-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Allen,

Fogleson, Allen wrote:
> I assume you are using JSP? If so... well no there is not. JSP by 
> default has a contract that a session is always available to it.

Boy, is that statement false:

<@page session="false" @>

Something else the OP might want to look for is Struts's preference to
keep a visitor's Locale in the session. I would imagine that if you
disable Locale caching, you'll eliminate one more place a session could
be created.

> Since it is always available an HTTPSession is always created if one
> is not available. We have gotten around this by having a session
> listener and cleaning up a session using it.

That seems like an awful waste of effort :(

This does bring up a good point, though, which is the use of an
HttpSessionListener to observe "session creation" events. You can
generate a stack trace when a session is created to find out when and
where they are being created. As you find places where sessions are
being created, you can modify your code or your configuration to avoid
that session creation.

- -chris

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGg9hB9CaO5/Lv0PARAgG0AJsHWMf0Iv4vs5xZPVCYdgF+sHo3CgCgv1Ij
iuynvwsBxYcJcaqvuhh1P28=
=S8L3
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to