Thanks for this post, but the problem that I have is uncertain. My
application is Java Web and creates a session for the user in Tomcat
(version apache-tomcat-7.0.29) and an unusual one user captures the user
session without finding an explanation.

Could you help me or tell me who to contact to find out how Tomcat creates
and validates sessions created and if possible capture the session of
another user from different computers.

Best Regards


2013/11/9 <spr...@gmx.eu>

> > > > I think I will fix the DynamoDB-Sessionmanager.
> > >
> > > Also an option.
> >
> > Already in process it seems ;)
> >
> > https://github.com/aws/aws-dynamodb-session-tomcat/issues/3
> >
> > I hope they will use the code from tomcat for managing the classloader
> > issues.
>
> Well, just realized that this Manager is based on PersistentManagerBase.
> So I see no improvement in terms of reliability, because it still writes
> the
> data async into DynamoDB.
> I even cannot see the reason why they created DynamoDBSessionManager,
> DynamoDBSessionStore would have done the job too then.
>
> Looking into the Manager interface (public void backgroundProcess()) tells
> me, that it seems to be always async?
>
> So what is the right stategy to distribute sessions across an arbitrary
> amount of servers with a 100% guarantee that the session will be found at
> any time on any server?
>
> Thank you
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Reply via email to