Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <4C751B14.3090903@christopherschultz.net>
Date: Wed, 25 Aug 2010 09:31:00 -0400
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US;
 rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Session problem
References: <AANLkTinX_zwK2mAo91b9GzppGJRHHATOtWaow0vk0268@mail.gmail.com>
 <AANLkTikh5dq0Q2eOozk_qfEu4ARacNwNRqbq=8V0tXfr@mail.gmail.com>
 <871FC508-606A-46C5-AB55-486D2A3BB646@commongrnd.com>
 <AANLkTiknxbx4PXWVUiZczxRQVjnt-W22z46nYZEFqP=z@mail.gmail.com>
 <AANLkTimxNcB=uJhSpqyp+gVDPWC4a7XLRzzGTZ1x-vg3@mail.gmail.com>
In-Reply-To: <AANLkTimxNcB=uJhSpqyp+gVDPWC4a7XLRzzGTZ1x-vg3@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hisham,

On 8/24/2010 10:30 PM, Hisham wrote:
> Jason, you're right in that the tabs i was referring to were tabs
> within my application.  I will verify tomorrow whether the domain is
> different, but i seriously doubt it.

I have a few other things you could check out:

1. Are you using cookies? If you don't properly encode all the URLs in
your webapp, you could be losing session information when cookies are
/not/ being used. It sounds like you are using cookies, though, given
your statement about using Firebug to read the headers en route.

2. Even if your session id is okay, are you dumping the value of the
"test attribute" for the session? Even though you aren't removing it,
that attribute might have been damaged by something else.

3. You could write another filter that wraps your HttpSession when
requested by the webapp and reports all modifications to it (that is,
calls to setAttribute/removeAttribute/setValue/removeValue).

4. Any reason not to use the container-managed login and session
management? Tomcat can take care of all this logic for you...

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkx1GxQACgkQ9CaO5/Lv0PBChACfSn30308mX8fTcYDPFGnOHYYZ
JlMAoIZ/d8ZpiJRwc+94pbwfDZAiaQWT
=EiKI
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org