Re: session won't timeout

2010-10-04 Thread Jing Chen
Regardless whether the user leave the browser idle or close the browser, as long as the user access the site from an IP that is inside of client's network, the seesion won't time out.  By doing the same thing from outside IP, the session timeout correctly. In both cases, the access log does NO

Re: Unit testing a CometProcessor Servlet

2010-10-04 Thread homerlex
> No problem. I wish I knew your name, though! Thanks - The name is Homer :-) On Mon, Oct 4, 2010 at 1:15 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > To whom it may concern, > > On 10/4/2010 7:43 AM, Nabble User wrote: > >

Re: jsp-examples sessions

2010-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ronald, On 10/4/2010 6:15 AM, Ronald Klop wrote: > Do you use /jsp-examples for something? > In production (or on all your systems) remove the jsp-examples > context/webapp if you don't need it. Good point: this is probably a (blind) attack by a scri

Re:[OT] Serialization

2010-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wolfgang, (Marking off-topic because this is a Java/JSP issue and not Tomcat-related. See below for responses.) On 10/4/2010 9:10 AM, Wolfgang Orthuber wrote: > my tomcat version is 5.5.17 Upgrade. > then all works fine, but if I use only read (on

Re: Tabbed browsers sharing session - work around.

2010-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rob, On 10/4/2010 7:27 AM, Rob Gregory wrote: > Using the hostname doesn't really guarantee a unique session for example > if I click new tab and paste the URL into the new window I suspect the > browser will see the same session from the first tab.

Re: Tabbed browsers sharing session - work around.

2010-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ronald, On 10/4/2010 6:11 AM, Ronald Klop wrote: > You can run your test environment on another hostname. > > live.example.com > test.example.com > train.example.com Or under another context: http://www.example.com/live http://www.example.com/test

Re: Unit testing a CometProcessor Servlet

2010-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 10/4/2010 7:43 AM, Nabble User wrote: > Thank you for taking the time to reply Chris! No problem. I wish I knew your name, though! > Yes, I understand that I could just make direct calls to events. However, > since we are

jsp-examples sessions

2010-10-04 Thread rujin raj
Dear Support, I installed some applications in tomcat 5.5.When i m monitoring through the Lambda probe,I noticed that the /jsp-examples sessions are increased invariably. Please guide me in which circumstances these /jsp-examples sessions will increase and whether it will affect my server perform

RE: Tabbed browsers sharing session - work around.

2010-10-04 Thread Ronald Klop
if (session.environment != newEnvironment) { logoutUser("You cannot change a running environment."); } Something like that. Ronald. Op maandag, 4 oktober 2010 13:27 schreef Rob Gregory : Hi Ronald, Using the hostname doesn't really guarantee a unique session for example if I click ne

Re: Unit testing a CometProcessor Servlet

2010-10-04 Thread Nabble User
Thank you for taking the time to reply Chris! Yes, I understand that I could just make direct calls to events. However, since we are talking about long blocking requests that don't return until some action is taken by other users (or the connection times out of course) I was curious to see what o

Re: Serialization

2010-10-04 Thread Wolfgang Orthuber
w4a.jsp and w4b.jsp are the names of two different jsp files. Both contain <%@ include file="wtovedi.jsp" %> and the file wtovedi.jsp contains the listed read and write code with the definitions of ddm2. ddm2 is a rather complex object of objects, but it contains no reference to w4a.jsp or w4b

Re: jsp-examples sessions

2010-10-04 Thread Ronald Klop
Do you use /jsp-examples for something? In production (or on all your systems) remove the jsp-examples context/webapp if you don't need it. In fact... remove all webapps which you don't use. Ronald. Op maandag, 4 oktober 2010 11:42 schreef rujin raj : Dear Support, I installed some a

Re: Tabbed browsers sharing session - work around.

2010-10-04 Thread Ronald Klop
You can run your test environment on another hostname. live.example.com test.example.com train.example.com Maybe use a login.example.com to redirect you to the right url after login. Ronald. Op maandag, 4 oktober 2010 11:03 schreef Rob Gregory : Hi Tomcat community, I'm after advi

Re: jsp-examples sessions

2010-10-04 Thread Mark Thomas
On 04/10/2010 10:42, rujin raj wrote: > Dear Support, This is a community of users, not a technical support help-line. There is a big difference. Try reading this: http://www.catb.org/esr/faqs/smart-questions.html > I installed some applications in tomcat 5.5.When i m monitoring through the > La

Re: Serialization

2010-10-04 Thread Ronald Klop
What does ddm2 look like? Does it have a reference to the jsp object? Ronald. Op maandag, 4 oktober 2010 15:10 schreef Wolfgang Orthuber : Hello, my tomcat version is 5.5.17, my question concerns serialization of objects, below is a code section for writing and reading an object. If I

RE: Tabbed browsers sharing session - work around.

2010-10-04 Thread Ronald Klop
Hi, Ok. I didn't understand that somebody chooses an environment dynamicly. The JSESSION cookie is tight to a hostname. So if you make unique hostnames for every login you have unique sessions. For our helpdesk I made a wildcard DNS entry *.example.com IN CNAME tomcat.example.com and a button

Fwd: Re: Serialization

2010-10-04 Thread Wolfgang Orthuber
Thanks to all for the quick response! I will compile ddm2 to a standalone class and import (and not include) it. Wolfgang

Tabbed browsers sharing session - work around.

2010-10-04 Thread Rob Gregory
Hi Tomcat community, I'm after advice on some session frigging I have recently bespoke'd into Tomcat (version 6.0.29) to resolve an issue with the recent changes in tabbed browsers where they now share the same session across multiple browser tabs/instances. I have googled the issue and th

RE: Tabbed browsers sharing session - work around.

2010-10-04 Thread Rob Gregory
Hi Ronald, Using the hostname doesn't really guarantee a unique session for example if I click new tab and paste the URL into the new window I suspect the browser will see the same session from the first tab. In our application the user can then change the environment with disastrous consequences

Serialization

2010-10-04 Thread Wolfgang Orthuber
Hello, my tomcat version is 5.5.17, my question concerns serialization of objects, below is a code section for writing and reading an object. If I call write immediately before read: d5.write(); d5.read(); then all works fine, but if I use only read (on an formerly written file) with the sa

RE: Tabbed browsers sharing session - work around.

2010-10-04 Thread Rob Gregory
Hi Ronald, Thanks for the prompt response but I am not sure I fully understand your suggestion. Would that approach require knowing the available environments before hand and registering these somehow so that the names get resolved to the machine. If so this is not really an option as our applicat

Re: Serialization

2010-10-04 Thread Ognjen Blagojevic
If I understand correctly both ddm2 and dm5t are defined in .jsp files? If so, you could separate class definitions from .jsp files. -Ognjen On 4.10.2010 15:38, Wolfgang Orthuber wrote: w4a.jsp and w4b.jsp are the names of two different jsp files. Both contain <%@ include file="wtovedi.jsp" %

RE: Serialization

2010-10-04 Thread Joseph Morgan
This has nothing to do with Tomcat it has to do with Java, serialization and OO. What are you trying to persist because it looks like you are persisting what amounts to be an inner class to a JSP? Consider changing that to a simple JavaBean not considered an inner class to the compiled JSP