[Bug 44216] Don't reuse session ID even if emptySessionPath=true

2015-02-05 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=44216

Mark Thomas ma...@apache.org changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |WONTFIX

--- Comment #2 from Mark Thomas ma...@apache.org ---
Coming back to this after far too long.

If this request were implemented I don't believe the problem would be solved
or, at lease, a new one would be created. Reviewing the borken case assuming
the requested option was avaialable and enabled:
- The user navigates to the website and get the session yyy.t2from T2.
- He then bookmarks a URL with session id in it like the one above.
- The next day, he navigates to the website again and get the session xxx.t1
from T1.
- He then selects bookmarked URL.
= The request is redirected to T2. The session is invalid so a new one is
created zzz.t2. This overwrites yyy.t2 created at step 1. Any information
associated with session yyy.t2 is now lost.

The way to fix this would be to fix the load-balancer so that the node
information from the cookie session ID takes precedence over the node
information in the URL session ID.

-- 
You are receiving this mail because:
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org



DO NOT REPLY [Bug 44216] Don't reuse session ID even if emptySessionPath=true

2011-12-20 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=44216

Mark Thomas ma...@apache.org changed:

   What|Removed |Added

  Component|Catalina|Catalina
Version|Unknown |unspecified
Product|Tomcat 5|Tomcat 7

--- Comment #1 from Mark Thomas ma...@apache.org 2011-12-20 20:36:23 UTC ---
This Tomcat 5 enhancement request has been moved to Tomcat 7 (the latest
version) since Tomcat 5 development is limited and focussed on bugs and
security issues whereas Tomcat 7 is still seeing new feature development.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.

-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org