RE: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-15 Thread Jaime Metcher
Jason, Not sure if you saw my reply to the now somewhat out of control thread on CFC locking, so here it is again: I have seen a problem where a proxy cache was mixing up user's sessions so they would actually see each other's data. The actual mechanism was that the proxy would return the cookie

Re: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Andrew Grosset
Encourage your affected users to download Firefox and see if that rectifies the problem. Andrew. ~| Upgrade to Adobe ColdFusion MX7 The most significant release in over 10 years. Upgrade & see new features. http://www.adobe.com/

Re: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Dana Kowalski
while there are a lot of things you can do there is a reality than Internet Explorer 5.5 through version 7 has some bugs and features that hamper pure session functionality without the use of cookies unfortunately. ~| ColdFusio

Re: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Josh Nathanson
> If the > client didn't send the same cookie values then the server would have no > choice but to assign a new value. If you can verify that the client was > doing the right thing then I imagine that helps to isolate the problem > to the server. Along these lines, make sure that all the requests

RE: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Gaulin, Mark
I've never seen this, so this is just a random idea: Do you have access to the web server log files (and do you log cookies)? If so, can you verify that the client browser was sending in the same cookie value to the server at the point where they got redirected to the login? If the client didn't s

Re: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Jason Dunaway
Thanks again for the help Dana! > still having the problem eh? You're not alone :) > > Here are most good topics on it: > > Sun Developer Network - Tomcat workarounds to holding IE sessions:: > http://forum.java.sun.com/thread. > jspa?threadID=702395&messageID=4073475 > > post on using apache

Re: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Dana Kowalski
still having the problem eh? You're not alone :) Here are most good topics on it: Sun Developer Network - Tomcat workarounds to holding IE sessions:: http://forum.java.sun.com/thread.jspa?threadID=702395&messageID=4073475 post on using apache as proxy vs using Tomcat directly and session droppin

Re: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Jason Dunaway
Of the 360 timeouts that have happened during the last few weeks there are 99 ip addresses. A few of them have this happen moreso than others. Browser is IE most of the time, version 6 I believe. I never thought of the spyware blocker suggestion, might be a possibility... We've discussed p

RE: What conditions would cause a new jsessionid to be assigned to a user session?

2007-04-13 Thread Everett, Al \(NIH/NIGMS\) [C]
Something monkeying with the jsession cookie, I imagine. A poorly-conceived spyware blocker, perhaps, or a poorly configured proxy server. Can you find any commonality among the users this is happening to? Browser version? Company or IP address? -Original Message- I know this may be a rat