JSESSIONID Cookie handle customizing

2010-10-26 Thread Juliano Daloia de Carvalho
Hi there, sorry for the late in give you news. First I would like to thank, Pid, Mark, Charles and Christopher for the responses. I've solved my problem using valve ( Thanks Mark :) ), I extended the BaseValve and its working perfectly (is in production right now). I didn't know of Valve

Re: Res: Res: JSESSIONID Cookie handle customizing

2010-10-16 Thread Pid *
to login page. - Mensagem original De: Pid p...@pidster.com Para: Tomcat Users List users@tomcat.apache.org Enviadas: Sexta-feira, 15 de Outubro de 2010 13:19:54 Assunto: Re: Res: JSESSIONID Cookie handle customizing On 15/10/2010 17:02, Juliano Daloia de Carvalho wrote: I'll inject

Res: Res: Res: JSESSIONID Cookie handle customizing

2010-10-16 Thread Juliano Daloia de Carvalho
...@pidster.com Para: Tomcat Users List users@tomcat.apache.org Enviadas: Sábado, 16 de Outubro de 2010 4:01:23 Assunto: Re: Res: Res: JSESSIONID Cookie handle customizing So you want encrypt the session id? p On 15 Oct 2010, at 17:33, Juliano Daloia de Carvalho judac2...@yahoo.com.br wrote: I need

Re: Res: Res: Res: JSESSIONID Cookie handle customizing

2010-10-16 Thread Pid
On 16/10/2010 13:55, Juliano Daloia de Carvalho wrote: yes Pid, we can say that is a kind of encryption. What do you gain by encrypting the session id? do you know which is the first tomcat class that receives the client request? do you know which is the last tomcat class that is used

JSESSIONID Cookie handle customizing

2010-10-15 Thread Juliano Daloia de Carvalho
Hi Folks! I want to put some information on the JSESSIONID that tomcat generates. I'm using aspect programming so I don´t need to change the tomcat code itself. The thing is that I found many points where tomcat handle this information, I checked and notice that the head parser is

Re: JSESSIONID Cookie handle customizing

2010-10-15 Thread Pid
On 15/10/2010 15:15, Juliano Daloia de Carvalho wrote: Hi Folks! I want to put some information on the JSESSIONID that tomcat generates. I'm using aspect programming so I don´t need to change the tomcat code itself. What information? The thing is that I found many points

Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Juliano Daloia de Carvalho
on header so I can make the change needed. - Mensagem original De: Pid p...@pidster.com Para: Tomcat Users List users@tomcat.apache.org Enviadas: Sexta-feira, 15 de Outubro de 2010 12:20:37 Assunto: Re: JSESSIONID Cookie handle customizing On 15/10/2010 15:15, Juliano Daloia de Carvalho

Re: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Pid
: Sexta-feira, 15 de Outubro de 2010 12:20:37 Assunto: Re: JSESSIONID Cookie handle customizing On 15/10/2010 15:15, Juliano Daloia de Carvalho wrote: Hi Folks! I want to put some information on the JSESSIONID that tomcat generates. I'm using aspect programming so I don´t need

Res: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Juliano Daloia de Carvalho
: Sexta-feira, 15 de Outubro de 2010 13:19:54 Assunto: Re: Res: JSESSIONID Cookie handle customizing On 15/10/2010 17:02, Juliano Daloia de Carvalho wrote: I'll inject code using an agent. The thing is that I need to know for sure the message entering point on Tomcat, and the leaving point also

RE: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Caldarale, Charles R
From: Juliano Daloia de Carvalho [mailto:judac2...@yahoo.com.br] Subject: Res: Res: JSESSIONID Cookie handle customizing I need to change the value of the sessionID. Why? Using a separate parameter or cookie to hold your specific additional information would seem to be a much more workable

Res: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Juliano Daloia de Carvalho
-- - Mensagem original De: Caldarale, Charles R chuck.caldar...@unisys.com Para: Tomcat Users List users@tomcat.apache.org Enviadas: Sexta-feira, 15 de Outubro de 2010 13:37:12 Assunto: RE: Res: JSESSIONID Cookie handle customizing From: Juliano Daloia de Carvalho

Re: Res: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Mark Thomas
On 15/10/2010 17:47, Juliano Daloia de Carvalho wrote: Chuck, I can't say explicit why I need to use this info on the session. but is related with security issues. and you are right, is much more plausible to make this as you said, but I can't afford to do that. If you need to control

Res: Res: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Juliano Daloia de Carvalho
the message from the client and the last one before send it to the client. Tks Juliano - Mensagem original De: Mark Thomas ma...@apache.org Para: Tomcat Users List users@tomcat.apache.org Enviadas: Sexta-feira, 15 de Outubro de 2010 13:56:07 Assunto: Re: Res: Res: JSESSIONID Cookie handle

RE: Res: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Caldarale, Charles R
From: Juliano Daloia de Carvalho [mailto:judac2...@yahoo.com.br] Subject: Res: Res: Res: JSESSIONID Cookie handle customizing I want to create one little class that handle on the server side the cookie information that can come on the header, make a preprocessing which will create one

Re: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Mark Thomas
On 15/10/2010 19:44, Christopher Schultz wrote: This can be done with a Valve, but I'm not exactly sure how to insert a Valve before the authentication valve, which is (I think) what you'd have to do. Option 1. Auth Valves are on the Context so define Your valve on the Host or Engine. Option

Re: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 10/15/2010 2:50 PM, Mark Thomas wrote: On 15/10/2010 19:44, Christopher Schultz wrote: This can be done with a Valve, but I'm not exactly sure how to insert a Valve before the authentication valve, which is (I think) what you'd have to

Res: Res: JSESSIONID Cookie handle customizing

2010-10-15 Thread Juliano Daloia de Carvalho
Para: Tomcat Users List users@tomcat.apache.org Enviadas: Sexta-feira, 15 de Outubro de 2010 15:55:27 Assunto: Re: Res: JSESSIONID Cookie handle customizing -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 10/15/2010 2:50 PM, Mark Thomas wrote: On 15/10/2010 19:44, Christopher Schultz wrote