Use session replication with Tomcat Clustering and mod_jk loadbalancing
http://jakarta.apache.org/tomcat/tomcat-5.5-doc/cluster-howto.html
Peter
Mark schrieb:
Is there any possibility for tomcats on separate machines to share
session information. I am looking into load balancing a few
-Ursprüngliche Nachricht-
Von: Leon Rosenberg [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 6. Oktober 2005 07:43
An: Tomcat Users List; Mark
Betreff: Re: custom session manager
On 10/6/05, Mark [EMAIL PROTECTED] wrote:
basically, I want to prevent users from logging
On 10/6/05, Tobias Meyer [EMAIL PROTECTED] wrote:
Or, cou could add a static hashmap to your Servlet (or a bean if using JSPs)
where you simply add the sessions with every request. You would have to put
an attribute implementing javax.servlet.http.HttpSessionActivationListener
in each session
-Ursprüngliche Nachricht-
Von: Leon Rosenberg [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 6. Oktober 2005 11:20
An: Tomcat Users List
Betreff: Re: custom session manager
On 10/6/05, Tobias Meyer [EMAIL PROTECTED] wrote:
Or, cou could add a static hashmap to your Servlet
Hello,
Is it normal that the session is invalidated before the valueUnbound handlers
are called?
Ronald.
java.lang.IllegalStateException: getId: Session already invalidated
at
org.apache.catalina.cluster.session.DeltaSession.getId(DeltaSession.java:335
I'm testing 5.5.12 here on java 1.5 on linux 2.6.
My SessionList is a list of session id's which I keep to count the sessions.
Ronald.
On Thu Oct 06 15:19:00 CEST 2005 Tomcat Users List
tomcat-user@jakarta.apache.org wrote:
Hello,
Is it normal that the session is invalidated before
Sorry, aber how exactly does it solves the problem of having one
session per user? :-)
On 10/6/05, Tobias Meyer [EMAIL PROTECTED] wrote:
-Ursprüngliche Nachricht-
Von: Leon Rosenberg [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 6. Oktober 2005 11:20
An: Tomcat Users List
sessions for the same user. = Max. one
active session per user.
-Ursprüngliche Nachricht-
Von: Leon Rosenberg [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 6. Oktober 2005 16:11
An: Tomcat Users List
Betreff: Re: custom session manager
Sorry, aber how exactly does it solves
iterate over them at
login and manually expire all old sessions for the same user. = Max. one
active session per user.
ok, got you, yes that's feasible
thanx for explanations
leon
-
To unsubscribe, e-mail: [EMAIL PROTECTED
easily iterate over them at
login and manually expire all old sessions for the same user. = Max. one
active session per user.
ok, got you, yes that's feasible
thanx for explanations
leon
-
To unsubscribe, e-mail: [EMAIL
Ronald Klop wrote:
Hello,
Is it normal that the session is invalidated before the valueUnbound
handlers are called?
The spec is your friend.
spec-quote section=SRV.15.1.7
...For sessions that are invalidated or expire, notifications are sent
after the session has been invalidated
Hello list,
I have a problem with a tomcat 5.0.28 installation connected to IIS 6.0
(Windows 2003 server) with isapi_redirect.dll
Everything is working well, except for the session timeout.
The timeout is set to 60 minutes in the context's web.xml file
(session-timeout60/session-timeout) which
something like this
OK - Session information for application at context path /examples
Default maximum session inactive interval 30 minutes
30 - 40 minutes:1 sessions
If this count the sessions that will expired within 10 minutes,
Why would the newly created session be counted?
3) Why is the display
Jean-Pierre Pelletier wrote:
Hi,
1) When I look at sessions statistics for an application,
using https://localhost/manager/html/sessions?path=/myApplication
Why does Tomcat always list the number of sessions to expired
within 10 minutes as equal to the number of active sessions?
Looks like a
Is there any possibility for tomcats on separate machines to share
session information. I am looking into load balancing a few tomcats
with an apache in front of them. In other words, the setup will be
internet - Apache(s) - Tomcats
Is it possible for this type of scenario to exist, and sesion
I suggest that the display of 30 - 40 minutes:1 sessions
be rethink. To me it looks misleading at best.
The documentation is probably wrong as well.
In the example, the newly created session shouldn't be counted.
Jean-Pierre Pelletier
- Original Message -
From: Mark Thomas [EMAIL
This is about 90% of what I want. One of the features I want to put
into my session manager is the ability to only have one open session
per user. What I would like is to have a createSession method that
takes in user and host. This way I could be relatively sure that the
user could only have
into my session manager is the ability to only have one open session
per user. What I would like is to have a createSession method that
takes in user and host. This way I could be relatively sure that the
user could only have one session at a time.
The way the API looks is I have no way of passing
Hi,
documentation says:
Display ... the number of currently active sessions that fall within
ten-minute ranges of their actual timeout times.
Actual timeout times does not mean from now, but instead in general.
It does not relate to when the session has been used last time. Since all
sessions
basically, I want to prevent users from logging in and creating a
second session if a valid session for that user already exists.
For instance.
1. Log in to my web app, session is created
2. browse around in my web app
3. close browser, do not logout
4. Start browser up again
5. try and log in
6
From: Mark [mailto:[EMAIL PROTECTED]
Subject: Re: custom session manager
basically, I want to prevent users from logging in and creating a
second session if a valid session for that user already exists.
Why? Some strange security issue? Resource consumption? An anti-DoS
measure
On 10/6/05, Mark [EMAIL PROTECTED] wrote:
basically, I want to prevent users from logging in and creating a
second session if a valid session for that user already exists.
For instance.
1. Log in to my web app, session is created
2. browse around in my web app
3. close browser, do
Thanks a lot Bernhard, this is a pretty complete explanation!
Michał.
-Original Message-
From: Bernhard Slominski [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 29, 2005 6:25 PM
To: 'Tomcat Users List'
Subject: AW: session state preserved across different applications
Hi
[EMAIL PROTECTED] wrote:
After using tomcat since the 3.x days, I have been very impressed with
the amount of flexibility and configuration options that I have
available to me.
One part of the tomcat design that I do not believe is very flexible
is the ability to set up a custom session manager
Dear all,
How is it possible to preserve session state across different applications
deployed in tomcat?
I'm pretty sure I saw it somewhere, but I can't remember where it was...
Thanks in advance,
Michał.
-
To unsubscribe
Hi Michael,
this comes up every so often, so here is just the answer, which I posted
some time ago:
First of all the session is ALWAYS on application scope, this is not an
Tomcat specific behaviour but a requirement of the Specification:
SRV.7.3 Session Scope
HttpSession objects must be scoped
One-liner: How do you turn session cookies off, server side?
Hi!
Nowadays it's illegal to use cookies on web sites in sweden, without
informing the visitor that it's done and why, what cookie is etc. Since
I don't have any use of a session nor am interested in adding a page
saying we use
On 9/28/05, Fredrik Wendt [EMAIL PROTECTED] wrote:
One-liner: How do you turn session cookies off, server side?
Context/ element has an attribute cookies. set it to false to turn
off session cookies.
See http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/context.html
Hi!
Nowadays it's
Maybee OT, but is using URL rewriting considered as cookie?
/Johan
-Original Message-
From: Anto Paul [mailto:[EMAIL PROTECTED]
Sent: den 28 september 2005 13:12
To: Tomcat Users List
Subject: Re: how to turn off session cookies
On 9/28/05, Fredrik Wendt [EMAIL PROTECTED] wrote:
One
We have a web-application that uses a implemented
logging mechanism where the valid-user is stored in the session.
Now there shall come another web-application that shall be used
with the user that was authenticated before.
I know that session sharing is not allowed
but what else could I do
I have seen some forums in which the suggestion is to store the userid and
session id in a database table upon leaving the first application and then
retrieving that session_id for the same user upon entering the 2nd application.
If you don't have this record in the database table then force
Hello all,
I'm trying to force a particular web application to use url-rewritting
in place of session cookies to manage the session on Tomcat 5.0.28. I
have, per the documentation, set the cookies=false attribute of the
Context container for that application. However, the cookie is still
Hi, all,
In my application, a session attribute is needed to
let the application function properly. So, I have a
filter to verify whether this attribute is set or not
in the session.
The doFilter method of the filter is something like
the following:
public void doFilter(ServletRequest
I already found the problem. It is about how a request
shall be written in a JSP file: using c:url
value=myRequest.html.
Thanks
--- Vernon [EMAIL PROTECTED] wrote:
Hi, all,
In my application, a session attribute is needed to
let the application function properly. So, I have a
filter
After using tomcat since the 3.x days, I have been very impressed with
the amount of flexibility and configuration options that I have
available to me.
One part of the tomcat design that I do not believe is very flexible
is the ability to set up a custom session manager. So maybe I am
missing
Hi all,
frankly saying, i too have never tried this but we can keep some information
stored in a cookie and then we can have the other web application browse
through the cookies and find if the cookie is the intended one and process
the applciation logic.
Regards,
Sreekanth
Hi I've a web-application with authentification
that is running on tomcat.
Now we have the problem that another webapplication
is deployed that shall work with the userobject
of the other web-application.
But I'm not able to enable a session-object being
valid for two web-applications.
Can
Leon, Chuck:
Thankyou very much for (1) pointing out that tomcat has internal
session obj accesses, so go with something that accomplishes a
global fix and (2) just as important: what the current patches
are for 5.0.19+.
Leon, I went with your pre-compiled StandardSession.class and
replaced
Hello all
Is there any possibility of changing the path of the
session cookie ?
Thx.
Cristi Z.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Why do you want it ?
-Original Message-
From: cristi [mailto:[EMAIL PROTECTED]
Sent: 26 September 2005 14:12
To: Tomcat Users List
Subject: change path of the session cookie
Hello all
Is there any possibility of changing the path of the
session cookie ?
Thx.
Cristi Z
http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/http.html
emptySessionPath=true
-Tim
cristi wrote:
Hello all
Is there any possibility of changing the path of the
session cookie ?
-
To unsubscribe, e-mail: [EMAIL
Many thanks Tim
Cristi
http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/http.html
emptySessionPath=true
-Tim
cristi wrote:
Hello all
Is there any possibility of changing the path of the
session cookie
Hi,
How precise is the servlet spec v2.4? I guess the spec has been worked over
many, many times before it is released so probably it is me that has got it
wrong.
The introduction of srv.5 The Response: .this information is transmitted
from the server to the client either by HTTP headers
Hello Tomcat people
For those not wishing to migrate at this time to 5.5.12
(in our case, from 5.0.28 and jdk 1.4) would the following
be sufficient for preventing deadlock access of the session
objects ?
In a given servlet, say, ServletA, for example, might have:
HttpSession session
From: Maurice Yarrow [mailto:[EMAIL PROTECTED]
Subject: Synchronize wrapper for session obj attrib get/set
For those not wishing to migrate at this time to 5.5.12
(in our case, from 5.0.28 and jdk 1.4) would the following
be sufficient for preventing deadlock access of the session
objects
Possibly the easiest thing to do is edit the StandardSession.java file
and change the type of the attributes field to HashTable rather than
HashMap, then rebuild the associated jar. The places that already
synchronize on attributes can be left alone, since redundant synchs are
allowed and
and search for the
URL Encoding there and remove this.
There must be something like encodeURL in the source code, which causes
the session id to be appended.
Bernhard
-Ursprüngliche Nachricht-
Von: Assaf [mailto:[EMAIL PROTECTED]
Gesendet: Donnerstag, 22. September 2005 18:49
An: Tomcat Users
Hi,
I have a problem with tomcat displaying urls on my
site that include the jsessionid attached at the end.
This is particularly a problem with search engine who
crawl the site and index the page including the
session id.
Is there a way to disable it?
I am also using struts html:link so
On 9/22/05, Mark [EMAIL PROTECTED] wrote:
I would think that this is possible. I have been writing servlets for
over a year, but have not written a single line of JSP.
Technically speaking each JSP is actually a servlet... more or less.
Everything that works in the server works in the jsp
The session ids in the URL (URL Rewriting) are only used when cookies are
switched off as a fallback, so when cookies are switched on on your machine
you shouldn't see the session Id in the URL.
When you don't need a seesion on your page you can use this page directive
to switch off the session
Thanks Bernard,
My problem is to do with Search Engine bots. They seem
to be getting jsessionid when they crawl and do not
remove them. This causes them to index pages INCLUDING
the session id and therefore it appears on the search
engine listing. Any way to remove that?
Assaf
--- Bernhard
Can somebody tell me if there is a way to determine when session
replication is complete after a new tomcat instance joins the cluster?
When updating our cluster we usually restart one tomcat instance at a
time. What we noticed is if we restart the second one too quickly after
the first
I want to create a webapp that will contain both servlets and JSP. I
will be using a login page to authenticate users. I will probably use
one of the Tomcat supported authentication modules.
I am wondering if it is possible for tomcat to properly manage session
information when going between
Mark wrote:
I want to create a webapp that will contain both servlets and JSP. I
will be using a login page to authenticate users. I will probably use
one of the Tomcat supported authentication modules.
I am wondering if it is possible for tomcat to properly manage session
information when
to authenticate users. I will probably use
one of the Tomcat supported authentication modules.
I am wondering if it is possible for tomcat to properly manage session
information when going between servlet and JSP pages.
Of course. After all, every JSP is compiled into a servlet. Naturally
I have a context which includes a mail session. However, when I startup
Tomcat (version 5.0.28 on Windows XP) and it loads the context, I get an
error message saying:
11:09:53,556 ERROR ContextLoader:177 - Context initialization failed
org.springframework.beans.factory.BeanCreationException
On 15/09/05, Leon Rosenberg [EMAIL PROTECTED] wrote:
Hi,
I don't know if this fits, but could it be, that your problem is
related to the tomcat session synchronization bug?
http://issues.apache.org/bugzilla/show_bug.cgi?id=36541
That does look like a potential issue. However, I think I
containing the session id, or Tomcat
is somehow losing the id.
Does anyone have an idea what this problem could be? Perhaps you
could point me to some information about how Tomcat receives cookies
and maps these to their respective HttpSession objects.
Thanks
James Shaw
.
2) Session objects are being expired too late. Some session objects
are persisting for far longer than the 30 minutes I've specified in
web.xml. I've checked this with an HttpSessionListener today, for
example:
Timestamp: Wed Sep 14 12:26:21 BST 2005
ID
Atif Suleman wrote:
Can you stop tomcat container from creating a jsession cookie?
Check out the Context cookies=false attribute in
http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/context.html
(similarly in 5.0 and 4.1)
Paul Singleton
--
No virus found in this outgoing message.
want to stop tomcat container from creating a jsession cookie and
URL rewriting for session identifier communication.
The reason why I want tomcat to stop doing session identifier
communication is because I am working on a legacy web application,
which I want to break.
Ta
Atif
Hi
Can you stop tomcat container from creating a jsession cookie?
Ta
Atif.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
hi everyone,
i was just wondering how i can pass user's session data from Apache to Tomcat
and visversa:
an example:
Im restricting access to a directory secret/* with Apache Authentication on
Mysql (AAOM)
Inside that directory ther is a link to one of my servlets
what i want is to pass
From: Yassine ELassad [mailto:[EMAIL PROTECTED]
Subject: Apache2.x and Tomcat5.0.x Session' data
Inside that directory ther is a link to one of my servlets
what i want is to pass the user's data already collected
after the log in against AAOM (username, etc ...) to that servlet
You
: Wednesday, August 31, 2005 7:13 AM
To: tomcat-user@jakarta.apache.org
Subject: Apache2.x and Tomcat5.0.x Session' data
hi everyone,
i was just wondering how i can pass user's session data from Apache to Tomcat
and visversa:
an example:
Im restricting access to a directory secret/* with Apache
Hassan,
How do I add an instance of the listener to each session? Can you please
provide an example?
I forgot to mention that I already have the following in the first JSP after
the login is validated:
jsp:useBean id=listener class=abcd.AbcdSessionListener scope=session
) whenever the session times out.
Rather than a global listener approach, why not just add an instance
of your listener *to each session*? When the session ends and that
object receives the event, it still knows its attributes; from your
example:
public void valueUnbound(HttpSessionBindingEvent se
Hassan,
I have found the solution. I think that a big part of what you were saying was something that I was already doing but neglected to mention (i.e., having a line of code in the JSP to bind the
listener object to the session using setAttribute).
Your commenting out my two lines of code
Franklin Phan wrote:
I have found the solution.
Cool. :-)
What threw me off in the first place was the poor API documentation for
HttpSessionBindingListener interface. It says for valueUnbound:
Notifies the object that it is being unbound from a session and
identifies the session
Franklin Phan wrote:
I'm trying to code a method to clean up specifically named files inside
a working dir (in Windows XP) whenever the session times out.
Rather than a global listener approach, why not just add an instance
of your listener *to each session*? When the session ends
Hey Joakim,
you can register your own ClusterListener and send ClusterMessages with
SimpleTcpCluster object.
With the 5.5.11 release you can configure it and look inside following
code pieces:
jakarta-tomcat-catalina\modules\cluster\src\share\org\apache\catalina\cluster\session
Is there a way to set Tomcat to call listeners before invalidate() is called on
a session?
I'm trying to code a method to clean up specifically named files inside a working dir (in Windows XP) whenever the session times out. I can't seem to find a way to do it. Apparently,
invalidate
You could implement HttpSessionBindingListener and define your own
valueBound and valueUnbound methods.
DarekC
On Fri, 2005-08-26 at 13:08, Franklin Phan wrote:
Is there a way to set Tomcat to call listeners before invalidate() is called
on a session?
I'm trying to code a method to clean up
Darek,
I've tried your suggestion. As I've said before: I need to access the Session
object. This is what I have:
package abcd;
import java.io.*;
import javax.servlet.http.*;
public class AbcdSessionListener implements HttpSessionBindingListener {
private String userId;
public void
Hello,
within my web application i defined a session timeout of 30 minutes.
But some sessions strangly survive this timeout and keep being valid
until an explicit call to invalidate().
I already implemented a HttpSessionListener to keep track of session
creation, destruction, lastAccessedTime
Hi!
Is there any way of sharing data within a cluster which is not stored in
session? Think of this as sharing the application state or some
cluster-wide global state.
Regards
Joakim
-
To unsubscribe, e-mail: [EMAIL
Hi,
I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win
XP SP2, Trying a e.g. session tracking [The Session
Tracking API] using HttpSession object.
The program works[ accessCount increments] when I
don't close the current browser and open new brwoser
with CTRL + N, But if i quit the browser
-
From: Raghaw Goswami [mailto:[EMAIL PROTECTED]
Sent: 19 August 2005 14:46
To: tomcat-user@jakarta.apache.org
Subject: Session Tracking
Hi,
I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2, Trying a e.g.
session tracking [The Session Tracking API] using HttpSession object
Of corse it doesn't. If you close the browser you are killing the
session. So when the browser reopens it is getting a new session
object. This is exactly how it is supposed to work. You might be be
able to store the value in a cookie, but if the user blocks them or has
set their browser
) you
need to make it a static variable in your
servlet/jsp.
-Original Message-
From: Raghaw Goswami [mailto:[EMAIL PROTECTED]
Sent: 19 August 2005 14:46
To: tomcat-user@jakarta.apache.org
Subject: Session Tracking
Hi,
I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win
XP SP2
PROTECTED]
Sent: 19 August 2005 14:46
To: tomcat-user@jakarta.apache.org
Subject: Session Tracking
Hi,
I have JDK 1.5 [J2SE 5.0 update 3], Tomcat
5.5.9,Win
XP SP2, Trying a e.g.
session tracking [The Session Tracking API] using
HttpSession object.
The program works
As well as the rules for session management.
Wade Chandler wrote:
I think you need to read up on the java language a
bit. See what static and final mean.
Wade
--- Raghaw Goswami [EMAIL PROTECTED] wrote:
Thanks for the e-mail:
First time it was 0 , then 1 , This is when the
browser
Thanks for e-mail's.
I am new to these technologies learning on my own, I
will read on java language and session mgmt.
Thanks again.
R.
--- Brian Cook [EMAIL PROTECTED] wrote:
As well as the rules for session management.
Wade Chandler wrote:
I think you need to read up on the java
session stickyness is to use jvmRoute (which
you already did) and then giving the workers the same names as the
jvmRoute. That is instead of bl_worker_dev use dev_alexis and instead
of bl_worker_noah use noah_alexis as the worker names.
You should check, that the URLs produced by your application
session replication between them, thus
forming 'cluster groups' to lower the session data replication
transfer.
You can use the domain, but it's a trick rather then a proper
usage.
Regards,
Mladen.
-
To unsubscribe, e-mail: [EMAIL
is used, then the domain name is used as session
route.. Naming the worker after the intended jvmRoute (even though it
used to be the only way) seems more of a trick than explicitly
specifying the jvmRoute with the domain property.
However, since the same documention mentions that the domain property
introduced domains to allow mod_jk to make good failover decisions in
the case where you have many tomcats, but session replication only between
subset, like 2 Tomcat clusters with three instances each (T1_1, T1_2, ...,
T3_3) where T1_1, T1_2 and T1_3 replicate their sessions between each
other etc
(nodes) do not seem to
recognize an already established session with the user and are creating
new sessions. It's possible that is a session-stickiness issue, but it
appears like the requests are hitting the same instance, just not
getting the previously established session. As a result, I can't even
however, is
not. [Oddly, my webserver crashed during testing of this, but that
could very well be unrelated]
The problem is with user sessions. The instances (nodes) do not seem
to recognize an already established session with the user and are
creating new sessions. It's possible
testing of this, but that
could very well be unrelated]
The problem is with user sessions. The instances (nodes) do not seem
to recognize an already established session with the user and are
creating new sessions. It's possible that is a session-stickiness
issue, but it appears like the requests
That should not work!
The correct way to configure session stickyness is to use jvmRoute (which
you already did) and then giving the workers the same names as the
jvmRoute. That is instead of bl_worker_dev use dev_alexis and instead
of bl_worker_noah use noah_alexis as the worker names.
You
Ok - noted. I changed it. It works without the domain as you noted. Thanks.
Rainer Jung wrote:
That should not work!
The correct way to configure session stickyness is to use jvmRoute (which
you already did) and then giving the workers the same names as the
jvmRoute. That is instead
:
If my users come to blahblah.com, then go away, then return, they
get a new session id (for www.blahblah.com).
But if they come to www.blahblah.com, leave, and return (via link from
external site), they keep the same session.
I finally discovered that the browser (Firefox in this case) ends up
Singleton schrieb:
Michael Teter wrote:
If my users come to blahblah.com, then go away, then return, they
get a new session id (for www.blahblah.com).
But if they come to www.blahblah.com, leave, and return (via link from
external site), they keep the same session.
I finally
PROTECTED]
Sent: 16 August 2005 13:17
To: Tomcat Users List
Subject: Re: session problems: www.blahblah.com versus blahblah.com
I guess I was hoping there was some server-level redirect.
I'm not sure how I would put the meta redirect in all my pages. My
app is a complicated mess (my fault - my
direction.
Peter
Paul Singleton schrieb:
Michael Teter wrote:
If my users come to blahblah.com, then go away, then return, they
get a new session id (for www.blahblah.com).
But if they come to www.blahblah.com, leave, and return (via link from
external site), they keep the same session
Ignore my last mail, this way is better.
Ta
Matt
-Original Message-
From: David Smith [mailto:[EMAIL PROTECTED]
Sent: 16 August 2005 13:42
To: Tomcat Users List
Subject: Re: session problems: www.blahblah.com versus blahblah.com
I would imagine the other way to do this is to implement
Howdy.
I'm having some problems with sessions.
If my users come to blahblah.com, then go away, then return, they
get a new session id (for www.blahblah.com).
But if they come to www.blahblah.com, leave, and return (via link from
external site), they keep the same session.
I finally discovered
a new session id (for www.blahblah.com).
But if they come to www.blahblah.com, leave, and return (via link from
external site), they keep the same session.
I finally discovered that the browser (Firefox in this case) ends up
with two different session cookies - one for www.blahblah.com and one
I tried that, but it's not working.
I tried:
Host name=blahblah.com
Aliaswww.blahblah.com/Alias
/Host
and I also tried:
Host name=www.blahblah.com
Aliasblahblah.com/Alias
/Host
Both ways, I still got a session cookie associated with the name the
user entered as the address. If the user
1 - 100 of 3491 matches
Mail list logo
