IllegalStateException: The request object has been recycled and is no longer associated with this facade bctokencontroller in CA Access Gateway (SPS)

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Running CA Access Gateway (SPS), this one returns the error:

  nohup.log:

Nov 24, 2025 9:46:52 AM org.apache.catalina.core.StandardWrapperValve invoke
SEVERE: Servlet.service() for servlet [bctokencontroller] in context with path [/affwebservices] threw exception
java.lang.IllegalStateException: The request object has been recycled and is no longer associated with this facade
        at org.apache.catalina.connector.RequestFacade.checkFacade(RequestFacade.java:856)
        at org.apache.catalina.connector.RequestFacade.setAttribute(RequestFacade.java:412)
        at javax.servlet.ServletRequestWrapper.setAttribute(ServletRequestWrapper.java:238)
        at com.netegrity.affiliateminder.webservices.utils.i.a(fedfws_obfsc:264)

The error occurs on the return path from the VIP Authentication Hub on the bctokencontroller page.

This issue occurs on traffic load.

The CA Access Gateway (SPS) is behind a Load Balancer.

Environment

CA Access Gateway (SPS) 12.9 on RedHat 9;

Resolution

Upgrade the CA Access Gateway (SPS) to 12.9 SP1 when this one is available to benefit from fix DE653046.

Additional Information

<2025-12-09 ma.> :: patrick dussault : Initial Publication