You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2008/06/18 23:09:09 UTC

DO NOT REPLY [Bug 45229] New: Session already invalidated error running under Security Manager

https://issues.apache.org/bugzilla/show_bug.cgi?id=45229

           Summary: Session already invalidated error running under Security
                    Manager
           Product: Tomcat 5
           Version: 5.5.26
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: gsexton@mhsoftware.com


When running Tomcat 5.5.26 under the Java Security manager using JDK 1.5.0_15
running under SuSE Open Linux, kernel version 2.6.18.8-0.9-default, an
IllegalStateException is thrown. Since I'm seeing this error by examining logs,
I can't really give more information about how it was triggered.

Stack Trace:

 java.lang.IllegalStateException: setAttribute: Session already invalidated
        at
org.apache.catalina.session.StandardSession.setAttribute(StandardSession.java:1261)
        at
org.apache.catalina.session.StandardSession.setAttribute(StandardSession.java:1243)
        at
org.apache.catalina.session.StandardSessionFacade.setAttribute(StandardSessionFacade.java:130)
        at
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:272)
        at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:262)
        at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:52)
        at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:171)
        at java.security.AccessController.doPrivileged(Native Method)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:167)
        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
        at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:548)
        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
        at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
        at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:874)
        at
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
        at
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
        at
org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
        at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
        at java.lang.Thread.run(Thread.java:595)


The offending code appears to be:

org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:272)

Additional debug information from the error:
*********************************************
Request Information
*********************************************
Request Protocol: HTTP/1.1
Request Scheme: http
Request URI: /ErrorServlet.html
Remote Host: 167.7.140.254
Request Encoding: null
Request Method: GET

*********************************************
Parameters
*********************************************

*********************************************
Request Headers
*********************************************
        host=[midlandstech.mhsoftware.com]
        user-agent=[Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14]
       
accept=[text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5]
        accept-language=[en-us,en;q=0.5]
        accept-encoding=[gzip,deflate]
        accept-charset=[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
        keep-alive=[300]
        connection=[keep-alive]
        x-moz=[livebookmarks]
        cookie=[JSESSIONID=43D053C25ED0F0114ECCE1E88340EE17]
        cache-control=[max-age=0]

*********************************************
Cookies
*********************************************
        JSESSIONID=[43D053C25ED0F0114ECCE1E88340EE17]



The command line used to start tomcat is:

jsvc.exec -jvmserver -cp /usr/local/apache-tomcat-5.5.26/bin/bootstrap.jar:
/usr/local/apache-tomcat-5.5.26/bin/commons-logging-api.jar 
-home /etc/alternatives/java_sdk 
-user tomcat 
-outfile /srv/tomcat/logs/catalina.out 
-errfile /srv/tomcat/logs/catalina.err
-pidfile /var/run/jsvc.pid
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
-Djava.util.logging.config.file=/srv/tomcat/conf/logging.properties
-Djava.endorsed.dirs=/usr/local/apache-tomcat-5.5.26/common/endorsed
-Dcatalina.base=/srv/tomcat
-Dcatalina.home=/usr/local/apache-tomcat-5.5.26
-Djava.io.tmpdir=/srv/tomcat/temp
-Djava.awt.headless=true
-Dcatalina.port=80
-Dmail.smtp.localhost=host.mhsoftware.com
-Xms512m
-Xmx1024m
-XX:PermSize=128m
-XX:MaxPermSize=256m
-Djava.security.manager
-Djava.security.policy==/srv/tomcat/conf/catalina.policy
org.apache.catalina.startup.Bootstrap start


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


DO NOT REPLY [Bug 45229] Session already invalidated error running under Security Manager

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=45229


Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME




--- Comment #2 from Mark Thomas <ma...@apache.org>  2008-07-30 14:03:03 PST ---
No response in over a month. Assume using
-Dorg.apache.catalina.session.StandardSession.ACTIVITY_CHECK=true fixes this
issue. Please re-open if this is not the case.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


DO NOT REPLY [Bug 45229] Session already invalidated error running under Security Manager

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=45229





--- Comment #1 from Mark Thomas <ma...@apache.org>  2008-06-19 10:36:10 PST ---
Looks like the session is invalidated whilst a request is still being
processed. Try running with
-Dorg.apache.catalina.session.StandardSession.ACTIVITY_CHECK=true

This will keep the session valid whilst a thread is accessing it.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org