SEAL Connection Timeout Issues

The OneSpan Authentication Server SEAL communicator has three connection timeout settings:

• SEAL-Send-Timeout. This defines (in seconds) how long the SEAL communicator should wait for acknowledgment on a SEND request from a socket before declaring that request as failed. When undefined, this is set to 5 seconds.
• SEAL-Receive-Timeout. This defines (in seconds) how long the SEAL communicator should wait for data upon receiving a RECEIVE request from a socket before declaring that request as failed. When undefined, this is set to 5 seconds.
• SEAL-Connect-Idle-Timeout. This defines (in seconds) how long the SEAL communicator should wait for data on an idle socket before closing that socket. When undefined, this timeout is disabled.

These timeout settings are useful to prevent idle client programs from blocking the SEAL communicator.

If you are experiencing connection problems with the SEAL communicator, you can try to adjust the connection timeout values by modifying the OneSpan Authentication Server configuration file (i.e. identikeyconfig.xml).

The XML configuration file identikeyconfig.xml is located in the following folders:

/etc/vasco/ias (Linux)

%PROGRAMFILES%\VASCO\IDENTIKEY Authentication Server\bin (Windows)

The timeout settings are specified within the SealCommunicator settings group.3

<SealCommunicator>
  <IP-Address type="string" data="192.0.2.1"/>
  <IP-Port type="unsigned" data="20004"/>
  <SEAL-Send-Timeout type="unsigned" data="2"/> 
  <SEAL-Receive-Timeout type="unsigned" data="4"/> 
  <SEAL-Connect-Idle-Timeout type="unsigned" data="20"/> 
</SealCommunicator>

The values in this example configure the following behavior:

• Fail a SEND request if no response is received within 2 seconds.
• Fail a RECEIVE request if no further data is received within 4 seconds.
• Close any SEAL connections that have been idle for 20 seconds.

Configuring the SEAL connection timeout values requires a restart of the OneSpan Authentication Server service (see OneSpan Authentication Server configuration).