Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: softfail (nike.apache.org: transitioning domain of
 Yasushi.Okubo@takedasd.com does not designate 63.240.182.38 as permitted
 sender)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Subject: RE: question for sso session replication in tomcat 6.0.26
Date: Mon, 28 Jun 2010 11:58:08 -0700
Message-ID: 
 <27386FD838AA554FB62AF58A6F63BFD84CD96E@TSDPEML01.tsd.globaltakeda.com>
In-Reply-To: <4C2492F5.70500@pidster.com>
Thread-Topic: question for sso session replication in tomcat 6.0.26
Thread-Index: AcsUWbUF4RwV5NErQomSZtjGIzEVfgCkF3WA
References: 
 <27386FD838AA554FB62AF58A6F63BFD84CD959@TSDPEML01.tsd.globaltakeda.com>
 <4C2492F5.70500@pidster.com>
From: "Okubo, Yasushi (TSD)" <Yasushi.Okubo@takedasd.com>
To: "Tomcat Users List" <users@tomcat.apache.org>,
	pid@pidster.com
Content-Type: text/plain;
 charset=us-ascii
Content-Transfer-Encoding: quoted-printable


Hi Pid

I got more detailed log and it looks like clustersinglesignon is
deregistering sso session on other nodes.

0. session destroyed C0641336BF4E6B4654927AA3337EAB9F.jvm1 by shutdown
[on node1]
=20
1. clustersinglesignon is calling singlesignon to invalidate session
[ssoId=3D7BA0AB7AE2BFDB08CE2EBE8F42D3E89C] for node1

2, but it looks like this message came back to the node1 (through group
channel/mulitcast?)

3. then clustersinglesignon is deregistering this session again for
ssoId=3D7BA0AB7AE2BFDB08CE2EBE8F42D3E89C.  deregister method propagates
this message to other nodes to deregister
ssoId=3D7BA0AB7AE2BFDB08CE2EBE8F42D3E89C from all members in the same
cluster.


Is there any way to break this chain of actions to stop
clustersinglesigon invoking deregister method?


Jun 28, 2010 10:27:40 AM org.apache.catalina.ha.session.DeltaManager
stop
FINE: Manager [/cluster] is stopping
Jun 28, 2010 10:27:40 AM org.apache.catalina.ha.session.DeltaManager
stop
INFO: Manager [/cluster] expiring sessions upon shutdown
FINE: Process session destroyed on
DeltaSession[C0641336BF4E6B4654927AA3337EAB9F.jvm1]
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReplicationTask
serviceChannel
FINER: About to service key:sun.nio.ch.SelectionKeyImpl@1bd7b222
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReplicationTask run
FINER: Servicing key:sun.nio.ch.SelectionKeyImpl@1bd7b222
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReplicationTask run
FINER: Draining channel:sun.nio.ch.SelectionKeyImpl@1bd7b222
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReplicationTask
registerForRead
FINER: Adding key for read event:sun.nio.ch.SelectionKeyImpl@1bd7b222
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReceiver addEvent
FINER: Adding event to
selector:org.apache.catalina.tribes.transport.nio.NioReplicationTask$1@5
637dde9
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReplicationTask drainChannel
FINER: NioReplicationThread - Received msg:UniqueId{48, -7, -97, -123,
-116, -54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} at 2010-06-28
10:27:40.78
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReceiver events
FINER: Processing event in
selector:org.apache.catalina.tribes.transport.nio.NioReplicationTask$1@5
637dde9
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.group.ChannelCoordinator messageReceived
FINER: ChannelCoordinator - Received msg:UniqueId{48, -7, -97, -123,
-116, -54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} at 2010-06-28
10:27:40.78 from tcp://{127, 0, 0, 1}:4010
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReplicationTask$1 run
FINER: Registering key for read:sun.nio.ch.SelectionKeyImpl@1bd7b222
Jun 28, 2010 10:27:40 AM org.apache.catalina.tribes.group.GroupChannel
messageReceived
FINER: GroupChannel - Received msg:UniqueId{48, -7, -97, -123, -116,
-54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} at 2010-06-28
10:27:40.78 from tcp://{127, 0, 0, 1}:4010
Jun 28, 2010 10:27:40 AM org.apache.catalina.tribes.group.GroupChannel
messageReceived
FINER: GroupChannel - Receive Message:UniqueId{48, -7, -97, -123, -116,
-54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} is
SingleSignOnMessage[action=3D3, =
ssoId=3D7BA0AB7AE2BFDB08CE2EBE8F42D3E89C,
sessionId=3Dnull, username=3Dnull]
Jun 28, 2010 10:27:40 AM org.apache.catalina.ha.tcp.SimpleTcpCluster
messageReceived
FINE: Assuming clocks are synched: Replication for
7BA0AB7AE2BFDB08CE2EBE8F42D3E89C#-#1277746060782 took=3D1277746060782 =
ms.
Jun 28, 2010 10:27:40 AM
org.apache.catalina.ha.authenticator.ClusterSingleSignOnListener
messageReceived
FINE: SingleSignOnMessage Received with action 3
Jun 28, 2010 10:27:40 AM org.apache.catalina.authenticator.SingleSignOn
deregister
FINE: Deregistering sso id '7BA0AB7AE2BFDB08CE2EBE8F42D3E89C'
Jun 28, 2010 10:27:40 AM org.apache.catalina.authenticator.SingleSignOn
deregister
FINER:  Invalidating session
DeltaSession[C0641336BF4E6B4654927AA3337EAB9F.jvm1]
2010 10:27:40 AM org.apache.catalina.tribes.group.GroupChannel
messageReceived
FINER: GroupChannel delivered[true] id:UniqueId{48, -7, -97, -123, -116,
-54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17}
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.NioReplicationTask sendAck
FINER: ACK sent to 55801
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.ParallelNioSender doLoop
FINER: ParallelNioSender - Sent msg:UniqueId{48, -7, -97, -123, -116,
-54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} at 2010-06-28
10:27:40.785 to tcp://{127, 0, 0, 1}:4010
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.transport.nio.ParallelNioSender doLoop
FINER: ParallelNioSender - Sent msg:UniqueId{48, -7, -97, -123, -116,
-54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} at 2010-06-28
10:27:40.786 to tcp://{127, 0, 0, 1}:4020
Jun 28, 2010 10:27:40 AM
org.apache.catalina.tribes.group.ChannelCoordinator sendMessage
FINER: ChannelCoordinator - Sent msg:UniqueId{48, -7, -97, -123, -116,
-54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} at 2010-06-28
10:27:40.786 to {tcp://{127, 0, 0, 1}:4010, tcp://{127, 0, 0, 1}:4020}
Jun 28, 2010 10:27:40 AM org.apache.catalina.tribes.group.GroupChannel
send
FINER: GroupChannel - Sent msg:UniqueId{48, -7, -97, -123, -116, -54,
78, -17, -115, -13, -34, 116, 39, 49, 95, 17} at 2010-06-28 10:27:40.787
to {tcp://{127, 0, 0, 1}:4010, tcp://{127, 0, 0, 1}:4020}
Jun 28, 2010 10:27:40 AM org.apache.catalina.tribes.group.GroupChannel
send
FINER: GroupChannel - Send Message:UniqueId{48, -7, -97, -123, -116,
-54, 78, -17, -115, -13, -34, 116, 39, 49, 95, 17} is
SingleSignOnMessage[action=3D3, =
ssoId=3D7BA0AB7AE2BFDB08CE2EBE8F42D3E89C,
sessionId=3Dnull, username=3Dnull]
Jun 28, 2010 10:27:40 AM
org.apache.catalina.ha.authenticator.ClusterSingleSignOn deregister
FINE: SingleSignOnMessage Send with action 3
Jun 28, 2010 10:27:40 AM org.apache.catalina.authenticator.SingleSignOn
deregister
FINE: Deregistering sso id '7BA0AB7AE2BFDB08CE2EBE8F42D3E89C'
Jun 28, 2010 10:27:40 AM org.apache.catalina.connector.MapperListener
handleNotification
FINE: Handle Catalina:type=3DManager,path=3D/cluster,host=3Dwebclust2 =
type :
JMX.mbean.unregistered
Jun 28, 2010 10:27:40 AM org.apache.catalina.connector.MapperListener
handleNotification
FINE: Handle Catalina:type=3DManager,path=3D/cluster,host=3Dwebclust2 =
type :
JMX.mbean.unregistered
Jun 28, 2010 10:27:40 AM org.apache.catalina.core.StandardContext
listenerStop
FINE: Sending application stop events


    /**
     * Notifies the cluster that a single sign on session
     * has been terminated due to a user logout, deregister
     * the specified single sign on identifier, and invalidate
     * any associated sessions on the local node.
     *
     * @param ssoId Single sign on identifier to deregister
     */
    protected void deregister(String ssoId) {

	if (cluster !=3D null) {
	    messageNumber++;
	    SingleSignOnMessage msg =3D
		new SingleSignOnMessage(cluster.getLocalMember(),
					ssoId, null);
	    msg.setAction(SingleSignOnMessage.LOGOUT_SESSION);

	    cluster.sendClusterDomain(msg);
	    if (containerLog.isDebugEnabled())
		containerLog.debug("SingleSignOnMessage Send with action
"
				   + msg.getAction());
	}

	deregisterLocal(ssoId);

    }

    protected void deregisterLocal(String ssoId) {

	super.deregister(ssoId);

    }


-----Original Message-----
From: Pid [mailto:pid@pidster.com]=20
Sent: Friday, June 25, 2010 4:29 AM
To: Tomcat Users List
Subject: Re: question for sso session replication in tomcat 6.0.26

On 24/06/2010 21:49, Okubo, Yasushi (TSD) wrote:
> My bad.
>=20
> I added *.jsp to the filter since it contains the path to index page
as
> follows.  Now, I am wondering when sso session id is created and
> replicated, is it when index.jsp was accessed or login.jsp was
accessed?

You had added it and have now removed it?

The normal session id is created when you access a JSP for the first
time, unless you have specifically configured JSPs to not create a
session.  A session can also be created manually by a Filter or a
Servlet.

The SSO session is created when the container login process completes
authentication successfully.

I'm not entirely clear on when SSO replication occurs - presumably only
when there's a change like session invalidation or creation.


p


> =3D=3D index.jsp =3D=3D
> <% =
response.sendRedirect("/test/index.html?homepage=3Ddyn&prop=3DHome");
%>
>=20
> -----Original Message-----
> From: Okubo, Yasushi (TSD)=20
> Sent: Thursday, June 24, 2010 1:13 PM
> To: 'Tomcat Users List'
> Subject: RE: question for sso session replication in tomcat 6.0.26
>=20
>=20
> Hi Pid
>=20
> I started getting the following error upon login to one node onto
> cluster.
> Could you tell me what this mean is?
>=20
> Yasushi
>=20
>=20
> Jun 24, 2010 10:51:58 AM org.apache.catalina.ha.tcp.ReplicationValve
> sendReplicationMessage
> SEVERE: Unable to perform replication request.
> java.lang.NullPointerException
>         at
>
org.apache.catalina.ha.tcp.ReplicationValve.isRequestWithoutSessionChang
> e(ReplicationValve.java:590)
>         at
>
org.apache.catalina.ha.tcp.ReplicationValve.sendSessionReplicationMessag
> e(ReplicationValve.java:516)
>         at
>
org.apache.catalina.ha.tcp.ReplicationValve.sendReplicationMessage(Repli
> cationValve.java:430)
>         at
>
org.apache.catalina.ha.tcp.ReplicationValve.invoke(ReplicationValve.java
> :363)
>         at
>
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
> :102)
>         at
>
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:555
> )
>         at
>
org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:
> 421)
>         at
>
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.
> java:109)
>         at
>
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:2
> 98)
>         at
>
org.apache.coyote.ajp.AjpAprProcessor.process(AjpAprProcessor.java:427)
>         at
>
org.apache.coyote.ajp.AjpAprProtocol$AjpConnectionHandler.process(AjpApr
> Protocol.java:384)
>         at
>
org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1555)
>         at java.lang.Thread.run(Thread.java:619)
>=20
>=20


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org