Re: session tracking in a context that contains JSP and servlets

2005-09-22 Thread Leon Rosenberg
On 9/22/05, Mark [EMAIL PROTECTED] wrote: I would think that this is possible. I have been writing servlets for over a year, but have not written a single line of JSP. Technically speaking each JSP is actually a servlet... more or less. Everything that works in the server works in the jsp

session tracking in a context that contains JSP and servlets

2005-09-21 Thread Mark
I want to create a webapp that will contain both servlets and JSP. I will be using a login page to authenticate users. I will probably use one of the Tomcat supported authentication modules. I am wondering if it is possible for tomcat to properly manage session information when going between

Re: session tracking in a context that contains JSP and servlets

2005-09-21 Thread David Wall
Mark wrote: I want to create a webapp that will contain both servlets and JSP. I will be using a login page to authenticate users. I will probably use one of the Tomcat supported authentication modules. I am wondering if it is possible for tomcat to properly manage session information when

Re: session tracking in a context that contains JSP and servlets

2005-09-21 Thread Mark
I would think that this is possible. I have been writing servlets for over a year, but have not written a single line of JSP. On 9/21/05, David Wall [EMAIL PROTECTED] wrote: Mark wrote: I want to create a webapp that will contain both servlets and JSP. I will be using a login page to

Session Tracking

2005-08-19 Thread Raghaw Goswami
Hi, I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2, Trying a e.g. session tracking [The Session Tracking API] using HttpSession object. The program works[ accessCount increments] when I don't close the current browser and open new brwoser with CTRL + N, But if i quit the browser

RE: Session Tracking

2005-08-19 Thread Arup Vidyerthy
- From: Raghaw Goswami [mailto:[EMAIL PROTECTED] Sent: 19 August 2005 14:46 To: tomcat-user@jakarta.apache.org Subject: Session Tracking Hi, I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2, Trying a e.g. session tracking [The Session Tracking API] using HttpSession object

Re: Session Tracking

2005-08-19 Thread Brian Cook
to delete cookies at the end of the session as most do then that will not work either. Raghaw Goswami wrote: Hi, I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2, Trying a e.g. session tracking [The Session Tracking API] using HttpSession object. The program works[ accessCount

RE: Session Tracking

2005-08-19 Thread Raghaw Goswami
) you need to make it a static variable in your servlet/jsp. -Original Message- From: Raghaw Goswami [mailto:[EMAIL PROTECTED] Sent: 19 August 2005 14:46 To: tomcat-user@jakarta.apache.org Subject: Session Tracking Hi, I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2

RE: Session Tracking

2005-08-19 Thread Wade Chandler
PROTECTED] Sent: 19 August 2005 14:46 To: tomcat-user@jakarta.apache.org Subject: Session Tracking Hi, I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2, Trying a e.g. session tracking [The Session Tracking API] using HttpSession object. The program works

Re: Session Tracking

2005-08-19 Thread Brian Cook
Message- From: Raghaw Goswami [mailto:[EMAIL PROTECTED] Sent: 19 August 2005 14:46 To: tomcat-user@jakarta.apache.org Subject: Session Tracking Hi, I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2, Trying a e.g. session tracking [The Session Tracking API] using HttpSession object

Re: Session Tracking

2005-08-19 Thread Raghaw Goswami
2005 14:46 To: tomcat-user@jakarta.apache.org Subject: Session Tracking Hi, I have JDK 1.5 [J2SE 5.0 update 3], Tomcat 5.5.9,Win XP SP2, Trying a e.g. session tracking [The Session Tracking API] using HttpSession object. The program works[ accessCount increments] when I don't

Re: How to stop Session Tracking, or stop extraction of ;jsessionid=XXX from requested URL

2005-05-05 Thread Jedidiah Northridge
' this functionality, as it's core to overall processing scheme. Further, stopping this behavior also has nothing to do with disabling session tracking, as we haven't reached a point where Sessions are being tracked. This means I should solve my problem by, at a later time in the processing of a single request

How to stop Session Tracking, or stop extraction of ;jsessionid=XXX from requested URL

2005-05-04 Thread Jedidiah Northridge
Hello, I don't need the functionality of session tracking, either through URL rewriting or via Cookie assignment. Is there anyway I can disable it completely? More specifically, is there anyway I can stop my Tomcat from extracting the ;jsessionid=XXX from an incoming URI? At present, when I

Re: How to stop Session Tracking, or stop extraction of ;jsessionid=XXX from requested URL

2005-05-04 Thread Tim Funk
and always returns null instead of allowing a session to be created. -Tim Jedidiah Northridge wrote: Hello, I don't need the functionality of session tracking, either through URL rewriting or via Cookie assignment. Is there anyway I can disable it completely? More specifically, is there anyway I can stop

Session tracking with Apache 2.0.x + Tomcat 4.0.x/4.1.x + mod_jk 1.2.x

2005-01-14 Thread Sven Bovin
authentication mechanism that is not related to Tomcat or Apache authentication (using a transaction on a separate server). I have been asked to investigate the possibility of using session tracking based on the SSL session (as per the 2.3 Java servlet specification). Would that be possible in our setup ? My

RE: session tracking

2004-11-08 Thread Shapira, Yoav
PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Saturday, November 06, 2004 2:54 PM To: Tomcat Users List Subject: session tracking Hi I already posted a question about how to disable cookie session tracking in Tomcat 5.0, but received no response. I use an open filesystem, no .war's. My scenario

session tracking

2004-11-06 Thread shelsing
Hi I already posted a question about how to disable cookie session tracking in Tomcat 5.0, but received no response. I use an open filesystem, no .war's. My scenario is this. My application is loaded into a cross-domain frameset, so a user's session was not persitent across page requests. So I

disablng cookie session tracking in 5.0

2004-11-03 Thread shelsing
Hi, I am using Tomcat 5.0 and I am rewriting the URL's with encodeURL, but my session listener tells me that a new session is being created with every page request, although the user's session is persistent across page requests. The application is running in a cross-domain frameset, so I think

session tracking enforcement

2004-10-19 Thread Mark
Is there any way to enforce a session cookie (JSESSIONID)to be send to the client (browser) from servlet. __ Do you Yahoo!? Read only the mail you want - Yahoo! Mail SpamGuard. http://promotions.yahoo.com/new_mail

RE: session tracking enforcement

2004-10-19 Thread Shapira, Yoav
Hi, Is there any way to enforce a session cookie (JSESSIONID)to be send to the client (browser) from servlet. No, because the Servlet Spec says Servlet Container must work even on clients that don't support cookies (or have cookies turned off, which is becoming a more and more common use-case).

Re: session tracking enforcement

2004-10-19 Thread David Wall
Is there any way to enforce a session cookie (JSESSIONID)to be send to the client (browser) from servlet. No, because the Servlet Spec says Servlet Container must work even on clients that don't support cookies (or have cookies turned off, which is becoming a more and more common use-case).

RE: session tracking enforcement

2004-10-19 Thread Shapira, Yoav
Hi, Session cookies (those that don't persist) are becoming quite common actually because even small devices are able to keep that bit of session state quite easily. Ahh yes, small devices. Good point. I based my earlier assertion on research I read recently showing a (and this is a good

RE: session tracking enforcement

2004-10-19 Thread Mark
Is it true, that new sessionId will be resend if a new session get created? --- Shapira, Yoav [EMAIL PROTECTED] wrote: Hi, Session cookies (those that don't persist) are becoming quite common actually because even small devices are able to keep that bit of session state quite easily.

Re: session tracking enforcement

2004-10-19 Thread David Wall
But that's details, the main point I made still holds, and that's that the Servlet Spec mandates Tomcat's behavior in this area. Absolutely, Yoav! I certainly didn't mean to imply anything negative about your response, only that the original inquiry could be handled/checked by his application

Re: session tracking enforcement

2004-10-19 Thread Mark
In my case it looks like I do have encode all URLs: firewall problem with stripping out sessionId left me with no choice ;) Is it right way of doing it? Thanks a lot. Mark. --- David Wall [EMAIL PROTECTED] wrote: But that's details, the main point I made still holds, and that's that the

Re: session tracking enforcement

2004-10-19 Thread David Wall
In my case it looks like I do have encode all URLs: firewall problem with stripping out sessionId left me with no choice ;) Is it right way of doing it? ACK! There's a firewall that's stripping out session ids from URLs but will let cookies through? There's a security no-brainer in charge...

disable URL rewriting for session tracking

2004-07-27 Thread Eric Allen
I need to somehow disable URL rewriting for session tracking in my application. My designer uses a:href tags all over and I don't want to change that, so I'm stuck with cookies. The problem is, tomcat doesn't appear to have any way of saying if the user doesn't accept the session cookie, throw

Re: disable URL rewriting for session tracking

2004-07-27 Thread Ruth, Brice
for session tracking in my application. My designer uses a:href tags all over and I don't want to change that, so I'm stuck with cookies. The problem is, tomcat doesn't appear to have any way of saying if the user doesn't accept the session cookie, throw an exception or something. I need a way

How to hack up a custom session tracking method.

2004-04-09 Thread Sandy McArthur
For the curios I was able to hack a custom session tracking method with Valve and overriding two methods in StandardManager. There are a few ways to do this but this was easiest for me. Hopefully it will help someone who has weird requirements on sessions. First create a Valve

Re: Custom session tracking method?

2004-04-07 Thread Sandy McArthur
is a desktop app, doesn't support cookies and uses hardcoded URIs for the cgi's. The app is what uses the query parameter session-num for session tracking, otherwise I would prefer to use the normal session tracking semantics. Sandy For those who didn't see the original post on tomcat-dev: On Apr

RE: Custom session tracking method?

2004-04-07 Thread Mike Curwen
of some sort, and then from that point, the legacy app appends it to any further queries? -Original Message- From: Sandy McArthur [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 07, 2004 10:21 AM To: Tomcat Users List Subject: Re: Custom session tracking method? Since you're

Re: Custom session tracking method?

2004-04-07 Thread Sandy McArthur
: Sandy McArthur [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 07, 2004 10:21 AM To: Tomcat Users List Subject: Re: Custom session tracking method? Since you're rewriting your CGI scripts as servlets, why not modify them to not expect the session-num parameter, and instead get the session ID via

RE: Custom session tracking method?

2004-04-07 Thread Mike Curwen
- From: Sandy McArthur [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 07, 2004 10:45 AM To: Tomcat Users List Subject: Re: Custom session tracking method? The first request the legacy app makes is to /login which it uses your normal Basic authentication which is nice because I can

session tracking using uri not cookies (was How can I maintain state with Axis

2004-04-07 Thread Paul Mansfield
With recent discussions about session management, I recalled long time ago reading about URI rewriting for when the client doesn't handle cookies properly, and found a useful article about it http://access1.sun.com/techarticles/sessions.iws.html URL rewriting is the ability to use sessions and

Session Tracking Question

2004-01-21 Thread John Sidney-Woollett
I have a webapp in which a servlet will redirect to another remote webserver URL which will then redirect back to my webserver after completing its request. me.com/ServletA --- remote.com/someURL --- me.com/ServletB I need to be able to re-attach to the original session that the user had

TC/Apache session tracking

2002-12-04 Thread Matt Sales
Hello, I've got a problem tracking sessions from Tomcat 4.1.12/Apache 2.0.40. I can do all of the regular session stuff within Tomcat, but when I include a tomcat page in a static html page, sessions are not persisted. I'm using mod_jk2 to connect the two... ex: !--#include

RE: TC/Apache session tracking

2002-12-04 Thread Michael Echerer
I'm not sure if that problem is connected to mod_jk2. There are four ways for session tracking. SSL, hidden form fields, url rewriting or cookies. Tomcat can use certain methods mostly transparent if necessary e.g. if cookies are disabled then url rewriting is in use. I guess your session info

AW: Session Tracking based on the Client's IP

2002-11-21 Thread Power-Netz \(Schwarz\)
would have to punch in the code for verification, that would definetly defeat any script but is less convenient for the user. I would prefer to dynamically identify any individual user who uses my service more than say 10-15 times in a minute and ban him for an hour or so. Set a cookie

Re: Session Tracking based on the Client's IP

2002-11-21 Thread vivek baliga
Hi , request.getRemoteAddr() will give u the IP Put time with session and compare when there is new request jabs - Original Message - From: Power-Netz (Schwarz) [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Thursday, November 21, 2002 3:33 PM Subject: AW: Session

Re: Session Tracking based on the Client's IP

2002-11-21 Thread Jose Miguel Guzman Cassanello
, the Client IP. Probably the best way, is simply define a Hashtable as a Context Atributte, in order to store client status information indexed by the Client IP, and don't use the Session Tracking API. -JM - Original Message - From: vivek baliga [EMAIL PROTECTED] To: Tomcat Users List [EMAIL

RE: Session Tracking based on the Client's IP

2002-11-21 Thread Cox, Charlie
, November 21, 2002 7:32 AM To: Tomcat Users List Subject: Re: Session Tracking based on the Client's IP But, How can I change the SessionID, for using the Client IP as the Index? The getSession() method retrieves the Session for the client, based on the SessionID (that normally is based

Re: Session Tracking based on the Client's IP

2002-11-20 Thread Norbert Kuhnert
Jose, Unfortunately, this approach would be somewhat unreliable, depending on the sites accessing Tomcat. Most corporate networks are protected by a firewall and many of the do Dynamic Network Address Translation. Dynamic NAT is used to hide the real IP address of clients connected from the

Re: Session Tracking based on the Client's IP

2002-11-20 Thread Kristján Rúnarsson
Is there any way of keeping track of people that contact a site? I have had problems with people writing automated scripts to abuse a JSP based service. What they basically do is to write a script that fakes a http request sequence, pretending it is a browser like IExporer or Netscape. I

Re: Session Tracking based on the Client's IP

2002-11-20 Thread Jose Miguel Guzman Cassanello
by the client IP address. This info should be shared among all the servlets in the application (context). Is there some way to customize the Session Tracking API, for using other indexes (as the Client IP) instead JSESSIONs? Thanks Jose Miguel Guzman - Original Message - From

Session Tracking based on the Client's IP

2002-11-19 Thread Jose Miguel Guzman
Hi Guys I need to track sessions based on the Client's IP, instead of using Cookies or URL re-writing.. (My clients don't support Cookies, and I cannot re-write the URL). I know this sounds useless, but believe me... this is what I need ;-) I found that in the Catalina internal API there is

Re: problem with session tracking and redirection http--- https

2002-10-20 Thread Jon Eaves
to this RFC, RFC2965 Port Sensitive Cookies. Basically, you can't guarantee that the browser is going to send back the cookie if the ports are different Also, since any time session tracking is used it can be picked up by someone, all use of https should stay strictly under https(ok, I'm over

Re: problem with session tracking and redirection http--- https

2002-10-20 Thread Maninder S Batth
my 2 cents: encrypting session information such as encrypted urls or cookies dont buy anything. they can be sniffed , and sent back. or worse things can happen. Security is not cheap so forget finding an inexpensive way. thats one big problem with open protocols, you know exactly where to

Re: problem with session tracking and redirection http--- https

2002-10-20 Thread Craig R. McClanahan
On Sat, 19 Oct 2002, Henrik Bentel wrote: Date: Sat, 19 Oct 2002 19:08:35 + From: Henrik Bentel [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https One of my problems is that I

Re: problem with session tracking and redirection http--- https

2002-10-19 Thread Craig R. McClanahan
On Fri, 18 Oct 2002, Maninder S Batth wrote: Date: Fri, 18 Oct 2002 20:11:31 -0700 From: Maninder S Batth [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https if session apis

Re: problem with session tracking and redirection http--- https

2002-10-19 Thread Maninder S Batth
PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https yeah, I always encode the redirection URL. it's waird that it works if the session is created which under http, but not under https. bug maybe? Nope ... avoidance of a huge security

Re: problem with session tracking and redirection http--- https

2002-10-19 Thread Craig R. McClanahan
On Fri, 18 Oct 2002, Maninder S Batth wrote: Date: Fri, 18 Oct 2002 19:28:59 -0700 From: Maninder S Batth [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https please correct me if i

Re: problem with session tracking and redirection http--- https

2002-10-19 Thread Henrik Bentel
One of my problems is that I can't find anything in the servlet or tomcat documentation that mentiones any of this behaviour. If there is any, please send me the link. Also, since any time session tracking is used it can be picked up by someone, all use of https should stay strictly under

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Craig R. McClanahan
On Thu, 17 Oct 2002, Henrik Bentel wrote: Date: Thu, 17 Oct 2002 04:45:21 + From: Henrik Bentel [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https ok, I see your point. My

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Maninder S Batth
(http or https) stays put when redirecting. I haven't found anything in the servlet specification that mentiones anything about this behaviour. From: Henrik Bentel [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Henrik Bentel
. From: Henrik Bentel [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https Date: Thu, 17 Oct 2002 04:45:21 + ok, I see your point. My approach is that I only use https to scramble

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Henrik Bentel
PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https Date: Thu, 17 Oct 2002 04:45:21 + ok, I see your point. My approach is that I only use https to scramble the login request itself, so that a login password cannot be read,or sniffed, in clear

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Maninder S Batth
: Maninder S Batth [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https Date: Fri, 18 Oct 2002 14:13:40 -0700 is the request method changing in redirection, for example post to get

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Maninder S Batth
PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https Date: Fri, 18 Oct 2002 14:13:40 -0700 is the request method changing in redirection, for example post to get ?? if it is, use HttpServletResponse.encodeURL() Henrik Bentel wrote: Another

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Craig R. McClanahan
On Fri, 18 Oct 2002, Henrik Bentel wrote: Date: Fri, 18 Oct 2002 23:07:17 + From: Henrik Bentel [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https yeah, I always encode

Re: problem with session tracking and redirection http--- https

2002-10-18 Thread Maninder S Batth
? Craig R. McClanahan wrote: On Fri, 18 Oct 2002, Henrik Bentel wrote: Date: Fri, 18 Oct 2002 23:07:17 + From: Henrik Bentel [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https yeah, I

AW: problem with session tracking and redirection http--- https

2002-10-17 Thread Ralph Einfeldt
a session gets destroyed. -Ursprüngliche Nachricht- Von: Henrik Bentel [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 17. Oktober 2002 06:45 An: [EMAIL PROTECTED] Betreff: Re: problem with session tracking and redirection http--- https My approach is that I only use https to scramble

problem with session tracking and redirection http--- https

2002-10-16 Thread Henrik Bentel
Help! I recently tried to upgrade my version of Tomcat from 3.3 to 4.1(I also tried 4.0). My problem is that for some reason the httpsession is lost after redirection from https to http. I run apache in front of tomcat to handle static content plus certificate. My webapp depend on the ability

Re: problem with session tracking and redirection http--- https

2002-10-16 Thread Jacob Kjome
This is the way Tomcat 4.x.x is made to work. The reason for this is security. I think it can be assumed that you were under https for a reason. Maybe you entered your cedit card info and are storing that in the session until the final submit. Now, if you stayed in the same session when

Re: problem with session tracking and redirection http--- https

2002-10-16 Thread Henrik Bentel
] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Subject: Re: problem with session tracking and redirection http--- https Date: Wed, 16 Oct 2002 23:33:41 -0500 This is the way Tomcat 4.x.x is made to work. The reason for this is security. I think it can

Re: session tracking using URL rewriting META=refresh

2002-08-30 Thread Srinadh Karumuri
;jsessionid= + request.getParameter(jsessionid)% -Sri At 10:27 AM 8/29/2002, Srinadh Karumuri wrote: Hi, I know there are two ways of session tracking in Tomcat 3. 1. Cookies based: This is out of question as our customers do not want this. 2. URL rewriting: We rewrite URLs using encodeURL

session tracking using URL rewriting META=refresh

2002-08-29 Thread Srinadh Karumuri
Hi, I know there are two ways of session tracking in Tomcat 3. 1. Cookies based: This is out of question as our customers do not want this. 2. URL rewriting: We rewrite URLs using encodeURL(...) and worked fine for more than a year. The problem started once we introduced the META-Refresh

Session Tracking cookie

2002-08-28 Thread Sarkar, Sudipta
Hi, I am using Tocat 3.2.1 on Win 2000. As Tomcat uses a cookie name JSESSIONID to track httpsession, is there any way to change the name of this cookie. Thanks Sudipta Sarkar Systems Consultant Emerald Implementation Team Workscape Inc. 703 798 4278 (Cell) -- To unsubscribe, e-mail:

Re: Session Tracking cookie

2002-08-28 Thread Milt Epstein
On Wed, 28 Aug 2002, Sarkar, Sudipta wrote: Hi, I am using Tocat 3.2.1 on Win 2000. As Tomcat uses a cookie name JSESSIONID to track httpsession, is there any way to change the name of this cookie. I don't think so. But why would you want to? (Well, actually, you probably could, but

Session Tracking with a Database

2002-07-17 Thread The Kelley's
Please HELP! JDK1.3 Win 2000 Mysql Tomcat 4.0.3 I'm getting an exception in Tomcat 4.0.3 that I don't know what to do with. I'm reading James Goodwill's book Apache Jakarta-Tomcat and I'm trying to run the example on page page 128. You are suppose to be able to track sessions automatically

Re: Session tracking problem with Tomcat 4.0.3, Apache 2.0.39 and mod_proxy

2002-07-15 Thread Rick Mills
Hi Thanks for that, it was exactly what was happening! Moving the context for the bodypainting WAR file to root, and changing the proxy pass to map http://www.bodypainting.co.uk/ to http://localhost:8000/ has fixed the problem, and my session tracking now works as expected. I now need to work

Re: Session tracking problem with Tomcat 4.0.3, Apache 2.0.39 andmod_proxy

2002-07-15 Thread Liam Morley
was happening! Moving the context for the bodypainting WAR file to root, and changing the proxy pass to map http://www.bodypainting.co.uk/ to http://localhost:8000/ has fixed the problem, and my session tracking now works as expected. I now need to work out a way of having more than one webapp using Apache

Session tracking problem with Tomcat 4.0.3, Apache 2.0.39 and mod_proxy

2002-07-14 Thread Rick Mills
Hi I am experiencing a problem with session tracking when using Apache 2.0.39's mod_proxy module to connect to my Tomcat 4.0.3 instance. I have a servlet which checks to see if a session exists, and if not, creates a new session. When testing on a standalone instance of Tomcat, all works

Re: Session tracking problem with Tomcat 4.0.3, Apache 2.0.39 andmod_proxy

2002-07-14 Thread Liam Morley
. Let me know how that works for you. Best of luck! Liam Morley Rick Mills wrote: Hi I am experiencing a problem with session tracking when using Apache 2.0.39's mod_proxy module to connect to my Tomcat 4.0.3 instance. I have a servlet which checks to see if a session exists

Session tracking between http to https

2002-04-19 Thread mh
I use Tomcat 4.0.3 + Apache 1.3.14 + Ajp13 connector I have two virtual host, one in http and the other in https. Two servlets are used in those virtual host. I want to do use HttpSession to maintain object information between my two servlets. I do this in my first servlet :

Re: Session tracking between http to https

2002-04-19 Thread Joel Rees
mh asked: but I can't retreive session between my two servlet. Can someone give me some code advice to perform this ? Check the archives? -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]

Session Tracking / User Authentication

2002-04-10 Thread Rick Roberts
Can anyone point me to a good reference for handling session tracking and user authentication? All I'm trying to do is authenticate a user (form based) and redirect them to the login page if their session times out. It should be pretty simple, but I'm having trouble with it and I can't find

RES: Session Tracking / User Authentication

2002-04-10 Thread Edson Carlos Ericksson Richter
[mailto:[EMAIL PROTECTED]] Enviada em: quarta-feira, 10 de abril de 2002 16:28 Para: Tomcat Users List Assunto: Session Tracking / User Authentication Can anyone point me to a good reference for handling session tracking and user authentication? All I'm trying to do is authenticate a user (form

Session tracking in Tomcat 3.2.3

2002-02-18 Thread Gaurav Arya
Hi, Is there a way in Tomcat 3.2.3 to switch off session tracking for some URLs and enable tracking for others. We are using URL Rewriting for session management. Our site also has a lot of static content and we need to turn off session tracking when the request for a static page comes in other

Session Tracking throughout apps

2002-01-18 Thread Charles N. Harvey III
Hello list. I'm not sure if this is a tomcat question or a java (servlet) question so try not to get too angry if this is on the wrong board. I am setting up my environment to use a controller servlet that brokers all the requests that come in for the site. About 80% of my site are pages that

RE: Session Tracking throughout apps

2002-01-18 Thread Wagoner, Mark
2:47 PM To: Tomcat Users List Subject: Session Tracking throughout apps Hello list. I'm not sure if this is a tomcat question or a java (servlet) question so try not to get too angry if this is on the wrong board. I am setting up my environment to use a controller servlet that brokers all

SSL session tracking

2002-01-04 Thread Yuriy Stepovoy
Hi in Servlet spec 2.3 write SRV.7.1.2 SSL Sessions Secure Sockets Layer, the encryption technology used in the HTTPS protocol, has a mechanism built into it allowing multiple requests from a client to be unambiguously identified as being part of a session. A servlet container can easily use

RE: Session tracking across virtual hosts?

2001-12-09 Thread Neil Aggarwal
, Ecommerce, Java, databases -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Craig R. McClanahan Sent: Friday, December 07, 2001 10:38 PM To: Tomcat Users List Subject: RE: Session tracking across virtual hosts? On Fri, 7 Dec 2001, Neil Aggarwal wrote

using SSL_SESSION_ID for session tracking, anyone done it?

2001-12-07 Thread Joel Roth-Nater
of the methods for session tracking. Am I missing something? -- Joel -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]

Session tracking across virtual hosts?

2001-12-07 Thread Neil Aggarwal
Hello: I am developing a web application that requires session tracking. Because we are using a virtual host with a shared SSL certificate, we need to track sessions using two different hosts. For example, we need to use URLs like: http://www.virtdomain.com/appName/page.jsp and https

Re: Session tracking across virtual hosts?

2001-12-07 Thread Craig R. McClanahan
On Fri, 7 Dec 2001, Neil Aggarwal wrote: Date: Fri, 7 Dec 2001 13:18:32 -0600 From: Neil Aggarwal [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: Tomcat-User [EMAIL PROTECTED] Subject: Session tracking across virtual hosts? Hello: I am developing a web application

RE: Session tracking across virtual hosts?

2001-12-07 Thread Neil Aggarwal
tracking across virtual hosts? On Fri, 7 Dec 2001, Neil Aggarwal wrote: Date: Fri, 7 Dec 2001 13:18:32 -0600 From: Neil Aggarwal [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: Tomcat-User [EMAIL PROTECTED] Subject: Session tracking across virtual hosts

Question re: static/dynamic content, cookies, session tracking

2001-12-06 Thread Kevin McBrearty
I just want to clarify my understanding of something here. I have a web application which serves both static and dynamic pages, and the user can move back and forth between static and dynamic pages. The dynamic pages are generated by servlets using Velocity. Session tracking is involved

AW: Question re: static/dynamic content, cookies, session tracking

2001-12-06 Thread Ralph Einfeldt
An: [EMAIL PROTECTED] Betreff: Question re: static/dynamic content, cookies, session tracking I just want to clarify my understanding of something here. I have a web application which serves both static and dynamic pages, and the user can move back and forth between static

TomCat configuration for session-tracking -- session-max and session-timeout

2001-07-15 Thread Itai levitan
Title: TomCat configuration for session-tracking -- session-max and session-timeout I am using Resin server (www.caucho.com) and TomCat 1.31 server. This is from the Resin doc: The servlet engine controls the number of active sessions through two methods: a time limit on inactive sessions

RE: Add logic to session tracking?

2001-05-16 Thread Varela Santoalla, Daniel
: martes 15 de mayo de 2001 22:26 Para: [EMAIL PROTECTED]; [EMAIL PROTECTED] Asunto: Add logic to session tracking? Hello All, As a developer using Tomcat, is there anyway to override or add logic to parts of Tomcat's session tracking/setting mechanisms? Or do I need to get my hands

Re: Add logic to session tracking?

2001-05-16 Thread Bo Xu
David M. Rosner wrote: Hello All, As a developer using Tomcat, is there anyway to override or add logic to parts of Tomcat's session tracking/setting mechanisms? Or do I need to get my hands on the source code, make changes, and then recompile? Basically I want to add my own session

Re: Add logic to session tracking?

2001-05-16 Thread David M. Rosner
.. As long as you know this is not standard :-), you will have to make some changes to the session interceptor or create a new one. In 3.3, the code is in modules.session.SessionId, you should probably create a new module, add an option and code that supports what you need, and maybe publish

Add logic to session tracking?

2001-05-15 Thread David M. Rosner
Hello All, As a developer using Tomcat, is there anyway to override or add logic to parts of Tomcat's session tracking/setting mechanisms? Or do I need to get my hands on the source code, make changes, and then recompile? Basically I want to add my own session tracking ALONG with Tomcat's so

RE: Add logic to session tracking?

2001-05-15 Thread Filip Hanik
you will have to modify or replace the org.apache.tomcat.request.StandardSessionInterceptor. The session tracking in Tomcat is implemented according to the specification, hence there is no way you can modify it without actually changing the source code or replacing the interceptor. Filip

RE: Problem with session tracking. Please help

2001-05-09 Thread Roberts Huw
To: '[EMAIL PROTECTED]' Subject: RE: Problem with session tracking. Please help [snip] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 02 May 2001 17:13 To: '[EMAIL PROTECTED]' Subject:RE: Problem with session tracking. Please help I

Problem with session tracking. Please help

2001-05-02 Thread Roberts Huw
Hi All, We're having a problem with session tracking. We are using tomcat pretty much out of the box, without integrating with apache or anything like that. We are attaching an attribute to the session which we want (reasonably enough) to be per session. We are then sending requests

RE: Problem with session tracking. Please help

2001-05-02 Thread William Kaufman
-- Bill K. -Original Message- From: Roberts Huw [mailto:[EMAIL PROTECTED]] Sent: Wednesday, May 02, 2001 3:21 AM To: '[EMAIL PROTECTED]' Subject: Problem with session tracking. Please help Hi All, We're having a problem with session tracking. We

RE: Problem with session tracking. Please help

2001-05-02 Thread Roberts Huw
-Original Message- From: William Kaufman [mailto:[EMAIL PROTECTED]] Sent: 02 May 2001 15:02 To: '[EMAIL PROTECTED]' Subject: RE: Problem with session tracking. Please help 1) Does your browser have cookies enabled? If not, you need to rewrite all your URLs, using

RE: Problem with session tracking. Please help

2001-05-02 Thread William Kaufman
PROTECTED]] Sent: Wednesday, May 02, 2001 7:24 AM To: '[EMAIL PROTECTED]' Subject: RE: Problem with session tracking. Please help -Original Message- From: William Kaufman [mailto:[EMAIL PROTECTED]] Sent: 02 May 2001 15:02 To: '[EMAIL PROTECTED]' Subject: RE: Problem

RE: Problem with session tracking. Please help

2001-05-02 Thread Roberts Huw
a lot Huw -Original Message- From: William Kaufman [mailto:[EMAIL PROTECTED]] Sent: 02 May 2001 16:10 To: '[EMAIL PROTECTED]' Subject: RE: Problem with session tracking. Please help Are both the servers running on the same host? This sounds like a problem I've run into: since

  1   2   >