Loosing my session

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Hi,

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

I tried a nightly build last week, and, yes, it failed in my separate deployment. I'm currently on the stable 3.6.0

Anyway, here's what I did (shame on me): I got source code for the filter and I modified it to include my security check in it... kind of a pain but it works. I just fear for later updates of orbeon...

Erik, if you have few minutes to explain us briefly how the filter works and how the session is managed, I will be really thankful :)

Regards

Alban


_______________________________________
De : Markku Laine [mailto:[hidden email]]
Envoyé : jeudi 5 février 2009 08:00
À : [hidden email]
Objet : [ops-users] Re: Loosing my session

Hi,

In separate deployment, when submitting a form data are sent to /myApp/orbeon/xforms-server
But in my struts action after the orbeon filter is executed, my session is empty... I've lost user id and all
Is there something I missed about session management in this environment?

Which version are you using?

If I remember correctly, the stable version 3.6.0 of Orbeon Forms had issues with sessions in separate deployment, which were partly fixed later in the nightly build version 3.6.0.200712181809 of Orbeon Forms.

Unfortunately, as far as I know, separate deployment does not work in current nightly build versions.

Kind regards


-Markku


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Re-hi

My walkaround did not work better...
I finally understood that orbeon makes a request to http://localhost/myApp via Jakarta commons http client. So the filter is called twice and the second call "face-plants" on my (incredibly strong) security check ;)

The problem is that this "delegated" request holds a modified JSESSIONID cookie
If my initial session ID was, let's say "something" the forwarded JSESSIONID cookie value in the header is "something.node1".
I'd guess it is the bug that was corrected in the nightly build you're talking about.

So, is there any way to get this build, or the source code of the 3.6 stable release (where I could violently delete this "node1")?

In any case, many thanks for your help :)

-----Message d'origine-----
De : MAILLERE Alban [mailto:[hidden email]]
Envoyé : jeudi 5 février 2009 10:05
À : [hidden email]
Objet : [ops-users] RE: Re: Loosing my session

I tried a nightly build last week, and, yes, it failed in my separate deployment. I'm currently on the stable 3.6.0

Anyway, here's what I did (shame on me): I got source code for the filter and I modified it to include my security check in it... kind of a pain but it works. I just fear for later updates of orbeon...

Erik, if you have few minutes to explain us briefly how the filter works and how the session is managed, I will be really thankful :)

Regards

Alban


_______________________________________
De : Markku Laine [mailto:[hidden email]]
Envoyé : jeudi 5 février 2009 08:00
À : [hidden email]
Objet : [ops-users] Re: Loosing my session

Hi,

In separate deployment, when submitting a form data are sent to /myApp/orbeon/xforms-server
But in my struts action after the orbeon filter is executed, my session is empty... I've lost user id and all
Is there something I missed about session management in this environment?

Which version are you using?

If I remember correctly, the stable version 3.6.0 of Orbeon Forms had issues with sessions in separate deployment, which were partly fixed later in the nightly build version 3.6.0.200712181809 of Orbeon Forms.

Unfortunately, as far as I know, separate deployment does not work in current nightly build versions.

Kind regards


-Markku


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Alban,

On Feb 5, 2009, at 5:43 AM, MAILLERE Alban wrote:

> The problem is that this "delegated" request holds a modified  
> JSESSIONID cookie
> If my initial session ID was, let's say "something" the forwarded  
> JSESSIONID cookie value in the header is "something.node1".
> I'd guess it is the bug that was corrected in the nightly build  
> you're talking about.
>
> So, is there any way to get this build, or the source code of the  
> 3.6 stable release (where I could violently delete this "node1")?

You can always get the latest code from CVS (http://forge.objectweb.org/scm/?group_id=168 
) or download a nightly build from http://forge.objectweb.org/nightlybuilds/ops/ops/ 
.

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
Orbeon's Blog: http://www.orbeon.com/blog/
Personal Blog: http://avernet.blogspot.com/
Twitter - http://twitter.com/avernet



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws