Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Mark Thomas
Rainer Jung wrote: >On 23.07.2012 13:38, Mark Thomas wrote: >> On 23/07/2012 11:10, Rainer Jung wrote: >>> The cluster needs to be able to serialize sessions in order to >replicate >>> them over the network. The message indicates, that the sesison >attribute >>> org.apache.catalina.filters.CSRF_N

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Rainer Jung
On 23.07.2012 13:38, Mark Thomas wrote: On 23/07/2012 11:10, Rainer Jung wrote: The cluster needs to be able to serialize sessions in order to replicate them over the network. The message indicates, that the sesison attribute org.apache.catalina.filters.CSRF_NONCE used by the CSRF filter is not

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Nikhil Dhankani
Yes my environment is a clustered one. Thanks Rainer for the quick response, this was really helpful. On Mon, Jul 23, 2012 at 3:40 PM, Rainer Jung wrote: > > > It seems you are doing clustering? > > The cluster needs to be able to serialize sessions in order to replicate > them over the network.

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Mark Thomas
On 23/07/2012 11:10, Rainer Jung wrote: > The cluster needs to be able to serialize sessions in order to replicate > them over the network. The message indicates, that the sesison attribute > org.apache.catalina.filters.CSRF_NONCE used by the CSRF filter is not > serializable. > > You might > > -

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Rainer Jung
On 23.07.2012 12:00, Nikhil Dhankani wrote: Hi, I am trying to configure CSRFPreventionFilter with the below code in my web.xml. CSRF org.apache.catalina.filters.CsrfPreventionFilter CSRF /* But tomcat fails to start with below error, Jul 22, 2012 11:57:17 PM org.apache.cata