Re: Special requirements on session id generator

2014-03-10 Thread Rainer Jung
Here's a patch: http://people.apache.org/~rjung/patches/TC8-SessionIdGenerator-extensible.patch Any concerns about applying to TC 8? Please note Known problems. Some notes: About the patch: 1) New interface org.apache.catalina.SessionIdGenerator - setter and getter for jvmRoute - setter

Re: Special requirements on session id generator

2014-03-10 Thread Mark Thomas
On 10/03/2014 15:00, Rainer Jung wrote: Here's a patch: http://people.apache.org/~rjung/patches/TC8-SessionIdGenerator-extensible.patch Any concerns about applying to TC 8? Please note Known problems. Some notes: About the patch: 1) New interface

Re: Special requirements on session id generator

2014-03-10 Thread Rainer Jung
On 10.03.2014 16:08, Mark Thomas wrote: On 10/03/2014 15:00, Rainer Jung wrote: Here's a patch: http://people.apache.org/~rjung/patches/TC8-SessionIdGenerator-extensible.patch Any concerns about applying to TC 8? Please note Known problems. Some notes: About the patch: 1) New interface

Re: Special requirements on session id generator

2014-03-10 Thread Mark Thomas
On 10/03/2014 15:47, Rainer Jung wrote: On 10.03.2014 16:08, Mark Thomas wrote: On 10/03/2014 15:00, Rainer Jung wrote: Here's a patch: http://people.apache.org/~rjung/patches/TC8-SessionIdGenerator-extensible.patch Any concerns about applying to TC 8? Please note Known problems. Some

Special requirements on session id generator

2014-02-14 Thread Rainer Jung
I ran into a special requirement for the session id generator (uniqueness of session id for a longer time interval). While I think that the requirement needed isn't a useful general purpose extension, I stumbled over the fact, that the SessionIdGenerator class is not pluggable. Would it make

Re: Special requirements on session id generator

2014-02-14 Thread Romain Manni-Bucau
Hi FYI I had the same need in my previous company and needed to extends multiple things to be able to extend the generate method. WOuld be great to have an interface just with nextId(jvmroute) method or something like that Romain Manni-Bucau Twitter: @rmannibucau Blog:

Re: Special requirements on session id generator

2014-02-14 Thread Mark Thomas
On 14/02/2014 13:15, Rainer Jung wrote: I ran into a special requirement for the session id generator (uniqueness of session id for a longer time interval). While I think that the requirement needed isn't a useful general purpose extension, I stumbled over the fact, that the SessionIdGenerator

Re: Special requirements on session id generator

2014-02-14 Thread Romain Manni-Bucau
@Mark my use case was easier to understand maybe: we just needed to control and make not readable jvmroutes in urls Romain Manni-Bucau Twitter: @rmannibucau Blog: http://rmannibucau.wordpress.com/ LinkedIn: http://fr.linkedin.com/in/rmannibucau Github: https://github.com/rmannibucau 2014-02-14

Re: Special requirements on session id generator

2014-02-14 Thread Rainer Jung
On 14.02.2014 14:27, Mark Thomas wrote: On 14/02/2014 13:15, Rainer Jung wrote: I ran into a special requirement for the session id generator (uniqueness of session id for a longer time interval). While I think that the requirement needed isn't a useful general purpose extension, I stumbled

RE: Special requirements on session id generator

2014-02-14 Thread Konstantin Preißer
Hi Rainer Mark, -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Friday, February 14, 2014 4:32 PM To: Tomcat Developers List Subject: Re: Special requirements on session id generator On 14.02.2014 14:27, Mark Thomas wrote: On 14/02/2014 13:15, Rainer

Re: Special requirements on session id generator

2014-02-14 Thread Rainer Jung
Hi Konstantin, On 14.02.2014 17:19, Konstantin Preißer wrote: Hi Rainer Mark, -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Friday, February 14, 2014 4:32 PM To: Tomcat Developers List Subject: Re: Special requirements on session id generator

Re: Special requirements on session id generator

2014-02-14 Thread Mark Thomas
On 14/02/2014 16:57, Rainer Jung wrote: Fortunately I don't have to prevent any long term collisions, just reduce the rate without increasing session id length. Therefore I prefer not to keep state for a long time including tomcat restarts, or do remote (database) calls to check ids whenever

Re: Special requirements on session id generator

2014-02-14 Thread Konstantin Kolinko
2014-02-14 19:31 GMT+04:00 Rainer Jung rainer.j...@kippdata.de: On 14.02.2014 14:27, Mark Thomas wrote: On 14/02/2014 13:15, Rainer Jung wrote: I ran into a special requirement for the session id generator (uniqueness of session id for a longer time interval). While I think that the

Re: Special requirements on session id generator

2014-02-14 Thread Rainer Jung
On 14.02.2014 18:48, Konstantin Kolinko wrote: 2014-02-14 19:31 GMT+04:00 Rainer Jung rainer.j...@kippdata.de: On 14.02.2014 14:27, Mark Thomas wrote: On 14/02/2014 13:15, Rainer Jung wrote: I ran into a special requirement for the session id generator (uniqueness of session id for a longer

RE: Special requirements on session id generator

2014-02-14 Thread Konstantin Preißer
Hi Rainer, -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Friday, February 14, 2014 5:57 PM Nice article. The table in the article says for 16 bytes and 50 session ids the probability of a duplicate is far below 10^-18. Ah, thanks, I didn't

Re: Special requirements on session id generator

2014-02-14 Thread Rainer Jung
On 14.02.2014 19:14, Konstantin Preißer wrote: Fortunately I don't have to prevent any long term collisions, just reduce the rate without increasing session id length. Therefore I prefer not to keep state for a long time including tomcat restarts, or do remote (database) calls to check ids

RE: Special requirements on session id generator

2014-02-14 Thread Konstantin Preißer
Hi Rainer, -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Friday, February 14, 2014 11:07 PM To: Tomcat Developers List Subject: Re: Special requirements on session id generator On 14.02.2014 19:14, Konstantin Preißer wrote: Fortunately I don't have

Re: Special requirements on session id generator

2014-02-14 Thread Filip Hanik
...@apache.org wrote: Hi Rainer, -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de javascript:;] Sent: Friday, February 14, 2014 11:07 PM To: Tomcat Developers List Subject: Re: Special requirements on session id generator On 14.02.2014 19:14, Konstantin