-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Nagaraj,

On 6/25/13 12:49 AM, Nagaraj Mandya wrote:
> Hello, I am running Apache Tomcat 7.0.4 on Linux and the 
> session-timeout is configured to 30 minutes.

Hopefully, you mean Tomcat 7.0.40 or 7.0.41. If not, upgrade.

> All requests from my client pass in the session cookie. However, I 
> do not want the session timeout counter to get reset for certain 
> URLs.

Okay, so you want to be able to contact a particular URL and *not* have
the last-used timestamp updated? Do any of the servlets that react to
those URLs try to call request.getSession()?

> Is there a way to configure Tomcat to ignore certain URLs when 
> resetting its timeout counter for a particular session? Thanks.

If you are operating in STRICT_SERVLET_COMPLIANCE or ACCESS_SESSION
mode, then you will not be able to disable this update. If you are not
operating in either of these two modes, you may be able to do it, but
you will have to write your own software to:

  a) track sessions - probably an HttpSessionListener
  b) give access to those tracked sessions without calling getSession -
     probably using a Filter and an HttpServletRequestWrapper

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=AeJT
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to