Sharing the whole log is a bit sensitive. Maybe this will already work:
There are two web_submit_data statements in my script:
web_submit_data("logon.faces",
"Action=http://servername:portnumber/BOE/portal/1406211114/InfoView/logon.faces",
"Method=POST",
"TargetFrame=servletBridgeIframe",
"RecContentType=text/html",
"Referer=http://servername:portnumber/BOE/BI",
"Snapshot=t2.inf",
"Mode=HTML",
ITEMDATA,
EXTRARES,
"Url=../BIPCoreWeb/images/center_normal_logon.gif", ENDITEM,
"Url=css/skin/input.gif", ENDITEM,
"Url=common/appService.do?service=skinning&resource=img&img=img.login.banner.logo", ENDITEM,
LAST);
Loadrunner wants to correlate before this step:
web_reg_save_param_regexp(
"ParamName=CorrelationParameter",
"RegExp=bttoken=(.*?)\";\\\n</script",
SEARCH_FILTERS,
"Scope=all",
"IgnoreRedirections=No",
LAST);
web_submit_data("logon.faces_2",
"Action=http://servername:portnumber/BOE/portal/1406211114/InfoView/logon.faces",
"Method=POST",
"TargetFrame=servletBridgeIframe",
"RecContentType=text/html",
"Referer=http://servername:portnumber/BOE/portal/1406211114/InfoView/logon.faces",
"Snapshot=t3.inf",
"Mode=HTML",
ITEMDATA,
"Name=_id0:logon:CMS", "Value={strEnvironment}", ENDITEM,
"Name=_id0:logon:USERNAME", "Value={strUser}", ENDITEM,
"Name=_id0:logon:PASSWORD", "Value={strPassword}", ENDITEM,
"Name=com.sun.faces.VIEW", "Value=_id147:_id148", ENDITEM,
"Name=_id0", "Value=_id0", ENDITEM,
LAST);
BUT: if I look in the generation log, the first transaction (id 697)seems to be setting cookies already, that contain the username credentials!
****** Response Header For Transaction With Id 697 ******
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
X-UA-Compatible: IE=edge,requiresActiveX=true
Set-Cookie: InfoViewPLATFORMSVC_COOKIE_TOKEN=; Path=/; HttpOnly
Set-Cookie: InfoViewPLATFORMSVC_COOKIE_CMS=******%3A6400; Path=/; HttpOnly; Expires=Thu, 16-Jul-15 15:15:56 GMT
Set-Cookie: InfoViewPLATFORMSVC_COOKIE_USR=UserName; Path=/; HttpOnly; Expires=Thu, 16-Jul-15 15:15:56 GMT
Set-Cookie: InfoViewPLATFORMSVC_COOKIE_AUTH=secLDAP; Path=/; HttpOnly; Expires=Thu, 16-Jul-15 15:15:56 GMT
I tried moving the correlationstep through the script, but sofar no result with that.