DeSarro --

I have gone thru enough pain on this topic. My experience has been that on
IE as well as NS browser its the same session id for any instances of the
browsers. This ofcourse is the default *cookies based* implementation of the
browsers (and most webservers / servlet engines)

If the requirements state that there can be multiple browser instances for
your application, the best bet is to take control of the session mgmt and
rewrite all the dynamically generated URLs. This support is also available
with all webserver / servlet engine implementations. You just need to make
sure to *force* use of URL rewrite over the default use of cookies based
session mgmt.

Hope it helps. (and yes, it does require significant design change if you
were not expecting this to happen :-)

Shashank


>From: DeSarro Frank <[EMAIL PROTECTED]>
>Reply-To: "A mailing list for discussion about Sun Microsystem's Java
>        Servlet API Technology." <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Sessions & IE 4.0
>Date: Tue, 13 Jul 1999 13:49:00 -0400
>MIME-Version: 1.0
>From [EMAIL PROTECTED] Tue Jul 13 11:15:27 1999
>Received: from [204.160.241.28] by hotmail.com (1.5) with SMTP id
>MHotMailB954CD3E0074D82197B6CCA0F11CDF780; Tue Jul 13 11:15:27 1999
>Received: from mail (mail.java.sun.com [204.160.241.28])by
>mail.java.sun.com (8.9.0.Beta6+Sun/8.9.0) with ESMTP id LAA26608;Tue, 13
>Jul 1999 11:03:35 -0700 (PDT)
>Received: from JAVA.SUN.COM by JAVA.SUN.COM (LISTSERV-TCP/IP release 1.8d)
>with          spool id 1874844 for [EMAIL PROTECTED]; Tue, 13
>Jul 1999          10:58:52 -0700
>Received: from mail.divintech.com (mail.divintech.com [209.74.42.25]) by
>       mail.java.sun.com (8.9.0.Beta6+Sun/8.9.0) with ESMTP id KAA25311 for
>          <[EMAIL PROTECTED]>; Tue, 13 Jul 1999 10:44:18 -0700
>(PDT)
>Received: by mail.divintech.com with MailBeamer v3.23 (WinNT 4.x) ; Tue, 13
>Jul          1999 13:51:00 -0400
>X-Mailer: MailBeamer v3.23 (WinNT 4.x)
>X-Priority: 3
>Message-ID:  <[EMAIL PROTECTED]>
>Sender: "A mailing list for discussion about Sun Microsystem's Java
>      Servlet API Technology." <[EMAIL PROTECTED]>
>
>         I'm working on a servlet business application utilizing session
>tracking. I'm concerned by the way IE handles sessions when IE is invoked
>multiple times.  If I start Netscape multiple times it appears to create
>a new session ID for each invocation.  IE does not do this.  Each IE
>invocation appears to reuse the same session ID.  I've read Hunter's book
>on servlets and the chapter on session tracking.  I'm concerned because
>the user could have multiple IE invocations using the same session
>information.  Am I missing something?  Are most servlet applications
>allowed to work this way?
>I'm not comfortable with this possibility.  Am I stuck with this
>situation or is there away to prevent it?   Any suggestions would be
>appreciated.  Thanks.
>
>___________________________________________________________________________
>To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
>of the message "signoff SERVLET-INTEREST".
>
>Archives: http://archives.java.sun.com/archives/servlet-interest.html
>Resources: http://java.sun.com/products/servlet/external-resources.html
>LISTSERV Help: http://www.lsoft.com/manuals/user/user.html


_______________________________________________________________
Get Free Email and Do More On The Web. Visit http://www.msn.com

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to