One user seeing another user's data

[Anbu <fl...@yahoo.com>]

Hello Bill and All,
 
Could any one of you throw some light on a problem that I am facing on Apache 1.3.28/Mod-jk 1.2.0/Tomcat 4.0.6 setup?
 
The problem is that an user could see someother user's data (some kind of session mix up). When I searched the tomcat-dev list I found that Bill had replied that the problem could be related to error handling and it is not a synchorinazation problem.
 
Bill, as you have already seen and analyized this issue, could you please help me on this issue ?

 
Thank you all in advance.
 
Regards,
Kuloth

Bill Barker <wb...@wilshire.com> wrote:

"Andi Reinbrech" wrote in message
news:79A1791707CB084A8F5B8C5C2F8B06DE03F687CC@rnbm-msg02.mck.co.za...
> I FINALLY figured this one out.
>
> Tomcat 5.0.18 as a service ignores -Djava.class.path. Rather, it takes
the
> path from the -Imagepath parameter as the classpath (I did a debug
> logger.info("Classpath: " + System.getProperty("java.class.path") and lo
and
> behold it gave me the Imagepath as the actual classpath.
>
> I added %CATALINA_HOME%\bin to the Imageclasspath and all is working fine.
>
> This sounds like a bug? Or at least an "undocumented feature".
>

I believe that it is a "documented feature". See
http://jakarta.apache.org/commons/daemon/procrun.html.


> Cheers
> Andi
>
> -----Original Message-----
> From: Andi Reinbrech [mailto:AReinbre@multichoice.co.za]
> Sent: 16 February 2004 14:58 PM
> To: Tomcat-User (E-mail)
> Subject: Please help with CLASSPATH problem
>
>
> Hi, this problem behaves differently under 4.1 and 5.0.18, but I can't use
> *either*.
>
> When I run Tomcat 5.0.18 from the command prompt, the app works 100%. It
is
> supposed to pick up a file called "emapi.cfg" and "licenses.txt" from the
> CLASSPATH. "emapi.cfg" works int .\axis\WEB-INF\classes, but
"licenses.txt"
> doesn't. However, leaving "licenses.txt" in the bin\ folder and starting
> Tomcat *from* that folder it works fine. Running Tomcat 5 as a service
> doesn't pick up "licenses.txt" although the working dir is set to be bin\.
>
> In the bin\ folder I also need a load of *.dtd files to validate XML
> responses. They only work when they're in the bin folder.
>
> Now to Tomcat 4.1: Everything works as a service, including picking up
the
> "licenses.txt", but now it refuses to resolve the *.dtds. I get a SAX
> Parser error that the URI can't be relative. This is a bogus error
though,
> as I can remove all the *dtds and the error stays the same.
>
> Can someone PLEASE help me either fix EITHER one of these problems, or
> please refer me to an alternative server to use.
> org.apache.axis.transport.http.SimpleAxisServer works like a charm, but
not
> as a service, and shouldn't be used as a production server.
>
> Thanks in advance,
> Andi
>
>
****************************************************************************
> **********************************************
> Everything in this e-mail and attachments relating to the official
business
> of MultiChoice Africa is proprietary to
> the company. Any view or opinion expressed in this message may be the view
> of the individual and should not automatically
> be ascribed to the company. If you are not the intended recipient, you
may
> not peruse, use, disseminate, distribute or
> copy this message. If you have received this message in error, please
notify
> the sender immediately by email, facsimile
> or telephone and destroy the original message.
>
****************************************************************************
> **********************************************
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
****************************************************************************
**********************************************
> Everything in this e-mail and attachments relating to the official
business of MultiChoice Africa is proprietary to
> the company. Any view or opinion expressed in this message may be the view
of the individual and should not automatically
> be ascribed to the company. If you are not the intended recipient, you
may not peruse, use, disseminate, distribute or
> copy this message. If you have received this message in error, please
notify the sender immediately by email, facsimile
> or telephone and destroy the original message.
>
****************************************************************************
**********************************************




---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


---------------------------------
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online

Re: One user seeing another user's data

[Antonio Fiol Bonnín <fi...@terra.es>]

Hi Kuloth,

Seatch Tomcat-user for "concurrency problems" or "threading issues". 
There has been recent discussion on the topic.

Concurrency problems are the main source of session mix-up. Also look 
for "instance variables" (hint: avoid them in Servlets)

Antonio Fiol



Anbu wrote:

>Hello Bill and All,
> 
>Could any one of you throw some light on a problem that I am facing on Apache 1.3.28/Mod-jk 1.2.0/Tomcat 4.0.6 setup?
> 
>The problem is that an user could see someother user's data (some kind of session mix up). When I searched the tomcat-dev list I found that Bill had replied that the problem could be related to error handling and it is not a synchorinazation problem.
> 
>Bill, as you have already seen and analyized this issue, could you please help me on this issue ?
>
> 
>Thank you all in advance.
> 
>Regards,
>Kuloth
>  
>