[OTDev] Problem with token

Thu Mar 17 16:58:22 CET 2011

Dear Andreas and All,

Could you tell me one thing. I use for authentication 

curl -i -d username=OTLogin -d password=OTPassword
http://opensso.in-silico.ch/opensso/identity/authenticate?uri=service=openld
ap. 

And sometimes I receive such token
token.id=AQIC5wM2LY4SfcxvtOkO8ZJhenmHC6yh0f1YJPwezyJoSe8=@AAJTSQACMDE=# but
sometimes such token
token.id=AQIC5wM2LY4Sfczz7TWZMlPJOvkdAtLVv+X7VlCr1k5Kyp4=@AAJTSQACMDE=#. The
difference between these tokens is "+". But when I send request curl -X GET
-H subjectid:AQIC5wM2LY4SfcxvtOkO8ZJhenmHC6yh0f1YJPwezyJoSe8=@AAJTSQACMDE=#
http://195.178.207.160/OpenTox/MakeMNA7 I quietly receive MakeMNA RDF. But
if I use token with "+" like: 

curl -X GET -H
subjectid:AQIC5wM2LY4SfcxO2S4wUc1k40+HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#
http://195.178.207.160/OpenTox/MakeMNA7

I receive:

html><head><title>Apache Tomcat/6.0.26 - Error report</title><style><!--H1
{font-family:Tahoma,Arial,sans-serif;color:w

hite;background-color:#525D76;font-size:22px;} H2
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525

D76;font-size:16px;} H3
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;fo
nt-size:14px;} BODY

{font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B
{font-family:Tahoma,Arial,sans-serif;color:w

hite;background-color:#525D76;} P
{font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:
12px;}A {c

olor : black;}A.name {color : black;}HR {color : #525D76;}--></style>
</head><body><h1>HTTP Status 401 - exception.name=

com.sun.identity.idsvcs.TokenExpired Invalid session
ID.AQIC5wM2LY4SfcxO2S4wUc1k40 HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#

</h1><HR size="1" noshade="noshade"><p><b>type</b> Status
report</p><p><b>message</b> <u>exception.name=com.sun.identity

.idsvcs.TokenExpired Invalid session ID.AQIC5wM2LY4SfcxO2S4wUc1k40
HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#

</u></p><p><b>description</b> <u>This request requires HTTP authentication
(exception.name=com.sun.identity.idsvcs.Token

Expired Invalid session ID.AQIC5wM2LY4SfcxO2S4wUc1k40
HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=#

).</u></p><HR size="1" noshade="noshade"><h3>Apache
Tomcat/6.0.26</h3></body></html

I see Invalid session ID.AQIC5wM2LY4SfcxO2S4wUc1k40
HpaKzQEH67RU44gBcHug=@AAJTSQACMDE=# but withoun "+".

What do you think? Why was this happening?

Best regards

Dmitry S. Druzhilovsky