DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16874>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16874

Same session for two different clients as a result of a lack in synchronization during 
recycling sessions





------- Additional Comments From [EMAIL PROTECTED]  2003-02-10 13:59 -------
Thanks for your review Remy.

I agree that this bug seems to be a theoretical problem.

But for a while we had a problem in production. Two users (with different
browsers) had the same session. We found this bug after an intensive code review
of our application sources and the sources of tomcat.

I can't say, that our problem is definitly related with this bug, because we
can't reproduce it.

On the other side, I think it is a very important, that the session management
is also theoretical safe.

Can I introduce you with another problem, that we can reproduce? It is also
related with recycling of sessions.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16705

That's why I suggest to create always a new session object instead of recycling
session objects. What do you mean?

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to