You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Steven Pannell <st...@zooplus.com> on 2005/05/02 09:58:46 UTC

[users@httpd] Unique Session ID's - are they really generated?

Hi,

On some application servers I have used in the past when you shut them down
and restarted the server it was possible that duplicate session ID's were
generated matching those in a previously running instance of the server.

Does anyone know if tomcat really has Unique Session ID creation.  That is I
leave tomcat running for a week. Stop it.  Start it.  Is it possible that a
duplication session ID will be created in my new running instance that
matches a session ID created in my previous running instance.

I just want to know does tomcat really guarantee unique Session ID's even
over shutdown and start ups?? 

Thanks,
Steve.



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Unique Session ID's - are they really generated?

Posted by Joshua Slive <js...@gmail.com>.
On 5/2/05, Steven Pannell <st...@zooplus.com> wrote:
> Does anyone know if tomcat really has Unique Session ID creation.  That is I
> leave tomcat running for a week. Stop it.  Start it.  Is it possible that a
> duplication session ID will be created in my new running instance that
> matches a session ID created in my previous running instance.

Again, this is not the right list for this question.  Try over here:
http://jakarta.apache.org/site/mail2.html#Tomcat

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org