I had a very similar problem some months back. It turned out to be a proxy
server in the network caching pages too aggressively. We have a welcome screen
that says hello to the user by name, based on a value pulled from session.
Many times, anyone who logged in would be greeted by the wrong name, and always
the name of the first person that logged on that day. The proxy was returning
a cached copy of the page rather than sending the request through to the app
server (verified by logging a message any time the Action that logged the user
on fired, which is where the session was set up... I noticed the Action wasn't
getting executed, yet the user was getting in, which could only be explained by
the proxy returning a cached copy). Solution was to configure IE to not use
the proxy for the address of this application. Coukd something like this be
the case here too?
-----Original Message-----
From: "Jesse Alexander (KBSA 21)"<[EMAIL PROTECTED]>
Sent: 2/10/05 8:01:43 AM
To: "Struts Users Mailing List"<user@struts.apache.org>
Subject: RE: session race / transfer issue
-----Original Message-----
From: Brown, James [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 09, 2005 4:30 PM
To: user@struts.apache.org
Subject: session race / transfer issue
We have encountered a problem in which it appears (from user's
description, transaction records, web application logs, and web server
access logs), that user sessions are being transferred from one user to
another.
<--- snipped --->
We have inspected our web application code (all jsp, javascript, and
java) and to our knowledge we are handling session creation,
invalidation and access properly. In addition, we are using the html
taglib and/or explicit encodeURL calls to insure URL rewriting is being
enforced.
<--- snipped --->
-- James
the last time we have encountered such a problem it turned out to be
something
homemade within the application. The had stored that kind of data in a
Action-instance variable.
hop you find that bugger. Good luck
Alexander
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
[Message truncated. Tap Edit->Mark for Download to get remaining portion.]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
