SMSESSION cookie has idled out

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

i got below errors when i tried to login siteminder. but the policy is working for other webservers like IHS, OHS and apache.

[SMSESSION cookie has idled out. Persistent session will be validated from policy server.]
and
[SMSESSION cookie has expired and will not be used to authenticate.]

Environment

Environment: any

Resolution

These messages are usually due to the web server hosting the login.fcc being on a different machine than the server hosting the content, and there is a difference between what each server sees the current time as.  The result is the login page server sets a cookie, and upon immediately redirecting to the content server - it is already timed out due to the system time difference.