RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-10-02 Thread Pottinger, Hardy J.
0-doc/config/ajp.html From: Christopher Schultz [ch...@christopherschultz.net] Sent: Thursday, September 10, 2015 4:15 PM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SH

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-10 Thread Christopher Schultz
en sessions change ids. - -chris > From: Christopher Schultz > [ch...@christopherschultz.net] Sent: Thursday, September 10, 2015 > 2:57 PM To: Tomcat Users List Subject: Re: seeking help with > stabilizing the persistence of a JSESSIONID &

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-10 Thread Pottinger, Hardy J.
hristopher Schultz [ch...@christopherschultz.net] Sent: Thursday, September 10, 2015 2:57 PM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/10/15 3:36 PM, Pottinger, Hardy J. wrote:

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/10/15 3:36 PM, Pottinger, Hardy J. wrote: >> putting Serializable objects in the session is surely a good >> idea in general. > > I agree, especially, as you mention, if we intend to distribute > sessions among various containers. > >

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-10 Thread Pottinger, Hardy J.
Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/10/15 1:00 PM, Pottinger, Hardy J. wrote: > The session attribute we are creating to hold the flag to indicate > the session is "interrupted".

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/10/15 1:00 PM, Pottinger, Hardy J. wrote: > The session attribute we are creating to hold the flag to indicate > the session is "interrupted"... is not serializable... which I > think means that, when the new session is created as part o

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-10 Thread Pottinger, Hardy J.
ow if this works out. --Hardy From: Christopher Schultz [ch...@christopherschultz.net] Sent: Thursday, September 10, 2015 10:39 AM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark,

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 9/9/15 9:43 PM, Pottinger, Hardy J. wrote: > It doesn't matter which Authenticator is installed, they all behave > the same way. The user name from httpd is used to populate the > remote user name and the user principal and the user princip

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Pottinger, Hardy J.
Here is the web.xml for the main UI webapp https://github.com/DSpace/DSpace/blob/master/dspace-xmlui/src/main/webapp/WEB-INF/web.xml Sent from my Zact Mobile phone. Mark Thomas wrote: On 09/09/2015 21:30, Christopher Schultz wrote: > Hardy, > > On 9/9/15 4:22 PM, Pottinger, Hardy J. wrote: >> H

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Mark Thomas
On 09/09/2015 21:30, Christopher Schultz wrote: > Hardy, > > On 9/9/15 4:22 PM, Pottinger, Hardy J. wrote: >> Ha, sorry for the useless detail :-) > > It's no problem. Stymied by the effective use of class extension > features in an OO language. :) > Is that enough of a clue? >>> Ha ha ha,

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Pottinger, Hardy J.
f nobody else replies, I'll try to trace-through the code to > figure out what kind of authenticator you are getting. I'm > guessing NoLoginAuthenticator is the one, though. > > -chris > >> From: Pottinger, Hardy J. Sent: Wednesday, September 09, 2015 >> 9:35 AM To:

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Christopher Schultz
comment, it would save me a bunch of time ;) - -chris > From: Christopher Schultz > [ch...@christopherschultz.net] Sent: Wednesday, September 09, 2015 > 3:09 PM To: Tomcat Users List Subject: Re: seeking help with > stabilizing the persistence of a JSES

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Pottinger, Hardy J.
ace/DSpace/tree/master/dspace-api/src/main/java/org/dspace/authenticate From: Christopher Schultz [ch...@christopherschultz.net] Sent: Wednesday, September 09, 2015 3:09 PM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Pottinger, Hardy J.
:61) at java.lang.Thread.run(Thread.java:745) From: Pottinger, Hardy J. Sent: Wednesday, September 09, 2015 2:54 PM To: Tomcat Users List Subject: RE: seeking help with stabilizing the persistence of a JSESSIONID Well... it occurred to me that from time

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Christopher Schultz
ugh. - -chris > From: Pottinger, Hardy J. Sent: Wednesday, September 09, 2015 9:35 > AM To: Tomcat Users List Subject: RE: seeking help with stabilizing > the persistence of a JSESSIONID > > Hi, thanks for following up! No, no luck at all. The web > application I'm working

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Pottinger, Hardy J.
r 09, 2015 8:24 AM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/4/15 4:32 PM, Pottinger, Hardy J. wrote: >> Are you using AJP or HTTP as your proxy protocol? If AJP, are >>

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Pottinger, Hardy J.
24 AM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/4/15 4:32 PM, Pottinger, Hardy J. wrote: >> Are you using AJP or HTTP as your proxy protocol? If AJP, are >> you using to

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/4/15 4:32 PM, Pottinger, Hardy J. wrote: >> Are you using AJP or HTTP as your proxy protocol? If AJP, are >> you using tomcatAuthentication="false" on your ? I'm >> not exactly sure what happens when you do that... you might get >> a Non

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-04 Thread Pottinger, Hardy J.
1 PM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/3/15 2:32 PM, Pottinger, Hardy J. wrote: >> Are you actually using HTTP Basic authentication? You may be >> configur

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-04 Thread tomcat
On 03.09.2015 23:31, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/3/15 2:32 PM, Pottinger, Hardy J. wrote: Are you actually using HTTP Basic authentication? You may be configuring the wrong authenticator. (I know nothing about Shibboleth) I'm using A

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/3/15 2:32 PM, Pottinger, Hardy J. wrote: >> Are you actually using HTTP Basic authentication? You may be >> configuring the wrong authenticator. (I know nothing about >> Shibboleth) > > I'm using Apache HTTPD as a front-end (via mod_pro

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Pottinger, Hardy J.
Schultz [ch...@christopherschultz.net] Sent: Thursday, September 03, 2015 12:00 PM To: Tomcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/3/15 12:52 PM, Pottinger, Hardy J. wrote: > Hi, I'm trying

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hardy, On 9/3/15 12:52 PM, Pottinger, Hardy J. wrote: > Hi, I'm trying to disable session-fixation-attack protection on > our test server, and I've added the following valve to both my > application's context-fragment file, as well as the main > co

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Pottinger, Hardy J.
11:13 AM To: Tomcat Users List Subject: RE: seeking help with stabilizing the persistence of a JSESSIONID Hi, Chris, thanks for the quick reply! Right now I'm just grasping at straws. If I can prove the JSESSIONID remains the same, and the previous URL is still lost, I'll have definitive

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Pottinger, Hardy J.
mcat Users List Subject: Re: seeking help with stabilizing the persistence of a JSESSIONID -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Harry, On 9/3/15 11:12 AM, Pottinger, Hardy J. wrote: > Hi, I'm a committer for DSpace [1] (a Java servlet) and I'm working > on a bug [2].

Re: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Harry, On 9/3/15 11:12 AM, Pottinger, Hardy J. wrote: > Hi, I'm a committer for DSpace [1] (a Java servlet) and I'm working > on a bug [2]. This bug presents with the following symptoms: > > 1) user searches site, finds an item of interest, attempt

RE: seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Pottinger, Hardy J.
:12 AM To: users@tomcat.apache.org Subject: seeking help with stabilizing the persistence of a JSESSIONID Hi, I'm a committer for DSpace [1] (a Java servlet) and I'm working on a bug [2]. This bug presents with the following symptoms: 1) user searches site, finds an item of interest, a

seeking help with stabilizing the persistence of a JSESSIONID

2015-09-03 Thread Pottinger, Hardy J.
Hi, I'm a committer for DSpace [1] (a Java servlet) and I'm working on a bug [2]. This bug presents with the following symptoms: 1) user searches site, finds an item of interest, attempts to access the item, but is not currently logged in, so is presented with a "please enter password" challeng