Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Mark Thomas
On 01/02/2024 17:48, Ryanesch@yahoo wrote: On Feb 1, 2024, at 10:34 AM, Mark Thomas wrote: On 31/01/2024 00:15, Ryan Esch wrote: From what I understand, the container knows if a user is authenticated by using the session id passed to it and then looking up the user principal. If this

Re: Session Cookie Logging

2024-02-01 Thread Christopher Schultz
Dan, On 2/1/24 11:54, Dan McLaughlin wrote: I was able to identify the problem - there was a session configuration with cookie configuration in the catalina-base/web.xml file. catalina-base/conf/web.xml? I did mention on 26 Jan that this wasn't a good idea and could be causing this kind of p

Re: Cannot start java issue after Tomcat9 and JDK 11 updates

2024-02-01 Thread Christopher Schultz
Lori, On 2/1/24 10:35, Lori Kilen wrote: Hello, I have a Windows server (v2019) and I've updated java to Corretto jdk11.0.22_7 and Tomcat to 9.0.85. I added Tomcat as a Windows Service. I can start Tomcat from CMD using startup.bat and I can open localhost:8080 in a browser to display Tom

Re: Session Cookie Logging

2024-02-01 Thread Dan McLaughlin
Hey Mark, I was able to identify the problem - there was a session configuration with cookie configuration in the catalina-base/web.xml file. I just wanted to suggest that it would be great if logging could be enabled to show not only what the parameters were set to, but also where the values cam

Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Ryanesch@yahoo
> > On Feb 1, 2024, at 10:34 AM, Mark Thomas wrote: > > On 31/01/2024 00:15, Ryan Esch wrote: >> From what I understand, the container knows if a user is authenticated by >> using the session id passed to it and then looking up the user principal. If >> this is non-null, the user is authent

Re: How does the user principal get set on the servlet container session?

2024-02-01 Thread Mark Thomas
On 31/01/2024 00:15, Ryan Esch wrote: From what I understand, the container knows if a user is authenticated by using the session id passed to it and then looking up the user principal. If this is non-null, the user is authenticated. I am using web.xml with security constraints and UsersRoleL

Re: Session Cookie Logging

2024-02-01 Thread Mark Thomas
On 27/01/2024 14:38, Dan McLaughlin wrote: Hey Mark, If you see a bug report, then that will mean I was able to reproduce it. I see different behaviors in our local docker environment. Still, it's nowhere as complex as our production environment--where everything is clustered and behind load

Cannot start java issue after Tomcat9 and JDK 11 updates

2024-02-01 Thread Lori Kilen
Hello, I have a Windows server (v2019) and I've updated java to Corretto jdk11.0.22_7 and Tomcat to 9.0.85. I added Tomcat as a Windows Service. I can start Tomcat from CMD using startup.bat and I can open localhost:8080 in a browser to display Tomcat page. But I cannot start Tomcat from ja