None that I no of. More to the point, it's a security issue to have all the browsers behind one IP share a common session. Witness how cable routers can share one IP with an entire apartment building. Would you really want your neighbor with the super loud metal rock to see your credit card statements?

All browser windows spawned from a single process can share (and often do to the frustration of some web developers). So, if you use New Window or Ctrl-N from within IE you'll get the same session as the window that started the session. Firefox does the same thing regardless of whether you open from Explorer or New Window in the File menu.

Is there a reason you need to guarantee all the browsers from a given user have the exact same session?

--David

kz wrote:

Hi,

Is there any option in Tomcat which can assign a new session ID only if the
IP address is changed and not a browser window? Actually right now a new
session ID comes in request for every new browser window (even if the IP
address is same). Is there any option to make Tomcat assign new session ID only if IP address is changed and the session remains the same even if there
are multiple browser windows hitting the server?

Thank you so much.

Khurram.



---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to