[jboss-jira] [JBoss JIRA] Created: (JBCLUSTER-183) Session ID lost over "secure" connector

Thu Mar 22 13:17:39 EDT 2007

Session ID lost over "secure" connector
---------------------------------------

                 Key: JBCLUSTER-183
                 URL: http://jira.jboss.com/jira/browse/JBCLUSTER-183
             Project: JBoss Clustering
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Web Tier
    Affects Versions: Q4Y6
            Reporter: Sergey Zhukov
         Assigned To: Brian Stansberry

I'm using AJP or HTTP connector with secure="true" attribute in JBoss cluster environment.
On every browser's request, my JSP code got new session id (session.getId()).
Also it affects load balancing with sticky sessions, because every new request goes to another node.

Try it, by simple index.jsp:
<%= session.getId() %>

Deploy it as farm application, open in browser and click refresh several times.
You'll see new id every time.

I've tried this with JBoss 4.0.5 with configuration: 'all'.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira