DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16874>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16874 Same session for two different clients as a result of a lack in synchronization during recycling sessions ------- Additional Comments From [EMAIL PROTECTED] 2003-02-10 13:59 ------- Thanks for your review Remy. I agree that this bug seems to be a theoretical problem. But for a while we had a problem in production. Two users (with different browsers) had the same session. We found this bug after an intensive code review of our application sources and the sources of tomcat. I can't say, that our problem is definitly related with this bug, because we can't reproduce it. On the other side, I think it is a very important, that the session management is also theoretical safe. Can I introduce you with another problem, that we can reproduce? It is also related with recycling of sessions. http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16705 That's why I suggest to create always a new session object instead of recycling session objects. What do you mean? --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]