https://issues.apache.org/bugzilla/show_bug.cgi?id=47510
Summary: sessionId is not generated when switch between
clusters
Product: Tomcat 6
Version: 6.0.18
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: normal
Priority: P2
Component: Catalina
AssignedTo: dev@tomcat.apache.org
ReportedBy: vuj...@yahoo.com
Currently, tomcat only generates a new sessionid if it's not NULL and tries to
reuse the existing one. However, in the case of tomcat configured with load
balancer using jvmRoute and user switch between clusters on the same browser
session, tomcat see jsession cookie(with old jvmroute value from another
cluster) and reuse it and it's not correct. The fix is to check jvmRoute value
and it's note the same, generate new sessionId.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
