78515 - Can't place trade order on etrade

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect, P3)

Description

[Doug Turner (:dougt)]

I can not buy stock with 4-25 build.  


Steps to reproduce:

1.  Go to www.etrade.com
2.  Click on the "Log On" button.
3.  Enter account information and select "Trading"
4.  Enter stock order as usual.
5.  Click Preview Order.
6.  Note the error.

Expected result is a screen where order is previewed.

Actual result is an error message page stating:


Some customers may be experiencing temporary difficulties logging on to our Web
site. We are working to resolve this issue as quickly as possible. In the
meantime, you may access your account via TELE*MASTER at 1-800-STOCKS-1, or call
1-800-STOCKS-5 to place an order with a live broker.



This only happens in mozilla/netscape6.  I can successfully place orders with
netscape 4.x

Comment 1

[Alex Bishop]

Shouldn't the summaery be "Cannot place trade order on etrade"?

Comment 2

[Bob Lord]

I wonder if you set your user agent to look like C4.7 if you'd still see the
problem...

Comment 3

[Ken Snider]

Attachment: Dialog under Win2k

Comment 4

[Ken Snider]

Ack! Nevermind, wrong bug. :(

Comment 5

[gabriel]

Shouldn't this be an 'evangelism' bug ?

Comment 6

[Phil Peterson]

How do you know it isn't just a bug? Is there reason to believe ETrade is
blocking mozilla-based browsers, or that they're using some IE-only content?

Comment 7

[Doug Turner (:dougt)]

This use to work.  Something has changed - either their site or our product.  I 
am betting the later.  Furthermore, I can login fine.  I just can't place an 
order.  Placing an order involves secure form posting. Could the bug be here?

junruh we have had problems with etrade in the past.  Is there a test account 
that we have?

Comment 8

[John Unruh]

No test account, but I have a real one. A good test if you do have an account is 
to place a buy order for AOL good for today with a limit of $1.00.
Etrade is failing for me on Netscape 6 when placing an order, but occasionally I 
get the same error message with Nav 4.77, so I haven't concluded anything yet.

Comment 9

[David P. Drinan]

Assigning to Jeremy Loeb.

Jeremy, we think there may be some agent sniffing going on duing the secure post 
to etrade that's causing this failure. We need to talk to someone at etrade to 
get more data on this problem.

Comment 10

[Jeremy Loeb (gone)]

Assigning to arun in the hopes that the evangelism group may have some ideas on 
this one...

Comment 11

[Arun Ranganathan]

junruh and ddrinan,
can you test your hypothesis about user-agent sniffing? junruh, i recommend you 
run a test "faking out e-trade" using the setting in all.js to mask user-agents 
and feign being a 4.x browser, at least for the purposes of verifying whether it 
is agent sniffing that's our problem. If so, then I'll try and find someone to 
talk to at e-trade, which shouldn't be too challenging.  If not, this bounces 
back to the PSM team.  Adding qawanted keyword -- I don't have an e-trade 
account to test off of.  is this a 0.9.1 blocker?

Comment 12

[Arun Ranganathan]

in addition to my above comments (+ qawanted), i am reassigning back to default 
owners.  loeb, when assigning bugs to me, make sure they are under the 
evangelism component.

Comment 13

[Bob Lord]

Arun: I'd really like you to get someone from E-Trade involved in this bug asap
regardless of the results of John's experiments.  Can you commit to getting
someone from E-Trade to look at this bug today?

junruh:  please let us know the results of your experiment.  Faking out the user
agent string will probably start things working again, but we need to know for sure.

Comment 14

[John Unruh]

I got the line for the prefs.js file, and now Netscape 6 appears to servers as 
Nav 4.75. I still cannot complete a trade at E-Trade. When I click on a Preview 
Order button, I get an error from E-Trade. I have no problem with Nav 4.77.

"Some customers may be experiencing temporary difficulties logging on to our Web 
site. We are working to resolve this issue as quickly as possible. In the 
meantime, you may access your account via TELE*MASTER at 1-800-STOCKS-1, or call 
1-800-STOCKS-5 to place an order with a live broker."

Comment 15

[Stephane Saux]

Junruh: Can you describe exactly what changes you made to the prefs to have n6
act as 4.75? If agent sniffing is involved and you didn't fake it convincingly
(from the server perspective) then it is likely to fail in the same mode as for
n6.  Hopefully someone can validate your approach.
Did you try to fake 4.77?

Comment 16

[John Unruh]

I tried to preview an Etrade order by faking 4.75 and 4.77. The line added to 
prefs.js is:
pref("general.useragent.override", "Mozilla/4.75 [en] (Win95; U)");
You can also change it to 4.77. Verify this by clicking on the button here 
https://junruh.mcom.com/mix.html or here 
http://developer.netscape.com/evangelism/tools/practical-browser-sniffing/

Comment 17

[Stephane Saux]

So spoofing a 4.7 browser still results in E*Trade serving the error page.
We still need to get a contact within E*Trade.  Afterall, they serve us the
page. From the client perspective it's a successful request/response cycle.

I have quite a bit of knowledge about Netscape Application Server, and this page
could result from some mixup with the session cookie.  If we fail to pass the
proper cookie, or if we cause the site to deliver a new value for the cookie, we
loose our session.  If etrade fails to find a session associated with the cookie
we send (or fail to send correctly) then a reasonable answer would be to present
a login page with some warning.

Comment 18

[John Unruh]

That's a good possibility. When placing a trade with Nav 4.77, if I don't select 
the "Preview Order" button right away, I'll get the error message when I do.

Comment 19

[Arun Ranganathan]

1. Do note: the file to edit is all.js or all-ns.js, not really prefs.js
2. I've contacted someone at e-trade -- waiting the response.

Comment 20

[Bob Lord]

This is probably not an SSL bug.  If somebody else wants to work with Etrade to
get them to support mozilla/6.X please feel free.  Otherwise we'll take a look
as time allows.
target -> 2.1
p3

Comment 21

[selmer (gone)]

Adding Steve Morse since cookies might be involved.  Steve, any theories here?

Comment 22

[Stephen P. Morse]

This is working fine for me.  I'm not having any problems previewing an order.  
I'm running a build from May 25.

Comment 23

[Doug Turner (:dougt)]

preview works.  try placing an order.  As John suggested, place a limit order
for AOL at something like 1.00$.

Comment 24

[Stephen P. Morse]

That's exactly what I did.  And it worked fine.

Comment 25

[Stephen P. Morse]

Actually I did the opposite -- placed a sell of AOL at $1000.  I'm not presented 
with any choices for a buy and I suppose that's because there is no cash in my 
e-trade account.

Comment 26

[Doug Turner (:dougt)]

I am confused.  You said that you are "not having any problems previewing an
order".  And I sayed that works and asked you to "try placing an order".  Can
you confirm that you have entered an order into etrade that is pending?  You
need to SUMBIT the order on the preview page.

Comment 27

[Stephen P. Morse]

Now I'm confused.  I submitted the order on the "trading" page, not the preview 
page.  That's exactly what the steps in the bug report say to do.  After I 
submitted the order I went to the 'review orders' page and was able to see the 
order.

Comment 28

[Doug Turner (:dougt)]

my fault. Here is the rub, you can't complete a stock order on etrade.  Go all
the way through their order entry and you will encounter an error.  

Comment 29

[Stephane Saux]

This is definitely still a problem using
Netscape6 build 2001053006.
Trying to preview an order automatically sends me back to the login page with
the error message.  Note that I've set my cookies policy to only accept cookies
from the site I'm visiting.

Comment 30

[Stephane Saux]

Tried with cookie policy set to accept all cookies, and the behavior is the
same.
Still awaiting feedback from ETrade engineers I've talked to.

Comment 31

[Stephen P. Morse]

But I did go all the way through the order entry, as you'll see from my comments 
above.  And I did not encounter any error.

Doug, have you checked your credit rating lately?  Maybe that's the problem? ;-)

Please give a detailed step-by-step procedure for reproducing the problem.

Comment 32

[Doug Turner (:dougt)]

Steve, I don't know why or how you can place an order.  I can't, other people can't.


I am not doing anything special:

1. Log on to Etrade. (Start in Account Services)
   This takes you to:
      https://trading.etrade.com/cgi-bin/gx.cgi/applogic+AcctBalanceSummary
2. Click on the Trading Tab.
   This takes you to:
      https://trading.etrade.com/cgi-bin/gx.cgi/applogic+OrderForm
3. Fill out form:
     Transaction: BUY
     Num of Shares: 1
     Stock Symbol: QQQ
     Term:  Good For Day
     Trading Password ****
     Price: Limit $1
4. Click on "Preview Order"

Note the error message:

 Some customers may be experiencing temporary difficulties logging on to our Web
site. We are working to resolve this issue as quickly as possible. In the
meantime, you may access your account via TELE*MASTER at 1-800-STOCKS-1, or call
1-800-STOCKS-5 to place an order with a live broker.


Cookies that were set from www.etrade.com

CTNTPSN_SESSION_ID


Cookies that were set from trading.etrade.com

etcustomer
gx_session_id_User_login_session
selectGoWhere
selectGoWhere

Note that there were two selectGoWhere.  

Comment 33

[Stephen P. Morse]

OK, here's what I am doing:

1. Use cookie-manager and erase all existing cookies.
2. Go to http://www.etrade.com
3. Click on log-on.
4. I get a Member logon screen which has a link to OptionsLink
4. Click on the OptionsLink link since that's where my account is
5. I get a OptionsLink Customer log-on screen asking for id and password
6. I enter my ss in the id field and my password in the password field
7. I click the logon button
8. I get to a screen that says "Hello Stephen Morse"
9. I click on the "trading" tab
10. I get a page which has "Exercise Stock Options", "Sell Shares" and "Review 
Orders" sections.  Under "Sell Shares" is a link for "Stock Purchase Shares"
11. I click on the "Stock Purchase Shares" link in the "Sell Shares" section
12. I now get a screen which is broken into five steps
13. Step 1 Enter the Shares: I enter "1"
14. Step 2 Select order type: I enter "DAY"
15. Step 3 Enter limit price: I enter 1000.00 (I'm an optimist)
16. Step 4 Method of receiving funds: I keep default of "broker account"
17. Step 5 Confirm order: I click the button
18. I receive a screen displaying my order and having a "submit" and "reject" 
button
19. I press the "submit" button
20. I get to a screen saying "Order Number ... has been sent for execution
21. Left sidebar contains a link for "Review Orders".  I click that link
22. I get a screen showing my order as pending.  It has a cancel link next to 
the order.  I click on that link.
23. I get a screen asking me to confirm the cancellation.  I click on the 
"Cancel Order" button on this screen.
24. I get to a screen saying "Order Number ... has been sent for cancellation"

At this time I have four cookies set, namely:

trades1.optionslink.com: gx_session_id_OLUSER_LOGIN
trading.etrade.com: selectGoWhere (it has no value stored in it)
trading.etrade.com: gx_session_id_User_login_session
www.etrade.coj: CTNTPSN_SESSION_ID

Comment 34

[Doug Turner (:dougt)]

I am not talking about the OptionsLink webpage; I am talking about Etrade.

Follow my last directions, and you should be able to reproduce this problem.

Comment 35

[Stephen P. Morse]

But I don't have an e-trade login.

Comment 36

[gabriel]

I wonder if bug 83625 is related ?

Comment 37

[Stephane Saux]

I just tried with Netscape 6 build ID 2001060106 linux.  I was able to preview
the order (limit order on orcl at $5 a pop - currently orcl is at 16), place it,
and cancel it.
As of now it works for me.
Can somebody else try it?

Comment 38

[Doug Turner (:dougt)]

lets not mark this worksfor me until we know what the deal is.

This should be a mozilla beta blocker

Comment 39

[Stephane Saux]

Could somebody try this again.  I haven't been able to reproduce this in the
last few days. I.e., it works for me.

Comment 40

[John Unruh]

Marking worksforme. I was successful at placing an order today.

Comment 41

[John Unruh]

Verified worksforme.

Comment 42

[Arun Ranganathan]

Okay, firstly, marking pdt+ -- the upshot of today's pdt meeting is to mark this
to be slotted into the 0.9.2 category (potential rtm stopper).
Secondly, what exactly fixed this?  When we started using 0.9.1 branch builds
(e.g. N6.1 beta) this problem appears to have gone away by junruh's account. 
Reporter (dougt) can you determine that this is no longer an issue, particularly
with NS beta?  If so, *great*!  Some mysterious check in has righted all that's
evil in this bug. I'd love to know what it was.

Comment 43

[Stephane Saux]

Something that etrade did could also have contributed to this problem going
away.

Comment 44

[Stephane Saux]

verified again with linux 2001062206 build.