[jboss-jira] [JBoss JIRA] Closed: (JBAS-4235) Session ID lost over "secure" connector

[Sergey Zhukov (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBAS-4235?page=all ]

Sergey Zhukov closed JBAS-4235.
-------------------------------

    Resolution: Won't Fix

> Session ID lost over "secure" connector
> ---------------------------------------
>
>                 Key: JBAS-4235
>                 URL: http://jira.jboss.com/jira/browse/JBAS-4235
>             Project: JBoss Application Server
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Clustering, Web (Tomcat) service
>    Affects Versions: JBossAS-4.0.5.GA, JBossAS-4.0.3 SP1
>            Reporter: Sergey Zhukov
>         Assigned To: Brian Stansberry
>
> I'm using AJP or HTTP connector with secure="true" attribute in JBoss cluster environment.
> On every browser's request, my JSP code got new session id (session.getId()).
> Also it affects load balancing with sticky sessions, because every new request goes to another node.
> Try it, by simple index.jsp:
> <%= session.getId() %>
> Deploy it as farm application, open in browser and click refresh several times.
> You'll see new id every time.
> I've tried this with JBoss 4.0.5 with configuration: 'all'.
> NOTE: without secure="true" everything works Ok.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira