fbordina / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

active sessions label #403

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Login to PWM with multiple users from different client ip's
1. Go to pwm/private/admin/activesessions.jsp
2.

What is the expected output? What do you see instead?
I expect to see all the current active sessions with username, dn and ip 
addresses.
Instead I see a random single characters as labels and username, dn and ip 
addresses are empty. See attached screen shot.

What version of PWM are you using?
Latest build

Original issue reported on code.google.com by sebastia...@gmail.com on 6 Jun 2013 at 10:40

Attachments:

GoogleCodeExporter commented 9 years ago
Most likely you are seeing  passivated tomcat sessions that haven't been seen a 
request to PWM since being unpassivated.

You can test this by disabling session persistence: 
http://datum-bits.blogspot.com/2012/05/how-to-disable-session-persistence.html  
Then restart tomcat and see if the "ghost" sessions still appear.

Original comment by jrivard on 18 Jun 2013 at 7:00

GoogleCodeExporter commented 9 years ago
Thanks, I didn't know that passivated tomcat sessions are being displayed as 
well. I'll do some further testing and post my results.

Original comment by sebastia...@gmail.com on 25 Jun 2013 at 10:11

GoogleCodeExporter commented 9 years ago
Seems to be working correctly now after disabling session persistence.

Original comment by sebastia...@gmail.com on 27 Jun 2013 at 12:23

GoogleCodeExporter commented 9 years ago
There was also an issue caused by the session fixation prevention code in 
ServletHelper.recycleSession(), this has been resolved revision 575.

Original comment by jrivard on 30 Jun 2013 at 7:00

GoogleCodeExporter commented 9 years ago
Thanks for having a second look at it :) I'll report back if appropriate.

Original comment by sebastia...@gmail.com on 2 Jul 2013 at 6:52