Re: Losing Sessions [spamtrap bayes][spamtrap heur]

2011-03-09 Thread Mary Jo Sminkey
in our case it was. client had a console page with secure/un-secure bits mixed together it was throwing off users w/IE7 after the hotfix was applied. while they work out what is actually wrong, adding that JVM argument fixed that issue. Cool, I'll see if my host can apply this, or I do have

Re: Losing Sessions [spamtrap bayes][spamtrap heur]

2011-03-09 Thread Mary Jo Sminkey
in our case it was. client had a console page with secure/un-secure bits mixed together it was throwing off users w/IE7 after the hotfix was applied. while they work out what is actually wrong, adding that JVM argument fixed that issue. Cool, I'll see if my host can apply this,

Re: Losing Sessions [spamtrap bayes][spamtrap heur]

2011-03-09 Thread Mary Jo Sminkey
Drat, my host says they haven't applied that hot fix yet, so I assume that means adding the JVM argument isn't likely to fix anything, if the hot fix is what causes the issue. I think my next step is to test on the CF7 box and see if we see the same behavior there. Okay, things work fine

Losing Sessions

2011-03-08 Thread Mary Jo Sminkey
I'm having a really frustrating issue with an application and cannot figure out where the problem is. The client is getting randomly logged out of the system, basically the session is getting reset. So far, not all that unusual, I've certainly seen this kind of issue before. But the weird

Re: Losing Sessions

2011-03-08 Thread Drew Nathanson
Mary Jo, Check the CF Administrator under memory variables and see what the MAX timeout is for Application Session. Also, check the value on your CFAPPLICATION tag. Make sure you didn't change the session timeout there to something smaller than what you wanted. Drew Nathanson Technical

RE: Losing Sessions

2011-03-08 Thread Bobby Hartsfield
- From: Drew Nathanson [mailto:d...@technicalsynergy.com] Sent: Tuesday, March 08, 2011 7:01 PM To: cf-talk Subject: Re: Losing Sessions Mary Jo, Check the CF Administrator under memory variables and see what the MAX timeout is for Application Session. Also, check the value on your CFAPPLICATION

Re: Losing Sessions

2011-03-08 Thread Mary Jo Sminkey
Check the CF Administrator under memory variables and see what the MAX timeout is for Application Session. Also, check the value on your CFAPPLICATION tag. Make sure you didn't change the session timeout there to something smaller than what you wanted. No, those are all fine. And if

Re: Losing Sessions

2011-03-08 Thread Mary Jo Sminkey
If that checks out, I'd try to track their session through the web logs. We recently had the same issue with randomly expiring sessions. It turned out that the client had a proxy that was changing their IP every minute or so; that, combined with or custom anti-session hijacking checks, was the

Re: Losing Sessions

2011-03-08 Thread Kym Kovan
On 9/03/2011 14:21, Mary Jo Sminkey wrote: It's the failure of the CFID/CFTOKEN to change that's particularly confusing to me, since any other time when I've seen these kinds of issues and the session is being lost, they'll change on every request. Although I realized today I was only

Re: Losing Sessions

2011-03-08 Thread Mary Jo Sminkey
How about dropping a cflog tag with some useful info into OnSessionStart to see if the sessions is actually restarting or not? Hhm, currently it uses application.cfm so that isn't available, I'd have to look at how easy it would be to switch it if this really becomes necessary to debug

Re: Losing Sessions [spamtrap bayes][spamtrap heur]

2011-03-08 Thread Paul Hastings
shot in the dark, but just had issues w/some IE7 browsers (not FF, chrome, etc.) losing sessions after applying latest hotfix which seems related to this: * A JVM property was added in case you want to completely switch off the fix for the Session Fixation issue ( Bug 86378) which prior

Re: Losing Sessions

2011-03-08 Thread Mark Mandel
Separate domains? www.domain.com vs domain.com ? I've been caught by that before, and as far as cookies go, they see them as totally separate. Mark Sent from my mobile device. On 09/03/2011 2:55 PM, Mary Jo Sminkey mary...@cfwebstore.com wrote: How about dropping a cflog tag with some

Re: Losing Sessions

2011-03-08 Thread Mary Jo Sminkey
Separate domains? www.domain.com vs domain.com ? I've been caught by that before, and as far as cookies go, they see them as totally separate. No, no changes in the domain. Also not using SSL. I can reload the same page and get the session to drop (just takes a few tries sometimes). MJS

Re: Losing Sessions

2011-03-08 Thread Mary Jo Sminkey
shot in the dark, but just had issues w/some IE7 browsers (not FF, chrome, etc.) losing sessions after applying latest hotfix which seems related to this: * A JVM property was added in case you want to completely switch off the fix for the Session Fixation issue ( Bug 86378) which prior

Re: Losing Sessions [spamtrap bayes][spamtrap heur]

2011-03-08 Thread Paul Hastings
On 3/9/2011 12:51 PM, Mary Jo Sminkey wrote: Well this definitely seems to be more in the ballpark! I'm not entirely sure I understand this note though, why would you want to switch off the fix? Is the fix itself the cause of the session loses? in our case it was. client had a console page

Losing Sessions Variable

2004-05-17 Thread ANNAMANAIDU, VENKATESH (SBCSI)
that page kicks you out. All links are cfmx templates in same server and directory. Also (1) We have enabled session management in Application.cfm (2) We have given ample time in CFMX admin for session timeout. Have you come across this issue of losing sessions. Any ideas how to retain session

RE: Losing Sessions Variable

2004-05-17 Thread Bartlett, Robert E. USNUNK NAVAIR 1490, 54-L4
(SBCSI) [mailto:[EMAIL PROTECTED] Sent: Monday, May 17, 2004 12:47 P To: CF-Talk Subject: Losing Sessions Variable Experts, I am reposting this question. Please bear with me. Application.cfm isfollows .. .. cfparam name=Session.LogState default=OUT cfif IsDefined(url.uCmpyID) cfinclude