tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Angus Mezick" <>
Subject RE: is session id unique across webapps ?
Date Wed, 04 Jun 2003 13:27:34 GMT
Hmm, I just read those two thread and I didn't see a final solution.  Is
getJvmRoute() unique across tomcat instances running on 5 web servers
all serving the same app using a JDBC session manager.  I know session
id is unique within a webapp but what about over a cluster of webapps
that don't use sticky sessions?  All that blather about it being a
statistical improbability that a session id will be duped is crap.  It
has to be IMPOSSIBLE across a non-sticky cluster for a dupe session id
to be generated.

> -----Original Message-----
> From: Tim Funk [] 
> Sent: Wednesday, June 04, 2003 6:56 AM
> To: Tomcat Users List
> Subject: Re: is session id unique across webapps ?
> Tomcat creates its sessionids from a random number generator. 
> The breadth of 
> random numbers is very wide allowing for "virtually" no 
> overlaps. But since 
> they are random, dups may appear. Tomcat does have checks to 
> make sure it 
> doesn't give out an existing session id in a particular webapp.
> That being said, I think it is possible that the same 
> session_id may be used 
> by two different users for two different webapps.
> So if you really need a unique identifier, append session_id 
> to context path.
> There was a few discussions in developers list above session 
> id uniqueness.


siddharth wrote:
> Hi all,
> I am tring to find out about *uniqueness* of *session ids*  which are 
> generated by tomcat.
> are session ids are unique across webapps ???
> -----------------------------------------------
> thanx.

To unsubscribe, e-mail:
For additional commands, e-mail:

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message