberty/com.ibm.websphere.wlp.nd.doc/ae/twlp_sec_sso.html

Note: For SSO to work across Liberty servers, full profile servers, or both, set the following resources:
The servers must use the same LTPA keys and share the same user registry.
covener
  • 17,402
  • 2
  • 31
  • 45
0

Sounds like communication issue between two servers. Are the inbound ports opened on another server to communicate with HTTP server? if they are opened use telnet and test whether both servers (HTTP and app server) are communicating with each other.

On HTTP Server, open command prompt and enter below command.

telnet <app server ip> <app server port>

If this is not successful then you need to open ports on app server.

Srujan reddy
  • 137
  • 1
  • 16