If your server knows the sessionID, why not simply let the server send an http 
request with the appropriate JSESSIONID cookie?
I am not sure, but I think Tomcat will assign the cached session to this 
request even if it comes from a different remote address. 

- Matthias

-----Original Message-----
From: david delbecq [mailto:[EMAIL PROTECTED] 
Sent: Thursday, January 31, 2008 11:18 PM
To: Tomcat Users List
Subject: Re: Forcing a session lastaccessedtime update

You will become tomcat dependant but, try to use this

http://tomcat.apache.org/tomcat-5.5-doc/catalina/docs/api/org/apache/catalina/session/StandardSession.html#access()

tomcat user a écrit :
> When accessing an HTTPSession through a back door the session's last access
> time is not updated.  Is there any way to "touch" that session to update
> that time or call a specific method to do so?
>
> In other words I allow people to access their session through an xml request
> that may be called from a server (not the browser).
> Supplying the sessionID I can retrieve that session from a hashtable I keep,
> yet manipulating the session does not update the last accessed time, leaving
> it vulnerable to a timeout.
>
> Probably more of a servlet question than Tomcat, but hopefully somebody can
> help me.
>
>
> Thanks in advance,
> Frank
>
>   


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to