One or more users see a page displaying an error message similar to: "the page was not displayed because the request entity is too large" when connecting to iDashboards.
Commonly seen in IE and Chrome, Firefox is most of the time not affected by this issue.
By default the Tomcat AJP1.3 connector has a max packet size of 8K. If (certain elements of) a request exceed this size then this error can occur.
This issue can arise when a user is a member multiple Active Directory groups which causes the header to be larger than the default setting
The iDashboards Support team has also seen this issue when using Asset Bank's WIASSOPlugin. This plugin connects to the Asset Bank website via Microsoft IIS and is configured to use Integrated Windows Authentication. When Asset Bank (or IIS) issues a challenge, a user's browser will include an 'authentication' header in its next request. If Kerberos is used (which is the default) then this header can be large, especially if the user is a member of many Organizational Units (OUs in Active Directory) as this information is included in the header.
Caution: Changing the max packet size could cause issues with performance. We recommend cleaning out AD groups that are no longer necessary for the user.
Increase the max packet size as follows:
Open /tomcat]/conf/server.xml and find the AJP 1.3 connector element. This will look something like this
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" tomcatAuthentication="false" URIEncoding="UTF-8" packetSize="16384"/>
Add an attribute called packetSize with a value larger than 8192 (the default). For example, to double it:
Open the /tomcat]/conf/worker.properties file (used by the isapi_redirect.dll filter). Add the following line at the end of the file:
Where 16384 is the max packet size in bytes. This should be the same as the packetSize you set in the connector.
Technical note: this last step (setting worker.ajp13.max_packet_size in worker.properties) may not be necessary if the default buffer size in the isapi_redirect filter was changed to 64K at some point. This setting may therefore be ignored. Old versions of the filter may also have the buffer hard-coded to 8K so it may be necessary to update isapi_redirect.dll.
- This article is relevant if you use IIS, the ISAPI filter and the Tomcat AJP1.3 connector (i.e. as recommended in our Windows installation instructions).
- X Platform
- Enterprise Suite