You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@roller.apache.org by "Dibyendu Chandra (JIRA)" <no...@atlassian.com> on 2007/07/16 15:47:30 UTC
[Roller-JIRA] Created: (ROL-1481) User Session management problem
User Session management problem
-------------------------------
Key: ROL-1481
URL: http://opensource.atlassian.com/projects/roller/browse/ROL-1481
Project: Roller
Issue Type: Bug
Affects Versions: 3.1
Environment: Windows XP, MySql
Reporter: Dibyendu Chandra
Assignee: Roller Unassigned
Priority: Critical
I am trying to customized Roller 3.1. While testing with multiple users (100+) with concurrent access, sometimes I am facing a problem with user session.
Sometimes if I open a new browser and type url of frontpage, Frontpage is displaying Welcome "different user name" and a "logout" link. As if other user is logged in into my system. It seems this thing happens when the other user is logged in at the same time into a different system.
Is it a known bug?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[Roller-JIRA] Commented: (ROL-1481) User Session management problem
Posted by "Dibyendu Chandra (JIRA)" <no...@atlassian.com>.
[ http://opensource.atlassian.com/projects/roller/browse/ROL-1481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_14053 ]
Dibyendu Chandra commented on ROL-1481:
---------------------------------------
The problem might be due to caching... is there any guidance for configuring Cache properties based on number of users?
Default properties are given for 100 users system. We have more than 500+ users. Does these values of roller.properties still hold good for 500+ users?
# set "true" to NOT cache the custom pages for users who are logged in
cache.excludeOwnerEditPages=false
# This sets how many minutes into the future we look to prepare
# entries posted into the future which need to be invalidated from the cache.
# It is very unlikely that this should ever need to be changed
cache.futureInvalidations.peerTime=3
# Site-wide cache (all content for site-wide frontpage weblog)
cache.sitewide.enabled=true
cache.sitewide.size=50
cache.sitewide.timeout=1800
# Weblog page cache (all the weblog content)
cache.weblogpage.enabled=true
cache.weblogpage.size=400
cache.weblogpage.timeout=3600
# Feed cache (xml feeds like rss, atom, etc)
cache.weblogfeed.enabled=true
cache.weblogfeed.size=200
cache.weblogfeed.timeout=3600
# Planet cache (planet page and rss feed)
cache.planet.enabled=true
cache.planet.size=10
cache.planet.timeout=1800
> User Session management problem
> -------------------------------
>
> Key: ROL-1481
> URL: http://opensource.atlassian.com/projects/roller/browse/ROL-1481
> Project: Roller
> Issue Type: Bug
> Affects Versions: 3.1
> Environment: Windows XP, MySql
> Reporter: Dibyendu Chandra
> Assignee: Roller Unassigned
> Priority: Critical
> Attachments: UtilitiesModel.java
>
>
> I am trying to customized Roller 3.1. While testing with multiple users (100+) with concurrent access, sometimes I am facing a problem with user session.
> Sometimes if I open a new browser and type url of frontpage, Frontpage is displaying Welcome "different user name" and a "logout" link. As if other user is logged in into my system. It seems this thing happens when the other user is logged in at the same time into a different system.
> Is it a known bug?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[Roller-JIRA] Commented: (ROL-1481) User Session management problem
Posted by "Anil Gangolli (JIRA)" <no...@atlassian.com>.
[ http://opensource.atlassian.com/projects/roller/browse/ROL-1481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_13866 ]
Anil Gangolli commented on ROL-1481:
------------------------------------
Check that you have set up the site-specific keys in the security.xml. See Section 8.2 of the installation guide for details.
> User Session management problem
> -------------------------------
>
> Key: ROL-1481
> URL: http://opensource.atlassian.com/projects/roller/browse/ROL-1481
> Project: Roller
> Issue Type: Bug
> Affects Versions: 3.1
> Environment: Windows XP, MySql
> Reporter: Dibyendu Chandra
> Assignee: Roller Unassigned
> Priority: Critical
>
> I am trying to customized Roller 3.1. While testing with multiple users (100+) with concurrent access, sometimes I am facing a problem with user session.
> Sometimes if I open a new browser and type url of frontpage, Frontpage is displaying Welcome "different user name" and a "logout" link. As if other user is logged in into my system. It seems this thing happens when the other user is logged in at the same time into a different system.
> Is it a known bug?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[Roller-JIRA] Commented: (ROL-1481) User Session management problem
Posted by "Dibyendu Chandra (JIRA)" <no...@atlassian.com>.
[ http://opensource.atlassian.com/projects/roller/browse/ROL-1481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_13865 ]
Dibyendu Chandra commented on ROL-1481:
---------------------------------------
Servlet Container: Tomcat
I have launched it as an internal corporate blog for testing. I have got this feedback from few users. Though I could not reproduce it yet.
I have added ldapAuthProvide for LDAP authentication. I have not changed anything in Session Management.
I am not sure but it may be due to some old bugs while someone clicks on "Remember me" checkbox and submit for login. http://opensource.atlassian.com/projects/roller/browse/ROL-377
Temporarily I have removed "Remember me" option and testing.
> User Session management problem
> -------------------------------
>
> Key: ROL-1481
> URL: http://opensource.atlassian.com/projects/roller/browse/ROL-1481
> Project: Roller
> Issue Type: Bug
> Affects Versions: 3.1
> Environment: Windows XP, MySql
> Reporter: Dibyendu Chandra
> Assignee: Roller Unassigned
> Priority: Critical
>
> I am trying to customized Roller 3.1. While testing with multiple users (100+) with concurrent access, sometimes I am facing a problem with user session.
> Sometimes if I open a new browser and type url of frontpage, Frontpage is displaying Welcome "different user name" and a "logout" link. As if other user is logged in into my system. It seems this thing happens when the other user is logged in at the same time into a different system.
> Is it a known bug?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[Roller-JIRA] Updated: (ROL-1481) User Session management problem
Posted by "Dibyendu Chandra (JIRA)" <no...@atlassian.com>.
[ http://opensource.atlassian.com/projects/roller/browse/ROL-1481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dibyendu Chandra updated ROL-1481:
----------------------------------
Attachment: UtilitiesModel.java
I have set keys accordingly and it seems the similar problem is not appearing. But there are other session related problem I am facing which is very rare and difficult to reproduce.
Here is one such situation:
As per my requirement I needed "Comments" option available only for registered users. User has to login to make a comment. I have disabled username and email fields for user's entry and those are being populated taking UserData from session.
I have done some changes in org.apache.roller.ui.rendering.model.UtilitiesModel class to incorporate those methods to get user's fullname and email address:
public String getUserFullName() {
String fullName = null;
try {
RollerSession rses = RollerSession.getRollerSession(request);
if (rses != null && rses.getAuthenticatedUser() != null) {
fullName = rses.getAuthenticatedUser().getFullName();
}
} catch (Exception e) {
log.warn("ERROR: checking user authorization", e);
}
return fullName;
}
And similarly done for getUserEmailAddress().
Updated name and email field values in WEB-INF\velocity\weblog.vm file with $utils.getUserFullName() and $utils.getUserEmailAddress() respectively.
Usually it works fine... but sometime in production system (3 odd cases in 115 transactions for comment entry) it is displaying different username (may be the last logged-in user or who has logged concurrently).
It seems still there is some session problem exists. Is there any other ways to implement this?
> User Session management problem
> -------------------------------
>
> Key: ROL-1481
> URL: http://opensource.atlassian.com/projects/roller/browse/ROL-1481
> Project: Roller
> Issue Type: Bug
> Affects Versions: 3.1
> Environment: Windows XP, MySql
> Reporter: Dibyendu Chandra
> Assignee: Roller Unassigned
> Priority: Critical
> Attachments: UtilitiesModel.java
>
>
> I am trying to customized Roller 3.1. While testing with multiple users (100+) with concurrent access, sometimes I am facing a problem with user session.
> Sometimes if I open a new browser and type url of frontpage, Frontpage is displaying Welcome "different user name" and a "logout" link. As if other user is logged in into my system. It seems this thing happens when the other user is logged in at the same time into a different system.
> Is it a known bug?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[Roller-JIRA] Commented: (ROL-1481) User Session management problem
Posted by "Anil Gangolli (JIRA)" <no...@atlassian.com>.
[ http://opensource.atlassian.com/projects/roller/browse/ROL-1481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_13864 ]
Anil Gangolli commented on ROL-1481:
------------------------------------
Sounds new to me. Some additional information would be useful.
What servlet container / app server are you using?
How are you conducting your test?
Did you set up the site-specific keys in the security.xml as described in the installation guide?
Do any of your customizations change the authentication or session management?
> User Session management problem
> -------------------------------
>
> Key: ROL-1481
> URL: http://opensource.atlassian.com/projects/roller/browse/ROL-1481
> Project: Roller
> Issue Type: Bug
> Affects Versions: 3.1
> Environment: Windows XP, MySql
> Reporter: Dibyendu Chandra
> Assignee: Roller Unassigned
> Priority: Critical
>
> I am trying to customized Roller 3.1. While testing with multiple users (100+) with concurrent access, sometimes I am facing a problem with user session.
> Sometimes if I open a new browser and type url of frontpage, Frontpage is displaying Welcome "different user name" and a "logout" link. As if other user is logged in into my system. It seems this thing happens when the other user is logged in at the same time into a different system.
> Is it a known bug?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://opensource.atlassian.com/projects/roller/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira