Re: [OT] What can prevent sessions from timeouting apart from real requests

2018-08-27 Thread Leon Rosenberg
Hi, actually the issue got resolved. The system in question wasn't tomcat but jboss (hence the offtopic) and in particular undertow. Undertow seems to have completely different session expiration handling than tomcat, they actually prolong expiration timestamp every time an attribute is accessed...

RE: [OT] What can prevent sessions from timeouting apart from real requests

2018-08-27 Thread Jäkel , Guido
Dear Leon, I suggest to use the Tomcat Manager Application to investigate the session data: * Use the Session Display (/manager/html/sessions?path=/foo) to take a look on the different Timers (Creation Time, Last Accessed Time, Used Time, Inactive Timemm,TTL) or even the session data * Use the

Re: [OT] What can prevent sessions from timeouting apart from real requests

2018-08-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Leon, On 8/24/18 05:25, Leon Rosenberg wrote: > one of the systems we are consulting has encountered a strange > problem. The sessions will build up indefinitely but never expire. > Then, at one point (at 02am in the night, 19K sessions would drop >