The server was overloaded. Impossible to process data.

[bruce2]

Hi,

We are running into a condition 503 Service Unavailable when a user logs in via SAML2. To replicate the scenario I log into the SAML idp which tkes me to the portal. I click logoff which then puts me back onto the idp login page. I login again and then get  a 503 error. This started happening after activating SAML2 in the portal. The Portal is running on NetWeaver 7.31 sp11.

In the default trace I see the following.

#2.0 #2014 11 11 16:10:49:241#0-500#Error#com.sap.engine.services.servlets_jsp.Security#

com.sap.ASJ.web.000657#BC-JAS-WEB#servlet_jsp#C0008E96B61600AF0000000000008E2C#643695450000000004#sap.com/irj#com.sap.engine.services.servlets_jsp.Security#J2EE_GST_SWP#0##2B438FBD69E711E497D10000265E035A#ec29bc3669e611e494890000265e035a#ec29bc3669e611e494890000265e035a#0#Thread[HTTP Worker [@614087135],5,Dedicated_Application_Thread]#Plain##

Service not available. Details: The server was overloaded. Impossible to process data.#

[former_member254291]

Hi,

we are also facing the same issue, but setting DoNotLogoutResources as described in Note 2133307 didn't help.

Was anybody able to solve the issue?

Regards

[Former Member]

Hi,

I raised a ticket to SAP Support

They told me to apply the DoNotLogoutResources fix and verify SECURITY-EXT SP level

I have applied it on a test environnement, and get a small blank windows at logout but it seems to work now.

Any others feedbacks ?

Bertrand

[former_member254291]

Hi Bertrand,

thank you for the feedback. I also raised a ticket but they only told us to maintain DoNotLogoutResources and I think SAP is also wondering why this is not working for us :-).

Can you tell me your exact value of the DoNotLogoutResources?

We have SECURITY-EXT 7.31.16.1 (SP16 PL1). Is there a Note, etc. with the info which SP is affected?

Regards

Tobias

[Former Member]

Hi,

Here is my config.

We are in 7.40

[former_member254291]

Hi, ok this is interesting. You set the DoNotLogoutResources for the "EvaluateTicketLoginModule" and not for the "SAML2LoginModule". This is a completely new information for me. Thanks, I will test it.Regards, Tobias

[Former Member]

Hi,

Good remark. I don't know why but SAP Support confirmed me that it was the good configuration, but you are right I would be better to configured it on SAML2 login module...

Regards

Bertrand

[former_member254291]

I also found a (different) solution for us: We got "server is overloaded" if the SAP User which SAML2 tries to authenticate, was password locked. So I set the Parameter: ume.logon.allow_password_locked_users_sso_login from "false" to "true".

Regards

Tobias Maurer

[Former Member]

Hello Tobias,

Interresting.

Could you please provide a screenshot of your SAML configuration screen ?

Regards

Bertrand

[former_member254291]

Hello Bertrand,

SAML configuration has many tabs. Which one do you want to see? "Local Provider" -> "General Settings"?

Regards

Tobias

[Former Member]

Tobias,

Same screenshot than mine ?

Regards

Bertrand

[former_member254291]

I was able to delete the Parameter DoNotLogoutResources and "Server is overloaded" message still doesn't appear. As I said, we only got this message if USer was locked, so maybe we had another issue than you...

[Former Member]

Hello,

We are facing same issue - we are on Ep NW 7.30 SPS 12.

I could find below SAP Notes which were recently released

2132887 - SAML2 log out from the portal fails. Error "Server is overloaded. It is impossible to proc...

2133307 - Improve the DoNotLogoutResources Option in SAML 2.0

Note says tp edit parameter DoNotLogoutResources by adding URL - /irj/servlet/prt/portal/prtroot/com.sap.portal.dsm.Terminator in SAP NetWeaver Administrator under Configuration -> Authentication and Single Sign-On -> Authentication -> Components, in the SAML2LoginModule.

Is that we need to Edit the Login Module Options and add this?

Did any one give a try? Please suggest

Thanks,

Subbu

[bruce2]

Hi,

We applied the patch from 2133307 - Improve the DoNotLogoutResources Option in SAML 2.0.

We also applied the DoNotLogoutResources fix. The patch helped to reduce the frequency of the Server Overloaded error. We are still getting the Server Overloaded error under certain rare circumstances though.

Regards.

[Former Member]

Hi,

I have exactly the same issue on the same context

On my side I am in NW 7.4 SP7 and I have redirected the logout page to our Intranet.

I am interresting on answers too

Bruce, do you have an idea how to redirect to irj/portal in HTTP after  HTTPS SAML authentication ?

Kind Regards

Bertrand