session serialization issue?

[John Wallace <jo...@firesign.net>]

I am working on my first Tomcat based application and while testing the 
application my boss  entered some data into some fields.  While he was 
doing that, I was doing the same thing - entering data into the very 
same fields in a different session.  Unfortunately my values stored in 
session attributes got mixed in with his values in his session 
attributes .  I don't see how it could have happened.  My data should 
have been stored in a completely different session and should not have 
been visible to his session.

So I came across a bug posting here:


Bugzilla Bug 40114, Session inadvertently "hijacked" by different after 
server restart http://issues.apache.org/bugzilla/show_bug.cgi?id=40114

Session serialization in context.xml was commented by default, so 
serialization was turned on.  User A in the middle of a session when we 
restart Tomcat.  Upon logging back into the system, she picked up User 
B's session information (name, id, etc.)

Tomcat 5.5, JVM 1.5_7



Is this the same issue as described above?  What is the best way fix my 
problem?

I am using Tomcat 5.5.20 on Suse Linux 10.1 - JVM 1.5.0_09

Thanks,

-- 
John Wallace  |  Java / Web Developer
john@firesign.net http://firesign.net


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: session serialization issue?

[Mark Thomas <ma...@apache.org>]

John Wallace wrote:
> Is this the same issue as described above?  What is the best way fix my
> problem?

Maybe. Could be also be a problem with your application. If you can
reproduce this error reliably, please provide the steps to reproduce
it and any associated test JSP/servlet in the bug report. With a
reproducible test case I'll take a look and fix any underlying bug.

Mark


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org