tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 37356] - Tomcat does not invalidate sessions after session-timeout period has passed.
Date Wed, 08 Feb 2006 09:21:09 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=37356>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=37356





------- Additional Comments From tm@allocation.net  2006-02-08 10:21 -------
> We're seeing this same issue, as well.  We're using tomcat 5.5.4, and we appear
> to only see it in environments under heavy load when using the ajp13 connector.
>  We have another customer redirecting from IIS and they're not experiencing this
> issue.
> 
> I spent a couple hours looking at the code and I didn't see anything weird. 
> What I can tell you is that for the sessions this occurs on, their inactivity
> time IS properly set, but they still don't get invalidated.  When I call
> invalidate on those sessions, they ARE invalidated.
> [...] 
> Those sessions which fail to invalidate stay around forever--or seemingly so. 
> I've seen inactivity times in the 2500+ minutes range.
> 
This all fits into the threads issue theory.
Tomcat maintians a reference count for each session which is increased at the
beginning of a request and decreased at he end of the request.

If - for whatever reason - this reference count does not reach zero after all
requests have finished (e.g. because one thread was increasing while another was
decreasing, or an exception occurred which is not propably handled or... )
tomcat will not invalidate the session because it thinks there is still some
request currently running (which basically is a good thing. I do generally NOT
want my session to expire while a request is still running: e.g. a large download )

But this is still only a theory - I need to find a few free minutes to implement
a test case...

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message