https://issues.apache.org/bugzilla/show_bug.cgi?id=44216

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #2 from Mark Thomas <ma...@apache.org> ---
Coming back to this after far too long.

If this request were implemented I don't believe the problem would be solved
or, at lease, a new one would be created. Reviewing the borken case assuming
the requested option was avaialable and enabled:
- The user navigates to the website and get the session "yyy.t2"from T2.
- He then bookmarks a URL with session id in it like the one above.
- The next day, he navigates to the website again and get the session "xxx.t1"
from T1.
- He then selects bookmarked URL.
=> The request is redirected to T2. The session is invalid so a new one is
created zzz.t2. This overwrites yyy.t2 created at step 1. Any information
associated with session yyy.t2 is now lost.

The way to fix this would be to fix the load-balancer so that the node
information from the cookie session ID takes precedence over the node
information in the URL session ID.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to