|
Mantis - Resin
|
|||||
| Viewing Issue Advanced Details | |||||
|
|
|||||
| ID: | Category: | Severity: | Reproducibility: | Date Submitted: | Last Update: |
| 3715 | minor | always | 10-16-09 09:39 | 02-26-10 14:45 | |
|
|
|||||
| Reporter: | emil | Platform: | |||
| Assigned To: | alex | OS: | |||
| Priority: | normal | OS Version: | |||
| Status: | closed | Product Version: | 3.1.9 | ||
| Product Build: | Resolution: | fixed | |||
| Projection: | none | ||||
| ETA: | none | Fixed in Version: | 3.1.11 | ||
|
|
|||||
| Summary: | 0003715: Session id reuse | ||||
| Description: |
(rep by SHINOMIYA Nobuaki) When I repeated that the session is create, session ID is recycled. Environment: *The Cluster Sessions(memory-to-memory) is enabled . <resin:if test="${resin.professional}"> <persistent-store type="cluster"> <init path="work/httpd/session"/> </persistent-store> </resin:if> ........ <session-config> <use-persistent-store>true</use-persistent-store> <always-save-session>true</always-save-session> <save-mode>after-request</save-mode> <reuse-session-id>false</reuse-session-id> </session-config> *Session ID exists in Cookie of a browser. *Resin 3.1.9 *WinXP In the access since the second times, This is always occur. We create the servlet(attchement) that repeats the creation of the session for +check. Remark: * We don't check when The Cluster Sessions(DB) * It dosen't occur when <always-save-session> is false * It dosen't occur when the Session ID dosen't exist in Cookie of a browser. attchement's files * The servlet to check : SessionServlet.java * The result of check : result.html |
||||
| Steps To Reproduce: | |||||
| Additional Information: |
Verified in Resin 3.1.9 Fixed in Resin 4.0.1 Reporter would like fix in 3.1 branch |
||||
| Relationships | |||||
| Attached Files: |
|
||||
| Notes | |||||
|
|
|||||
|
|
||||
|
|
|||||
|
|
||||