https://bz.apache.org/bugzilla/show_bug.cgi?id=59181

            Bug ID: 59181
           Summary: Tomcat SessionManager incorrectly uses the Context's
                    sessionTimeout
           Product: Tomcat 7
           Version: 7.0.68
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: sc...@sdwr.net

In Tomcat 7.0.68 with this commit:  

http://svn.apache.org/viewvc/tomcat/tc7.0.x/tags/TOMCAT_7_0_68/java/org/apache/catalina/session/ManagerBase.java?r1=1726923&r2=1726924

The ManagerBase is incorrectly pulling Context.getSessionTimeout().  It should
be multiplying the session timeout by 60, since the Context's session timeout
is in minutes and the ManagerBase is in seconds.  

The same change in Tomcat 8.0.x correctly multiplies by 60:
http://svn.apache.org/viewvc/tomcat/tc8.0.x/tags/TOMCAT_8_0_32/java/org/apache/catalina/session/ManagerBase.java?r1=1726196&r2=1726198

- Scott

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to