Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Mark Thomas
On 01/02/2024 17:48, Ryanesch@yahoo wrote: On Feb 1, 2024, at 10:34 AM, Mark Thomas wrote: On 31/01/2024 00:15, Ryan Esch wrote: From what I understand, the container knows if a user is authenticated by using the session id passed to it and then looking up the user principal. If

Re: Session Cookie Logging

2024-02-01 Thread Christopher Schultz
Dan, On 2/1/24 11:54, Dan McLaughlin wrote: I was able to identify the problem - there was a session configuration with cookie configuration in the catalina-base/web.xml file. catalina-base/conf/web.xml? I did mention on 26 Jan that this wasn't a good idea and could be causing this kind of

Re: Cannot start java issue after Tomcat9 and JDK 11 updates

2024-02-01 Thread Christopher Schultz
Lori, On 2/1/24 10:35, Lori Kilen wrote: Hello, I have a Windows server (v2019) and I've updated java to Corretto jdk11.0.22_7 and Tomcat to 9.0.85. I added Tomcat as a Windows Service. I can start Tomcat from CMD using startup.bat and I can open localhost:8080 in a browser to display

Re: Session Cookie Logging

2024-02-01 Thread Dan McLaughlin
Hey Mark, I was able to identify the problem - there was a session configuration with cookie configuration in the catalina-base/web.xml file. I just wanted to suggest that it would be great if logging could be enabled to show not only what the parameters were set to, but also where the values

Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Ryanesch@yahoo
> > On Feb 1, 2024, at 10:34 AM, Mark Thomas wrote: > > On 31/01/2024 00:15, Ryan Esch wrote: >> From what I understand, the container knows if a user is authenticated by >> using the session id passed to it and then looking up the user principal. If >> this is non-null, the user is

Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Mark Thomas
On 31/01/2024 00:15, Ryan Esch wrote: From what I understand, the container knows if a user is authenticated by using the session id passed to it and then looking up the user principal. If this is non-null, the user is authenticated. I am using web.xml with security constraints and

Re: Session Cookie Logging

2024-02-01 Thread Mark Thomas
On 27/01/2024 14:38, Dan McLaughlin wrote: Hey Mark, If you see a bug report, then that will mean I was able to reproduce it. I see different behaviors in our local docker environment. Still, it's nowhere as complex as our production environment--where everything is clustered and behind

Cannot start java issue after Tomcat9 and JDK 11 updates

2024-02-01 Thread Lori Kilen
Hello, I have a Windows server (v2019) and I've updated java to Corretto jdk11.0.22_7 and Tomcat to 9.0.85. I added Tomcat as a Windows Service. I can start Tomcat from CMD using startup.bat and I can open localhost:8080 in a browser to display Tomcat page. But I cannot start Tomcat from