how to invalidate old sessions when new user access appl on same machine

2008-12-19 Thread Vishnu Vardhana Reddy 

hi all,

I am using Mozilla browser to access my web application.User one access my
application using his credentials .but i left that browser open.after that I
am opening the another Mozilla window and accessing my application using
different credentials ex:user2 credentials .user 2 also can access my
application.but when i open the first browser ..am automatically getting
second user session.how can we avoid this problem.

Application is using session identifier(jSessionID) as the URL parameter for
session management.

is it possible to invalidate the old session when new user access on same
machine.

thanks,
Vishnu 
-- 
View this message in context: 
http://www.nabble.com/how-to-invalidate-old-sessions-when-new-user-access-appl-on-same-machine-tp21090090p21090090.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: how to invalidate old sessions when new user access appl on same machine

2008-12-19 Thread Vishnu Vardhana Reddy 

well .that true but we cant say it to customer ..they do how they like .but
we have to restrict it ..
thats is i want ..if user forgot to logout ..that case ..

awarnier wrote:
 
 Vishnu Vardhana Reddy wrote:
 hi all,
 
 I am using Mozilla browser to access my web application.User one access
 my
 application using his credentials .but i left that browser open.after
 that I
 am opening the another Mozilla window and accessing my application using
 different credentials ex:user2 credentials .user 2 also can access my
 application.but when i open the first browser ..am automatically getting
 second user session.how can we avoid this problem.
 
 Well, user1 should not leave his window open when he goes off to drink a 
 coffee.  That's basic security.  After all, you do not leave your 
 bank-card in the cash machine for the next user, or do you ?
 
 
 
 -
 To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
 For additional commands, e-mail: users-h...@tomcat.apache.org
 
 
 

-- 
View this message in context: 
http://www.nabble.com/how-to-invalidate-old-sessions-when-new-user-access-appl-on-same-machine-tp21090090p21090313.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org