Re: Session Persistence Problems -- Epilog

2019-04-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/11/19 19:34, Jerry Malcolm wrote: > > On 4/11/2019 5:05 PM, Jerry Malcolm wrote: >> On 4/11/2019 4:22 PM, Christopher Schultz wrote: >>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >>> >>> Jerry, >>> >>> On 4/11/19 15:29, Jerry Ma

Re: Session Persistence Problems

2019-04-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/11/19 18:05, Jerry Malcolm wrote: > On 4/11/2019 4:22 PM, Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Jerry, >> >> On 4/11/19 15:29, Jerry Malcolm wrote: >>> Alternatively, if I had a better unde

Re: Session Persistence Problems

2019-04-12 Thread Jerry Malcolm
Thanks, Luis.  I tried that.  And it indeed does store only one session cookie for the entire domain. But it does not change the fact that if you have two webapps in the same domain (contexts), you still have two different sessions and therefore two different session ids. You now just have one

Re: Session Persistence Problems

2019-04-12 Thread Luis Rodríguez Fernández
Hello Jerry, Sure, you can always set the path of your cookies to "/" via the cookie-config element [1] in your web.xml descriptor: / Or via your context.xml [2] Hope it helps, Luis [1] https://javaee.github.io/servlet-spec/downloads/servlet-4.0/servlet

Re: Session Persistence Problems -- Epilog

2019-04-11 Thread Jerry Malcolm
On 4/11/2019 5:05 PM, Jerry Malcolm wrote: On 4/11/2019 4:22 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/11/19 15:29, Jerry Malcolm wrote: Alternatively, if I had a better understanding of how sessions are managed by both TC and the browser, it

Re: Session Persistence Problems

2019-04-11 Thread John Dale
This is a great information. I'd like to stray a little off topic if that's okay .. still in the same ballpark. I like to invent new doodads in software and see if I can do it better. Over the years, like many, I built-up a library of things that worked best for me over the years. One of those

Re: Session Persistence Problems

2019-04-11 Thread Jerry Malcolm
On 4/11/2019 4:22 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/11/19 15:29, Jerry Malcolm wrote: Alternatively, if I had a better understanding of how sessions are managed by both TC and the browser, it might help me figure out what is going wrong.

Re: [OT] Session Persistence Problems

2019-04-11 Thread tomcat
On 11.04.2019 22:56, Jerry Malcolm wrote: On 4/11/2019 3:11 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/10/19 23:56, Jerry Malcolm wrote: The only thing I can come up with is that I'm using some RewriteRules in httpd to map the complex url paths

Re: Session Persistence Problems

2019-04-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/11/19 15:29, Jerry Malcolm wrote: > Alternatively, if I had a better understanding of how sessions are > managed by both TC and the browser, it might help me figure out > what is going wrong. I know a session key is generated by TC and

Re: [OT] Session Persistence Problems

2019-04-11 Thread Jerry Malcolm
On 4/11/2019 3:11 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/10/19 23:56, Jerry Malcolm wrote: The only thing I can come up with is that I'm using some RewriteRules in httpd to map the complex url paths to single words like "/product". (SEO adv

Re: [OT] Session Persistence Problems

2019-04-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jerry, On 4/10/19 23:56, Jerry Malcolm wrote: > The only thing I can come up with is that I'm using some > RewriteRules in httpd to map the complex url paths to single words > like "/product". (SEO advisor told me to do that...) Do you allow crawle

Re: Session Persistence Problems

2019-04-11 Thread John Dale
I'm looking forward to hearing from the dev folks on this. I suspect it has something to do with the context configuration. A long time ago, I started doing my own session management, but then I don't mind building out the pieces I needed for clustering. In fact, I decided to store session infor

Re: Session Persistence Problems

2019-04-11 Thread Jerry Malcolm
Alternatively, if I had a better understanding of how sessions are managed by both TC and the browser, it might help me figure out what is going wrong.  I know a session key is generated by TC and sent back in a response.  And I'm assuming that the browser must return that session key on subseq

Re: Session Persistence Problems

2019-04-11 Thread Jerry Malcolm
Thanks for the quick response, Luis.  Answers below: On 4/11/2019 3:22 AM, Luis Rodríguez Fernández wrote: Hello Jerry, I'm using single sign-on Do you mean tomcat Single Sign On valve? [1], a third party solution or your custom implementation? That can change the game completely :) Yes, sta

Re: Session Persistence Problems

2019-04-11 Thread Luis Rodríguez Fernández
Hello Jerry, > I'm using single sign-on Do you mean tomcat Single Sign On valve? [1], a third party solution or your custom implementation? That can change the game completely :) > some RewriteRules in httpd Can you share them? That could change the game also :) Cheers, Luis [1] https://tomc

Session Persistence Problems

2019-04-10 Thread Jerry Malcolm
I have a TC host that is running about 10 separate webapps that interact with each other.  I understand that sessions are per-webapp.  But within one webapp, with the same browser just making different calls to the same webapp is starting new sessions about 30% of the time.  I've put a debug st