Hmmm, we have a webapp that requires authentication to launch a specific
function and we spawn multiple windows with window.open() and we don't
have any problem with the browser session IDs being changed.  Are you
switching from http to https or vice versa?  This would certainly result
in different session ID's being created.  Additionally, if you're
somehow invalidating the primary window's session before spawning the
new window, then it would also get a new session ID.

Hope that helps.

--adam

-----Original Message-----
From: Adam Lipscombe [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, October 10, 2007 2:54 AM
To: Tomcat Users List
Subject: How to share tomcat sessions across multiple IE windows

Folks,


Apologies, this is not strictly a tomcat question but I wonder if anyone
else has run into it and 
has a solution.  My app spawns another window to display help, via the
window.open() javascript call.

The new window does not share the same session as the original, the
session ID is always different.
Occasionally the ID of the new window is that of a session that has
expired so the user is 
redirected to the login page.


I think his behaviour is IE specific, I found a couple of (non tomcat)
explanations here:

http://classicasp.aspfaq.com/general/how-do-i-manage-a-session-across-mu
ltiple-windows.html.

http://de3.php.net/session-start

In the latter it says:
"The problem is that IE doesn't always use the same IE process to host a
new pop-up window - it 
chooses one (using some mysterious strategy) from the pool of running IE
processes! Since session 
information (cookies) is not preserved across processes, the pop-up may
loose the session (and 
probably redirect the user to your log-in page.)"




Does anyone know how to make the new window use the same session as the
original window?
Or at least use a brand-new session rather than a recycled old one?




TIA - Adam







---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to