You are storing the session ID in cookies, right? Sounds like your logout is not resulting in this cookie being removed.

Chuck

On Aug 26, 2006, at 4:54 AM, Drew Thoeni wrote:

In my application, a user logs out and the session is terminated properly. (This confirmed through JavaMonitor.)

The user then goes back to the log in page by _retyping_ the simple URL (www.domianname.com, which redirects to the webobjects app) and clicks login.

The user will, on occasion, be sent to the same instance and receive the session timeout page. The URL will include a new session ID and a new session will be created (as seen in JavaMonitor).

The user can again type the simple URL and can then again get the same instance, a different session ID and the session timeout page.

Only when the user gets the alternative instance will the user get the main page.

Any ideas why WO would be returning a new session but thinking the session is actually timed out? WOSessionTimeOut is set to 3600.

Regards,

Drew

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/chill% 40global-village.net

This email sent to [EMAIL PROTECTED]

--

Practical WebObjects - for developers who want to increase their overall knowledge of WebObjects or who are trying to solve specific problems. http://www.global-village.net/products/practical_webobjects





_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to