Problem solved.
It's not actually a problem in the new version, 4.0.3, as expected.
The problem actually exists in 4.0.2 too, but its got nothing to do with
clustering.
Rather, the problem is to do with cookies.
The problem occurred when I accessed a web app B on our server that explicitly
"disables" cookies, after using web app A on the same server that uses cookies.
What happened is that web app B used a cookie instead of URL-rewriting, even
though its deploy descriptors explicitly disable cookies.
It seems that the cookie (legitimately) set by A ("jsessionid") is then used by
the same browser when application B is later accessed. I don't know why that
this is, but it seems to be a fault on the part of the appserver.
ie: If an app explicitly disables cookies, I would expect the apperver to not
dish-out or accept cookies for that app. However the jboss-web directive
"use-session-cookies" and the context.xml directive "Context cookies="false""
seem to only have the affect of the appserver having a preference for URL
rewriting, as opposed to totally disabling cookies.
I'm not sure whether this is a bug with JBoss or Tomcat (I'm inclined to think
Tomcat, maybe), or whether this is just a known evil that people seem to have
put-up with.
A bit of a pita to work-around, but I'm trying to investigate the possibility
of changing the cookie's path from "/" to being, say, the context root of that
webapp, so webapp A's cookies are not used in webapp B. NB: I'm talking only of
cookies sent by the container (not user cookies), so I'm not sure JBoss/Tomcat
provides any facilities to change this.
Potentially also investigating that possibility of changing Tomcat's directive
emptySessionPath from true (in JBoss) back to false (to match the Tomcat
default).
Of course any suggestions would be welcomed!
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3915431#3915431
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3915431
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user
