Auth.net SIM script timed out while trying to POST transaction results

[RixStix]

1. Customer is sent to the Auth.net SIM payment form with their account details pre-populated so that they can input credit card #, exp date and CVV.
2. Bottom of page has a "Pay Now" button.
3. Click "Pay Now"
4. Instantly, a generic auth.net white page with text
5. Server log entry appears identical to post#3 above

------------------------------An error occurred while trying to report this
transaction to the merchant. An e-mail has been sent to the merchant
informing them of the error. The following is the result of the attempt to
charge your credit card.

This transaction has been approved.

It is advisable for you to contact the merchant to verify that you will
receive the product or service.

No links back to the ZC site. Just the sterile, white auth.net page

The payment is authorized and captured which can be seen within the auth.net account.

The email sent by auth.net to the merchant (me) is

Authorize.Net Merchant,

Your script timed out while we were trying to post transaction results to it.
Transaction ID: 6657207384
Transaction Result: This transaction has been approved.

The following message was displayed to the customer:
------------------------------
An error occurred while trying to report this
transaction to the merchant. An e-mail has been sent to the merchant
informing them of the error. The following is the result of the attempt to
charge your credit card.

This transaction has been approved.

It is advisable for you to contact the merchant to verify that you will
receive the product or service.
------------------------------

[RixStix]

Below is the screens received in a successful payment made on the test site

step 1 of 4 shipping

step 2 of 4 payment method

step 3 of 4 checkout confirmation
redirect to auth.net SIM form for payment details
PAY NOW button on SIM form

redirect white screen & mixed content screen (must acknowledge mixed content) using FireFox browser

This page will automatically redirect you back to ChainWeavers.com for your order confirmation

details

If you are not redirected within 5 seconds, please click the button below to continue

CONTINUE BUTTON.

Popup window on top of the above white screen.

Security warning

Although this page is encrypted, the information you have entered is to be sent over an unencripted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?

CONTINUE CANCEL

step 4 of 4 ZC order confirmation screen

===============================================

This is the order of screens on a failed payment transaction

1. Checkout Step 1 of 4 shipping
2. Checkout Step 2 of 4 payment method. Select Credit Card SIM method.
3. Checkout Step 3 of 4 checkout confirmation. Confirm.
4. Auth.net SIM payment form opens. https://secure.authorize.net/gateway/transact.dll
5. Enter valid CC information.
6. Click PAY NOW button.
7. https://secure.authorize.net/gateway/transact.dll white, auth.net screen with customer message. transaction approved.[/FONT]
8. Back button, to auth.net SIM payment form.
9. Back button twice, document expired, reload. Checkout Step 3 of 4

Email received from auth.net showing payment details
========== MERCHANT DEFINED =========
securityToken : 573594402454131a474b64313c6596e5
zenid : b03737d35c3d8c4330608929ba6a72d3
==================================

zenid matches the zenid in the Checkout Step 3 of 4 checkout confirmation URL.
Not sure if security token is supposed to match anything.

[x_fp_hash] => sent to auth.net
Auth.net fingerprint troubleshooting generator matches [x_fp_hash] transmitted by ZC[/FONT]

[RixStix]

Server log successful, test server transaction

198.241.168.60 - - [13/Nov/2014:14:31:47 -0800] "POST /ZEN153/index.php?main_page=checkout_process&action=confirm HTTP/1.1" 302- "-" "-"
198.241.168.60 - - [13/Nov/2014:14:31:48 -0800] "GET /ZEN153/index.php?main_page=checkout_success&action=confirm&zenid=549a33192447c5a4b58268 c12181d57f HTTP/1.1" 200 1087 "-" "-"

Server log failed live server transaction

198.241.168.60 - - [13/Nov/2014:11:00:43 -0800] "POST /index.php?main_page=checkout_process&action=confirm HTTP/1.1" 302 208 "-" "-"

[DrByte]

Server log successful, test server transaction

198.241.168.60 - - [13/Nov/2014:14:31:47 -0800] "POST /ZEN153/index.php?main_page=checkout_process&action=confirm HTTP/1.1" 302- "-" "-"
198.241.168.60 - - [13/Nov/2014:14:31:48 -0800] "GET /ZEN153/index.php?main_page=checkout_success&action=confirm&zenid=549a33192447c5a4b58268 c12181d57f HTTP/1.1" 200 1087 "-" "-"

Server log failed live server transaction

198.241.168.60 - - [13/Nov/2014:11:00:43 -0800] "POST /index.php?main_page=checkout_process&action=confirm HTTP/1.1" 302 208 "-" "-"

Those 302 responses are not part of a default ZC install. Do you have a URL-rewriter intercepting the URLs?

Are the apache vhosts and all the .htaccess files identical between both servers?

[RixStix]

Those 302 responses are not part of a default ZC install. Do you have a URL-rewriter intercepting the URLs?

No URL rewriter installed.

Are the apache vhosts

apache vhosts => Sorry, I do not understand the question.

and all the .htaccess files identical between both servers?

No they are not identical.
test site has no .htaccess in root
prod site has .htaccess in root. Most lines are blocking bad IP and bots. some carryover from previous zencart recommendations.

Removed .htaccess and auth.net SIM completes transaction as expected. The line from the server log does contain 302

198.241.168.60 - - [14/Nov/2014:18:44:18 -0800] "POST /index.php?main_page=checkout_process&action=confirm&zenid=3ee5d47d6e3486a1e004e9 3ff23ee21a HTTP/1.1" 302 - "-" "-"

Thank you. Now to figure out the .htaccess but that should be an easy matter compared to getting here.

[DrByte]

No they are not identical.
test site has no .htaccess in root
prod site has .htaccess in root. Most lines are blocking bad IP and bots. some carryover from previous zencart recommendations.

Removed .htaccess and auth.net SIM completes transaction as expected. ...

Thank you. Now to figure out the .htaccess but that should be an easy matter compared to getting here.

I'd be very interested in knowing which statements in your .htaccess have caused this.

[RixStix]

I'd be very interested in knowing which statements in your .htaccess have caused this.

Found it in the section for blocking "bad bots"
Amazing what can ultimately cause so much grief and troubleshooting; especially for non-coders.
Thank you again for pointing me in various directions to isolate the problem.

    RewriteCond %{HTTP_USER_AGENT} ^$ [NC,OR]

[RixStix]

Looked at the SIM_mydebug files a bit closer and found that the data being sent to auth.net differs between the test and live site if that makes any difference.

The live site data sent to auth.net contains the zenID.
The test site data sent to auth.net does not contain the zenID

test site SIM debug
Sent TO auth.net

[x_relay_URL] => http:\\chainweavers.TESTSITE/ZEN153/index.php?main_page=checkout_process&action=confirm

live site SIM debug
Sent TO auth.net

[x_relay_url] => https:\\chainweavers.LIVESITE/index.php?main_page=checkout_process&action=confirm&zenid=b03737d35c3d8c 4330608929ba6a72d3

(I changed forwardslash to backslash after https:)

[RixStix]

That is not the issue

Looked at the SIM_mydebug files a bit closer and found that the data being sent to auth.net differs between the test and live site if that makes any difference.

The live site data sent to auth.net contains the zenID.
The test site data sent to auth.net does not contain the zenID

test site SIM debug
Sent TO auth.net


live site SIM debug
Sent TO auth.net

(I changed forwardslash to backslash after https:)