[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-8977?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14982246#comment-14982246
 ] 

ASF GitHub Bot commented on CLOUDSTACK-8977:
--------------------------------------------

Github user miguelaferreira commented on the pull request:

    https://github.com/apache/cloudstack/pull/961#issuecomment-152474694
  
    In tomcat I see the following errors:
    ```
    Oct 30, 2015 9:39:13 AM org.apache.catalina.core.ApplicationDispatcher 
invoke
    SEVERE: Servlet.service() for servlet jsp threw exception
    java.lang.IllegalStateException: Cannot create a session after the response 
has been committed
            at 
org.apache.catalina.connector.Request.doGetSession(Request.java:2934)
            at 
org.apache.catalina.connector.Request.getSession(Request.java:2310)
            at 
org.apache.catalina.connector.RequestFacade.getSession(RequestFacade.java:897)
            at 
javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:229)
            at 
org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:569)
            at 
org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:514)
            at 
org.apache.jasper.runtime.PageContextImpl._initialize(PageContextImpl.java:147)
            at 
org.apache.jasper.runtime.PageContextImpl.initialize(PageContextImpl.java:126)
            at 
org.apache.jasper.runtime.JspFactoryImpl.internalGetPageContext(JspFactoryImpl.java:112)
            at 
org.apache.jasper.runtime.JspFactoryImpl.getPageContext(JspFactoryImpl.java:65)
            at org.apache.jsp.dictionary_jsp._jspService(dictionary_jsp.java:66)
            at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
            at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:432)
            at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:390)
            at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:334)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
            at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
            at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
            at 
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748)
            at 
org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:604)
            at 
org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:543)
            at 
org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:954)
            at org.apache.jsp.index_jsp._jspService(index_jsp.java:2735)
            at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
            at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:432)
            at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:390)
            at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:334)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
            at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
            at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
            at 
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
            at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
            at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
            at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
            at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
            at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501)
            at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
            at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
            at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
            at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
            at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
            at 
org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1040)
            at 
org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
            at 
org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)
            at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
            at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
            at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
            at java.lang.Thread.run(Thread.java:745)
    ```
    
    Then is cascades for several other requests:
    ```
    Oct 30, 2015 9:39:13 AM org.apache.catalina.core.StandardWrapperValve invoke
    SEVERE: Servlet.service() for servlet [jsp] in context with path [/client] 
threw exception [org.apache.jasper.JasperException: 
javax.servlet.ServletException: java.lang.IllegalStateException: Cannot create 
a session after the response has been committed] with root cause
    java.lang.IllegalStateException: Cannot create a session after the response 
has been committed
            at 
org.apache.catalina.connector.Request.doGetSession(Request.java:2934)
            at 
org.apache.catalina.connector.Request.getSession(Request.java:2310)
            at 
org.apache.catalina.connector.RequestFacade.getSession(RequestFacade.java:897)
            at 
javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:229)
            at 
org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:569)
            at 
org.apache.catalina.core.ApplicationHttpRequest.getSession(ApplicationHttpRequest.java:514)
            at 
org.apache.jasper.runtime.PageContextImpl._initialize(PageContextImpl.java:147)
            at 
org.apache.jasper.runtime.PageContextImpl.initialize(PageContextImpl.java:126)
            at 
org.apache.jasper.runtime.JspFactoryImpl.internalGetPageContext(JspFactoryImpl.java:112)
            at 
org.apache.jasper.runtime.JspFactoryImpl.getPageContext(JspFactoryImpl.java:65)
            at org.apache.jsp.dictionary_jsp._jspService(dictionary_jsp.java:66)
            at 
org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
    ...
    ```
    
    Even the error page does not show because of it
    ```
    Oct 30, 2015 9:39:13 AM org.apache.catalina.core.StandardHostValve custom
    SEVERE: Exception Processing ErrorPage[exceptionType=java.lang.Exception, 
location=*/error.jsp*]
    org.apache.jasper.JasperException: javax.servlet.ServletException: 
java.lang.IllegalStateException: Cannot create a session after the response has 
been committed
            at 
org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:549)
            at 
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:455)
            at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:390)
            at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:334)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
            at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
    ...
    ```
    
    I'm not a web application expert, but I've looked at the code of the UI and 
it seems that all "pages" are defined in a single page but hidden. If that is 
the case, how can we disable session for one page but not for the others?


> cloudstack UI creates a session for users not yet logged in
> -----------------------------------------------------------
>
>                 Key: CLOUDSTACK-8977
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8977
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>          Components: UI
>    Affects Versions: 4.5.2
>            Reporter: Laszlo Hornyak
>            Assignee: Laszlo Hornyak
>             Fix For: Future
>
>   Original Estimate: 0.1h
>  Remaining Estimate: 0.1h
>
> The cloudstack UI always creates a session. By executing a command like 'ab 
> -n 200000 -c 32' the server can be killed reqlly quick.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to