Mantis Bugtracker
  

Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0003715 [Resin] minor always 10-16-09 09:39 02-26-10 14:45
Reporter emil View Status public  
Assigned To alex
Priority normal Resolution fixed  
Status closed   Product Version 3.1.9
Summary 0003715: Session id reuse
Description (rep by SHINOMIYA Nobuaki)

When I repeated that the session is create, session ID is recycled.

Environment:
  *The Cluster Sessions(memory-to-memory) is enabled .

    <resin:if test="${resin.professional}">
      <persistent-store type="cluster">
        <init path="work/httpd/session"/>
      </persistent-store>
    </resin:if>

    ........

    <session-config>
      <use-persistent-store>true</use-persistent-store>
      <always-save-session>true</always-save-session>
      <save-mode>after-request</save-mode>
      <reuse-session-id>false</reuse-session-id>
    </session-config>

  *Session ID exists in Cookie of a browser.

  *Resin 3.1.9

  *WinXP

In the access since the second times, This is always occur.

We create the servlet(attchement) that repeats the creation of the session for
+check.

Remark:
  * We don't check when The Cluster Sessions(DB)
  * It dosen't occur when <always-save-session> is false
  * It dosen't occur when the Session ID dosen't exist in Cookie of a browser.

attchement's files
  * The servlet to check : SessionServlet.java
  * The result of check : result.html
Additional Information Verified in Resin 3.1.9
Fixed in Resin 4.0.1

Reporter would like fix in 3.1 branch
Attached Files  SessionServlet.java [^] (2,382 bytes) 10-16-09 09:39

- Relationships

- Notes
(0004443)
ferg
02-18-10 13:53

server/01ni
 
(0004448)
alex
02-26-10 14:27

server/01in.qa vs server/01ni.qa
 

- Issue History
Date Modified Username Field Change
10-16-09 09:39 emil New Issue
10-16-09 09:39 emil File Added: SessionServlet.java
02-18-10 13:53 ferg Note Added: 0004443
02-18-10 13:53 ferg Assigned To  => ferg
02-18-10 13:53 ferg Status new => closed
02-18-10 13:53 ferg Resolution open => fixed
02-18-10 13:53 ferg Fixed in Version  => 3.1.10
02-26-10 14:27 alex Assigned To ferg => alex
02-26-10 14:27 alex Status closed => feedback
02-26-10 14:27 alex Resolution fixed => reopened
02-26-10 14:27 alex Note Added: 0004448
02-26-10 14:45 alex Status feedback => closed
02-26-10 14:45 alex Resolution reopened => fixed
02-26-10 14:45 alex Fixed in Version 3.1.10 => 3.1.11


Mantis 1.0.0rc3[^]
Copyright © 2000 - 2005 Mantis Group
33 total queries executed.
28 unique queries executed.
Powered by Mantis Bugtracker