Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Rainer Jung
On 23.07.2012 12:00, Nikhil Dhankani wrote: Hi, I am trying to configure CSRFPreventionFilter with the below code in my web.xml. filter filter-nameCSRF/filter-name filter-classorg.apache.catalina.filters.CsrfPreventionFilter/filter-class /filter filter-mapping

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Mark Thomas
On 23/07/2012 11:10, Rainer Jung wrote: The cluster needs to be able to serialize sessions in order to replicate them over the network. The message indicates, that the sesison attribute org.apache.catalina.filters.CSRF_NONCE used by the CSRF filter is not serializable. You might - open

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Nikhil Dhankani
Yes my environment is a clustered one. Thanks Rainer for the quick response, this was really helpful. On Mon, Jul 23, 2012 at 3:40 PM, Rainer Jung rainer.j...@kippdata.dewrote: It seems you are doing clustering? The cluster needs to be able to serialize sessions in order to replicate them

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Rainer Jung
On 23.07.2012 13:38, Mark Thomas wrote: On 23/07/2012 11:10, Rainer Jung wrote: The cluster needs to be able to serialize sessions in order to replicate them over the network. The message indicates, that the sesison attribute org.apache.catalina.filters.CSRF_NONCE used by the CSRF filter is not

Re: Configure CSRFPreventionFilter in 6.0.35

2012-07-23 Thread Mark Thomas
Rainer Jung rainer.j...@kippdata.de wrote: On 23.07.2012 13:38, Mark Thomas wrote: On 23/07/2012 11:10, Rainer Jung wrote: The cluster needs to be able to serialize sessions in order to replicate them over the network. The message indicates, that the sesison attribute