Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yawar, On 8/21/2010 12:42 AM, Yawar Khan wrote: chris, i had a look at container managed authentication and its quite handy. but i couldnt see how i can add extra functionality like calling an encryption function on password text field before

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-23 Thread Yawar Khan
. From: Felix Schumacher felix.schumac...@internetallee.de To: Tomcat Users List users@tomcat.apache.org Sent: Sat, August 21, 2010 6:07:18 PM Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux Yawar Khan khanya...@yahoo.com schrieb: thanks felix, very nicely explained! but do

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-23 Thread Felix Schumacher
. From: Felix Schumacher felix.schumac...@internetallee.de To: Tomcat Users List users@tomcat.apache.org Sent: Sat, August 21, 2010 6:07:18 PM Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux Yawar Khan khanya...@yahoo.com schrieb: thanks

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-23 Thread André Warnier
Yawar Khan wrote: Felix, the issue still persists, i dont know what else to do? and i dont know why this issue is popping up on linux enviroment only. under windows there is no session mixup issue. Now this are no class wide variables and i had moved them inside the login function. Hi.

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-21 Thread Wesley Acheson
; } } return bean; } } ysk -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Friday, August 20, 2010 3:43 AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux -BEGIN PGP SIGNED MESSAGE- Hash

Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-21 Thread Pid
...@christopherschultz.net] Sent: Friday, August 20, 2010 3:41 AM To: Tomcat Users List Subject: Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux Yawar, On 8/19/2010 3:27 PM, Yawar Saeed Khan/ITG/Karachi wrote: your comments on my current code tells me that this code is not bad, but I should check out

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-21 Thread Felix Schumacher
: Sessions mix-up on Tomcat 6.0.26 on Linux -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley, On 8/19/2010 5:04 PM, Wesley Acheson wrote: Maybe its just be but I still don't see where uadc is declared or even imported. ...or even used. I'm guessing that the bad code exists

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-21 Thread Yawar Khan
PM Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux On Sat, Aug 21, 2010 at 6:54 AM, Yawar Khan khanya...@yahoo.com wrote: Chris, you identified a possible sql injection in my code and declaring it a very bad piece of code. Despite the fact that jdbc does not allow more than 1 query

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-21 Thread Pid
users@tomcat.apache.org Sent: Sat, August 21, 2010 3:16:23 PM Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux On Sat, Aug 21, 2010 at 6:54 AM, Yawar Khan khanya...@yahoo.com wrote: Chris, you identified a possible sql injection in my code and declaring it a very bad piece of code

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-21 Thread Yawar Khan
@tomcat.apache.org Sent: Sat, August 21, 2010 4:13:52 PM Subject: RE: Sessions mix-up on Tomcat 6.0.26 on Linux Am Freitag, den 20.08.2010, 21:54 -0700 schrieb Yawar Khan: Chris, you identified a possible sql injection in my code and declaring it a very bad piece of code. Despite the fact that jdbc does

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-21 Thread Felix Schumacher
of your user beans. Hth Felix From: Felix Schumacher felix.schumac...@internetallee.de To: Tomcat Users List users@tomcat.apache.org Sent: Sat, August 21, 2010 4:13:52 PM Subject: RE: Sessions mix-up on Tomcat 6.0.26 on Linux Am Freitag, den 20.08.2010, 21:54

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-20 Thread Pid
On 19/08/2010 23:42, Christopher Schultz wrote: Wesley, On 8/19/2010 5:04 PM, Wesley Acheson wrote: Maybe its just be but I still don't see where uadc is declared or even imported. ...or even used. I'm guessing that the bad code exists outside of this login servlet. s/the bad/more

RE: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-20 Thread Yawar Khan
, 2010 3:41 AM To: Tomcat Users List Subject: Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux   -BEGIN PGP SIGNED MESSAGE- Hash: SHA1   Yawar,   On 8/19/2010 3:27 PM, Yawar Saeed Khan/ITG/Karachi wrote: your comments on my current code tells me that this code is not bad, but I should

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-20 Thread Yawar Khan
...@gmail.com] Sent: Friday, August 20, 2010 2:05 AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux   Maybe its just be but I still don't see where uadc is declared or even imported.   On Thu, Aug 19, 2010 at 10:26 PM, Yawar Saeed Khan/ITG/Karachi yawar.sa...@mcb.com.pk

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-20 Thread Yawar Khan
AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux   -BEGIN PGP SIGNED MESSAGE- Hash: SHA1   Wesley,   On 8/19/2010 5:04 PM, Wesley Acheson wrote: Maybe its just be but I still don't see where uadc is declared or even imported.   ...or even used.   I'm guessing

Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
Hi, I have developed a web application using jsp and servlets with oracle database. The application is working fine on windows, but the problem arises when we deploy it on Linux(64bit), we get session issues in the application. The session variables get mixed up and we can see previously

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread André Warnier
Yawar Saeed Khan/ITG/Karachi wrote: Hi, I have developed a web application using jsp and servlets with oracle database. and with Tomcat also ? The application is working fine on windows, Windows version, JVM version, tomcat version ? but the problem arises when we deploy it on

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Ben Souther
On Thu, 2010-08-19 at 12:45 +0200, André Warnier wrote: Yawar Saeed Khan/ITG/Karachi wrote: Hi, I have developed a web application using jsp and servlets with oracle database. and with Tomcat also ? Look in the subject line. :) The application is working fine on

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Caldarale, Charles R
Yawar Saeed Khan/ITG/Karachi wrote: I have developed a web application using jsp and servlets with oracle database. The application is working fine on windows, Or at least running on that platform hasn't uncovered the latent bugs in your webapp. but the problem arises when we deploy it

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread André Warnier
Ben Souther wrote: On Thu, 2010-08-19 at 12:45 +0200, André Warnier wrote: Yawar Saeed Khan/ITG/Karachi wrote: Hi, I have developed a web application using jsp and servlets with oracle database. and with Tomcat also ? Look in the subject line. :) Ok, I overlooked the subject line (*).

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Pid
On 19/08/2010 14:02, Caldarale, Charles R wrote: Yawar Saeed Khan/ITG/Karachi wrote: I have developed a web application using jsp and servlets with oracle database. The application is working fine on windows, Or at least running on that platform hasn't uncovered the latent bugs in your

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
on both machines with default configurations. From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Thu 19-Aug-10 7:02 PM To: Tomcat Users List Subject: RE: Sessions mix-up on Tomcat 6.0.26 on Linux Yawar Saeed Khan/ITG/Karachi wrote: I have

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
-10 9:03 PM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux On 19/08/2010 14:02, Caldarale, Charles R wrote: Yawar Saeed Khan/ITG/Karachi wrote: I have developed a web application using jsp and servlets with oracle database. The application is working fine

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Konstantin Kolinko
2010/8/19 Yawar Saeed Khan/ITG/Karachi yawar.sa...@mcb.com.pk: Ok, let me share my source code with you...                  HttpSession session = request.getSession(true);                  response.sendRedirect(main.jsp); //logged-in page See documentation on

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
: Re: Sessions mix-up on Tomcat 6.0.26 on Linux 2010/8/19 Yawar Saeed Khan/ITG/Karachi yawar.sa...@mcb.com.pk: Ok, let me share my source code with you... HttpSession session = request.getSession(true); response.sendRedirect(main.jsp); //logged-in page See

Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yawar, I'm marking this as off-topic for /your/ request. I just have some comments for you. Take them or leave them. On 8/19/2010 11:53 AM, Yawar Saeed Khan/ITG/Karachi wrote: Ok, let me share my source code with you... my index.jsp page has a

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yawar, On 8/19/2010 11:28 AM, Yawar Saeed Khan/ITG/Karachi wrote: Chuck, what you say makes sense but I check the behavior on windows. the problem is in Linux environment only. I would imagine that tomcat configuration might be different on both

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Caldarale, Charles R
On 8/19/2010 11:28 AM, Yawar Saeed Khan/ITG/Karachi wrote: Chuck, what you say makes sense but I check the behavior on windows. All that says to me is that your testing environment on Windows is inadequate. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Wesley Acheson
Okay I've a little tehory could you post the entire code for loginmanager. How is udac declared? If its a class variable then *ITS NOT THREAD SAFE*. As a basic rule don't declare class variables in a servlet (There are exceptions to this rule but you shouldn't under normal circumstances)

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
source code is attached; suggestions are welcome. From: Wesley Acheson [mailto:wesley.ache...@gmail.com] Sent: Fri 20-Aug-10 12:38 AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux Okay I've a little tehory could you post

RE: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
have client side form validations (js) to stop query busters. From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thu 19-Aug-10 11:01 PM To: Tomcat Users List Subject: Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux -BEGIN PGP SIGNED

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Wesley Acheson
. From: Wesley Acheson [mailto:wesley.ache...@gmail.com] Sent: Fri 20-Aug-10 12:38 AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux Okay I've a little tehory could you post the entire code for loginmanager. How is udac declared? If its a class

Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Mark Eggers
/ - Original Message From: Yawar Saeed Khan/ITG/Karachi yawar.sa...@mcb.com.pk To: Tomcat Users List users@tomcat.apache.org Sent: Thu, August 19, 2010 12:27:08 PM Subject: RE: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux thanks for your constructive comments, as I mentioned that bad

RE: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Yawar Saeed Khan/ITG/Karachi
. From: Wesley Acheson [mailto:wesley.ache...@gmail.com] Sent: Fri 20-Aug-10 12:38 AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux Okay I've a little tehory could you post the entire code for loginmanager. How is udac

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Wesley Acheson
); } } From: Wesley Acheson [mailto:wesley.ache...@gmail.com] Sent: Fri 20-Aug-10 1:56 AM To: Tomcat Users List Subject: Re: Sessions mix-up on Tomcat 6.0.26 on Linux Sorry can't see it. Are you sure you attached it? you could use something like pastebin if the mail list

Re: [OT] Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yawar, On 8/19/2010 3:27 PM, Yawar Saeed Khan/ITG/Karachi wrote: your comments on my current code tells me that this code is not bad, but I should check out tomcat's container managed logins... right? This code seems to be doing more work than

Re: Sessions mix-up on Tomcat 6.0.26 on Linux

2010-08-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wesley, On 8/19/2010 5:04 PM, Wesley Acheson wrote: Maybe its just be but I still don't see where uadc is declared or even imported. ...or even used. I'm guessing that the bad code exists outside of this login servlet. - -chris -BEGIN PGP