[mapguide-users] Error: Session has expired or is invalid. Please log in again. > Server Crash from Asia IP (EVERYDAY!)

[Gabriele Monfardini]

Hi,

On Mon, May 14, 2012 at 4:15 PM, Chris Gountanis
<cgountanis at mpowerinnovations.com> wrote:
> Could this be a sign of some kind of brute force or some kind of DoS attack?
> Anyone else have this issue with a public server? MapGuide 2.2 Open Source /
> IIS / Windows 2008. Please respond as we have a client that is about to drop
> MapGuide because of this and we don't have much of a solution yet. I know we
> can run the server in debug (console) and maybe help the developers narrow
> this exploit down BUT I was hoping this might of already been tackled...
> maybe fixed in 2.4?
>
>
> <2012-05-11T10:27:18>   600     Ajax Viewer     150.70.75.29
>  Error: Session has expired or is invalid. Please log in again.
>  StackTrace:
>  - MgSiteServiceHandler.ProcessOperation() line 83 file
> c:\builds\mg22win32\mgdev\server\src\services\site\SiteServiceHandler.cpp
>  - MgOpAuthenticate.Execute() line 107 file
> c:\builds\mg22win32\mgdev\server\src\services\site\OpAuthenticate.cpp
>  - MgServerSiteService.Authenticate() line 709 file
> c:\builds\mg22win32\mgdev\server\src\services\site\ServerSiteService.cpp
>  - MgSecurityManager.Authenticate() line 224 file
> c:\builds\mg22win32\mgdev\server\src\common\manager\SecurityManager.cpp
>  - MgSessionCache.GetSessionInfo() line 175 file
> c:\builds\mg22win32\mgdev\server\src\common\manager\SessionCache.cpp
>


Is session really expired?
If this is the case, set longer session time in serverconfig.ini.

Has the server been restarted (or is crashed and automatically restarted)?
If this is the case you should try to understand which is the problem.
Verify that error log does not show any other issue with you layers and maps.

You may also try enabling Performance log to see memory pressure, cpu
load and number of active connections.

Regards,

Gabriele