Glammy,

When user A logs in, note session ID.  Then when user B logs in note session 
ID.  Finally, check session ID again after user A requests page 1 and user B 
requests page 2.  Also, if possible, check the cookie values in each users 
browser at same points.

It may be helpful (although time consuming) to create a Filter and out put 
request info on the way in and response info on the way out of your 
application.  Info could be IP addresses, and cookies, session ID's, and 
Princpal names.

Make sure your tomcat server is configured to use session cookies in server.xml 
(the default value is true).

Are you in a clustered environment?

Are you using single sign on?

strange..., cgriffith

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3938965#3938965

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3938965


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to