SSL Session expires every request 2007-12-01 - By B?rbara Vieira
Back
Hi Chuck!
That's what I'm doing :
- I had implemented a valve that extends FormAuthenticator to provide 2
authentications methods at the same time : FORM and CLIENT_CERT.
- Until this week everything worked fine : I can authenticate the users with
2 authentications methods, and the session is maintained. Yesterday, when I
try to accede to HttpSession in Servlets, what's happen was: when the user
is authenticated using FORM method, HttpSession isn't null in servlets,
neither internal session(Session) in valve. However, when the user is
authenticated using a CERT, all the sessions are null : HttpSession in
Servlets and Session(Internal Session) in my Valve.
- Well, I thought that the problem was in my valve, so I disable my valve,
and in my web application I configured only one authentication method -
CLIENT_CERT. However, the HttpSession was still null.
- The strange thing is that everything works fine - I can authenticate the
user using CLIENT_CERT method, and retrieve to him the requested URL and I
have access to Principal in the HttpServletRequest object. But, when there
is no session.
- I had checked if the browsers accept cookies too, and it accepts.
Do you have any idea of what's happen?!
Thanks,
Regards from Braga, Portugal
B?rbara Vieira
-- --Original Message-- --
From: Caldarale, Charles R [mailto:Chuck.Caldarale@(protected)]
Sent: s?bado, 1 de Dezembro de 2007 00:30
To: Tomcat Users List
Subject: RE: SSL Session expires every request
> From: B?rbara Vieira [mailto:barbarasv@(protected)]
> Subject: RE: SSL Session expires every request
>
> HttpSession wasn't null in the beginning, when I started
> my implementation. However, now is null in every request.
How are you retrieving the session? A code sample would be good.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
