Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com.br;
  h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=e/fWDWZr0fxjCVsd8RNWp8qYj4xb1Y0KriA/++G1UHfG9brTtCTCVBKxW/zlGuIFmeKzbQq+q+IdG+QNS5mGluSmRIvq/dVdj/XKv+rkK8VcWWwoUfiWs6c7x02yAGb52I+SeLlZkd2MECWqBq71PWRisGeGZvuTGZykTrM2F6A=;
Message-ID: <761414.26466.qm@web54307.mail.re2.yahoo.com>
References: <116345.85348.qm@web54305.mail.re2.yahoo.com>
 <4CB87145.1030205@pidster.com> <832582.65745.qm@web54305.mail.re2.yahoo.com>
 <4CB87F2A.4090404@pidster.com> <396086.52163.qm@web54304.mail.re2.yahoo.com>
 <-6579711852025296377@unknownmsgid>
Date: Sat, 16 Oct 2010 05:55:14 -0700 (PDT)
From: Juliano Daloia de Carvalho <judac2000@yahoo.com.br>
Subject: Res: Res: Res: JSESSIONID Cookie handle customizing
To: Tomcat Users List <users@tomcat.apache.org>
In-Reply-To: <-6579711852025296377@unknownmsgid>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

yes Pid, we can say that is a kind of encryption.=0A=0Ado you know which is=
 the first tomcat class that receives the client request? =0A=0Ado you know=
 which is the last tomcat class that is used before send the =0Aresponse =
=0Ato the client?=0A=0Atks.=0A =0AJuliano=0A=0A=0A=0A----- Mensagem origina=
l ----=0ADe: Pid * <pid@pidster.com>=0APara: Tomcat Users List <users@tomca=
t.apache.org>=0AEnviadas: S=E1bado, 16 de Outubro de 2010 4:01:23=0AAssunto=
: Re: Res: Res: JSESSIONID Cookie handle customizing=0A=0ASo you want encry=
pt the session id?=0A=0A=0Ap=0A=0A=0AOn 15 Oct 2010, at 17:33, Juliano Dalo=
ia de Carvalho=0A<judac2000@yahoo.com.br> wrote:=0A=0A> I need to change th=
e value of the sessionID. If I let this to be done on the=0A> servlet, tomc=
at won't be able to identify the real session, and will send a=0A> redirect=
 to login page.=0A>=0A>=0A>=0A>=0A> ----- Mensagem original ----=0A> De: Pi=
d <pid@pidster.com>=0A> Para: Tomcat Users List <users@tomcat.apache.org>=
=0A> Enviadas: Sexta-feira, 15 de Outubro de 2010 13:19:54=0A> Assunto: Re:=
 Res: JSESSIONID Cookie handle customizing=0A>=0A> On 15/10/2010 17:02, Jul=
iano Daloia de Carvalho wrote:=0A>> I'll inject code using an agent.=0A>>=
=0A>> The thing is that I need to know for sure the message entering point =
on =0A>Tomcat,=0A>>=0A>> and the leaving point also, so I can be able to sn=
iff if the clients message=0A>> has=0A>>=0A>> the Cookie info with JSESSION=
ID=3D or not. and before sending to check if =0Atomcat=0A>=0A>> sent set-co=
okie on header so I can make the change needed.=0A>=0A> Why?  What does the=
 code do that can't be done via a Servlet Filter?=0A>=0A>=0A> p=0A>=0A>=0A>=
> ----- Mensagem original ----=0A>> De: Pid <pid@pidster.com>=0A>> Para: To=
mcat Users List <users@tomcat.apache.org>=0A>> Enviadas: Sexta-feira, 15 de=
 Outubro de 2010 12:20:37=0A>> Assunto: Re: JSESSIONID Cookie handle custom=
izing=0A>>=0A>> On 15/10/2010 15:15, Juliano Daloia de Carvalho wrote:=0A>>=
> Hi Folks!=0A>>>=0A>>>       I want to put some information on the JSESSIO=
NID that tomcat =0Agenerates.=0A>>=0A>>=0A>>> I'm using aspect programming =
so I don=B4t need to change the tomcat code =0A>itself.=0A>>=0A>>=0A>>=0A>>=
 What information?=0A>>=0A>>> The=0A>>>=0A>>> thing is that I found many po=
ints where tomcat handle this information, I=0A>>> checked and notice that =
the head parser is made on the method parseSessionId=0A>>> and=0A>>>=0A>>>=
=0A>>> parseSessionCookiesId in the class=0A>> org.apache.catalina.connecto=
r.CoyoteAdapter.=0A>>>=0A>>> I'm not convinced that there is the perfect po=
int to make my code injection.=0A>>=0A>> You are planning to inject code in=
to the container, from a web application?=0A>>=0A>>=0A>> p=0A>>=0A>>> I nee=
d to find out the exactly point that this information (Cookie=0A>>> JSESSIO=
NID=3D2222222222) is received by Tomcat and where tomcat sends this=0A>>> i=
nformation to the browser, in other words, the first contact with this=0A>>=
> information=0A>>>=0A>>> when browser sends and the last contact before se=
nding to browser.=0A>>>=0A>>>=0A>>> Thanks.=0A>>>=0A>>>=0A>>> Juliano=0A>>>=
=0A>>>=0A>>>=0A>>>=0A>>>=0A>>> --------------------------------------------=
-------------------------=0A>>> To unsubscribe, e-mail: users-unsubscribe@t=
omcat.apache.org=0A>>> For additional commands, e-mail: users-help@tomcat.a=
pache.org=0A>>>=0A>>=0A>>=0A>>=0A>>=0A>> ----------------------------------=
-----------------------------------=0A>> To unsubscribe, e-mail: users-unsu=
bscribe@tomcat.apache.org=0A>> For additional commands, e-mail: users-help@=
tomcat.apache.org=0A>>=0A>=0A>=0A>=0A>=0A> --------------------------------=
-------------------------------------=0A> To unsubscribe, e-mail: users-uns=
ubscribe@tomcat.apache.org=0A> For additional commands, e-mail: users-help@=
tomcat.apache.org=0A>=0A=0A------------------------------------------------=
---------------------=0ATo unsubscribe, e-mail: users-unsubscribe@tomcat.ap=
ache.org=0AFor additional commands, e-mail: users-help@tomcat.apache.org=0A=
=0A=0A      

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org