[Tomcat, HTTPD, Servlets & JSP] - Duplicate sessionIds in cluster
by anre42
Hi,
We're using Jboss-4.0.3SP1 in a clustered environment where we run 3 full jboss nodes on each machine. We don't use http session replication but we have a load balancer as a front to witch between different nodes (we "kick out" users and redirect them to another node if a node fails).
Resently we discovered a very serious problem during testing, we where taking up and down nodes and while users where logged in, making them failover to another node and since no session replication is done they should have to login at the new node. However, on a couple occasions the kicked-out user went straigt into the application on the new node without logging in, and the really alarming part is that he came in as a different user!!? Like the stole someone elses session?
I have been thinking very hard about what could have happend and the only, at least semi-, reasonable explanaition I can think of is that the, session-Id generators seeds from the same random source at the same maching. We're runnning Linux so in our case, if I interpret the tomcat code correclty, it picks random data from /dev/urandom to generate the session id. And as I understand if there are more than one node on each machine as in out case they will generate the same series of session-ids.
Has anyone experienced the sam problems? Is this a likely explanation? Does anyone have a good idea on how we can solve this problem? We can abolutely not go live with this application until we are 100% certain that users can't "steal" other users sessions.
Appreciate all feedback
Cheers!
/Andreas
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4006677#4006677
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4006677
19 years, 2 months
[Installation, Configuration & Deployment] - JBOSS & JBPM : Release Memory
by txakin
Hi people, how are you?
I´m new in this Forum, and i have recently started to work with the Jboss.
I´m going to tell you my problem.
I have one webservice application running in the JBoss and connecting with the JPBM application to use the flows..... untill here all the things are succesfull. I can run my program without any problem...but when several users are invoking the Jboss creating new flows or interacting with the diferent nodes (of the flows).....the Jboss (Java.exe) memory grows and grows untill the application stops to run.
The problem is that the Jboss after that, never release the memory...then day by day the memory used is increasing.
I know in the diferent XML files, are variables about the TimeOut, KillerAliveTime...... but really i don´t know which variables have to be changed to release the memory.
I hope, someone can help me as soon as possible.
Thanks in advance and best regards.
Txakin.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4006653#4006653
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4006653
19 years, 2 months
[Beginners Corner] - connecting to JBOSS and TOMCAT will die
by jailau_24
Pls.. help..
Everytime I connect to jboss, tomcat has been dead..
And It returns error:
/var/log/momasrv.log (scanned at Wed Jan 24 16:14:59 PHT 2007) 2007-01-24 16:14:43,300 [MO Service HTTP Client] ERROR com.mwise.HTTP.Client - IOException trying to finish connecting to <202.163.229.51>: java.net.ConnectException: Connection refused 2007-01-24 16:14:43,506 [MO Service HTTP Client] ERROR com.mwise.HTTP.Client - IOException trying to finish connecting to <202.163.229.51>: java.net.ConnectException: Connection refused 2007-01-24 16:14:43,712 [MO Service HTTP Client] ERROR com.mwise.HTTP.Client - IOException trying to finish connecting to <202.163.229.51>: java.net.ConnectException: Connection refused 2007-01-24 16:14:43,918 [MO Service HTTP Client] ERROR com.mwise.HTTP.Client - IOException trying to finish connecting to <202.163.229.51>: java.net.ConnectException: Connection refused 2007-01-24 16:14:43,946 [SmsEngine #50] ERROR mwise.smsengine.Distributor - Error parsing Wddx
Pls. tell me what's the meaning of the error. thanx..
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4006626#4006626
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4006626
19 years, 2 months
[JBoss Seam] - Re: How to automatically end a conversation if fail to click
by gus888
Hi Gavin,
I apologize for my poor description. Now, I got a little idea on the conversation concept. I tried Seam-issues project. What I did is:
->home page -> click "Create" project (@Begin createInstance) -> go to "edit project" page -> click home link and go to home page -> click "Create" project (@Begin createInstance) -> go to "edit project" page. (in this process I did not input project name to create new project). Then, when I went back to home again, two conversations was listed. That is correct.
However, in my project, when I did the following process -> study home -> click "Create" study (@Begin createInstance) -> go to "edit study" page -> click study home link and go to study home again -> click "Create" study (@Begin createInstance), then I got the following exception:
18:01:00,494 ERROR [Exceptions] redirecting to debug page
| javax.ejb.EJBTransactionRolledbackException: java.lang.IllegalStateException: begin method invoked from a long running conversation, try using @Begin(join=true) The detailed exceptions were listed in the first posting above. I think I missed some setting, then system cannot create a new conversation when click "Create" on second time. Could you please give me some guidance? Thank you very much.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4006615#4006615
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4006615
19 years, 2 months