Disabling multiple sessions

Hi all,
I am writing a simple web application. i have two very troubling requirements.
1- my users may be away for long times so i cannot timeout my session (time out is approx 30 mins).
2- if a specific user has logged in once then i should not allow the same user to log in from a different machine or browser window.
The problem is if the user that signed in first closes the browser window then the session will not time out because i want the session to be there for at least 30 minutes. and as that particular session id is still there i cannot allow the same user to sign back. anyone has any idea how to deal with this problem.
[i am using web sphere application server]

Many thanks,
here is a brief of what i did. I am maintaining a small hash table of my own. I am storing user name,machine IP pairs in the hash table. when a request comes in from a different IP than that of the previous one I deny login request. To sign in from some place else the user will have to properly sign out from the application or wait for the session to timeout.
Due to NATs and Proxys i couldnt get correct Ip address from HttpServletRequest so i used a javascript code to get IP of remote host locally and send it to server.
Still I could restrict access from another browser from same machine. One way of this could be to getRemotePort from HttpServletRequest but that way if the browser is closed than there is no way for user to sign back in unless the session times out.
[I have implemented a SessionListener that removes entries from my hash table whenever session times out or is invalidated]
Best Regards,
Faran

Similar Messages

  • Disable multiple portal sessions

    Hi,
    We have been looking to find ways to disable multiple logons to portal with same userid.
    it has been discussed in forms that this is not possible as portal has no way to identify the logged in users in a stateless http session.
    Please guide us if this is possible by any parameter in portal in case of https based protocol.
    Regards,
    Ankur Agarwal

    Hi,
    Still not possible with a parameter but may be done with a custom development. When a user tries to logon, the logon program checks the existing sessions and if finds a users session, then it prevents the new login.
    Think about the Collaboration. When it is activated and after you try to logon on a new computer with the same user, it warns you.
    You can use its functions for implementation to change the standart logon mechanism.

  • Disable Multiple Login Acces thru WEBGUI?????

    could any one suggest how disable multiple logins when users accessing thru WEBGUI?
    Regards
    PR

    Hi..Durairaj Athavan Raja.
    Multiple Login now is enables, This is working fine with auth object S_ADMI_FCD with value PADM.
    But Here the user getting a Option to select Check BOX either to cancel all existing sessiosn (or) retain them.
    Our requirement is User shoud get terminated from all other sessions and log in into the current sessions like.  The Check Box should be greyed out.
    If i don't give S_ADMI_FCD authroization user getting pop up message you are not authroized to kill the sessions.
    If you can give some tips i will be greatful
    Rgds
    PR

  • How to avoid multiple session for the same username

    I need suggestions on implementing single user login , like My system has a user with a username jdavid and my application should not allow two different sessions for the same username jdavid , can one session peep into all other session
    to see if the any has a usernaem jdavid, I am basically looking for some pattern if any available for restricting multiple session for the same username . like jaas or any other security api provides this ?

    Store a Map<User, HttpSession> in application scope and let your application intercept on that. On login, just check if the User is already there, then get the associated HttpSession, invalidate it and replace it by the current HttpSession, else just store the current User-HttpSession pair in the map. On logout obviously remove the User-HttpSession pair from the map.

  • Is it possible to disable multiple logins?

    Is it possible to disable multiple logins by the same user on different computers? I have network hosted user accounts. I need a way to NOT make it possible for user A to go to client Mac A, login and leave himself logged in there then go to client Mac B and login there also. This is creating some unpleasant effects on the server - naturally!
    Any easy way to accomplish this? Perhaps through Profile Manager?
    Thanks!

    Simon,
    Thanks for the reply but I need some elaboration.... "the "Login" preferences for users and groups".... what exactly are we referring to? I don't see such option (or atleast the way it's written), in either Server app or Profile Manager. Are we talking about the same OS X version?
    Thanks.
    P.S. Despite the fact that I have enabled the option in Profile Manager to logout all users on all computers after 30 minutes of inactivity, I have noticed that the iMac clients don't log out the users after the said time...

  • Multiple Sessions in CMC for the same user

    Hello,
    Version:  BOE XI R2 SP3
    A user opens an Xcelsius Dashboard.  As they are using the dashboard, multiple calls are being made through QaaWS to the database.  In CMC, we can see multiple sessions created for that user.  However, this is not 100% consistent.
    Why are there multiple sessions created for one user consuming one dashboard?  Shouldn't everything result in one session?
    Thank you,
    Scott

    Thank you Greg,
    The user shows multiple session after opening and refreshing just one Xcelsius Dashboard over and over again.  It is using QaaWS to get its data.
    Also, as you mentioned, we are also seeing problems with Logout.  Sometimes, users click the logout, but their session does not terminate.  Other times, it does terminate.  And, also, sometimes the logout button does not work.  The user is forced to just close the browser window.
    Any ideas?
    Scott

  • Multiple sessions in a single database connection.

    I have copied the following text from Forms Developer2000
    "At runtime, Form Builder automatically establishes and manages a single connection to ORACLE. By default, one user session is created for this connection. However, the multiple-sessioning feature of ORACLE allows a single client to establish multiple sessions within a single connection. ORACLE transaction-management and read-consistency features all are implemented at the session level, so creating multiple sessions allows a single user to have multiple, independent transactions."
    If ORACLE allows a single client to establish multiple sessions within a single connection, I want to leverage on this feature in my application which uses BC4J.
    Can anybody tell me if
    1. its possible achieve this in Java(BC4J).
    2. If Yes, How?
    regards,
    vikrant

    Thank you for your valuable suggestion.
    I believe createing multiple root Application
    Modules, will create as many number of connections to
    database, hence multiple transactions.
    But What I wanted was multiple sessions in a single
    connection, who's behavior will be similar to two
    different connections.Could you tell me the advantage you're looking for in multiple sessions in one connection vs. multiple connections (where connections may be pooled)?
    Thanks.
    Sung

  • How do I create a program with multiple sessions?

    I need to allow multiple sessions with this program.
    I realize that it involves threading of some sort, but I'm pretty new to this area and am not sure how I should go about this.
    Here are the instructions:
    "�     Write an application that will create an online dictionary a data file will be supplied that contains a list of words and their meanings. The hash table will contain a key (the word in question) and a value (byte offset of the word meaning stored in a random access file). You will also provide methods for entering, searching and deleting words online. The program must allow for multiple sessions."
    I have most of this all done, and have a dictionaryBroker ready to write the add, delete and search methods.
    But what about the mutliple sessions?
    I'm thinking that my hashTable and RandomAccessFile classes are both going to have to be singleton.
    What I want is for multiple people to be able to run the program at the same time, but if one person adds or deletes a record, I want it to update instantly for everyone.
    But it also needs to run smoothly for everyone using it.
    Thanks for any help, I just need a little push in the right direction here to help get me going.

    Well here is the entire assignment:
    &#61607;     Write an interface for a hash table that satisfies the following criteria:
    The hash table will contain a key (String) and a value (Object)
    Allow for a specific load capacity, if the capacity is exceeded the table is rehashed. The rehash may be called independently
    Must allow for maintaining the hash table (adding modifying etc) the key will not be changed
    Must allow for retrieving information from the table
    Must allow addition using a Map object or one key, value pair at a time
    The addition using a Map and the rehash must be a two pass approach
    �     Implement the interface.
    �     Write a test routine to test all aspects of the interface. The test must calculate the efficiency of your hashing algorithm.
    �     Write an application that will create an online dictionary a data file will be supplied that contains a list of words and their meanings. The hash table will contain a key (the word in question) and a value (byte offset of the word meaning stored in a random access file). You will also provide methods for entering, searching and deleting words online. The program must allow for multiple sessions.
    Submission
    Submit your eclipse project or executable jar file through WebCT. An efficiency of 70% or better must be attained for the assignment to be graded.
    I'm in Canada, not the US.
    It says online dictionary, but I don't think we actually have to do that. I'm pretty sure I can just use a simple GUI to allow them access to the dictionary.
    So, I'm assuming that I just have to make sure that if multiple people are trying to access it at the same time it needs to update at the same time or something. The hashtable was the main part of the assignment so this part shouldn't be too large.

  • Setup for Discoverer to have multiple sessions opening in different browser

    What is the setup for Discoverer or Windows 6 browser to have multiple discoverer sessions opening in different browser windows at the same time in Discoverer 10g Plus?
    We have implemented Discoverer 10g Plus just to be used as an extract tool. We have some workbooks retrieving 200,000 or more rows from an Oracle database. It is taking 30 to 45 minutes to download. Some users are able to open multiple sessions in different browsers to download more then one worksheet at the time, but we have other users who get an error message that they can only open one session at the time. What is the setup to allow users to open more than one Discoverer session?

    Additional research in Metalink found the following:
    Hdr: 7261918 10.2 USER_JAV 10.1.2.54.25 PRODID-964 PORTID-46
    Abstract: ALLOW ABILITY TO LAUNCH TWO DISCOPLUS SESSIONS FROM SAME BROWSER CONNECTION PAGE
    *** 07/17/08 07:31 am REQUEST TEXT ***
    Please refer to bug 6656139. Need to get Discoverer Plus certified to
    support launching two plus sessions from same browser connections page when
    using SUN JRE 1.5/1.6 or higher.
    As per bug 6656139 it appears to be JVM 1.5.x limitation, because same
    actions work fine when using SUN JRE 1.4.2_xx.
    *** 07/17/08 07:31 am BUSINESS NEED ***
    Impossible to run reports against two different databases simultaniously
    using same Discoverer instace, or just several reports at the same time,
    which would save much time instead of running reports one by one.
    *** 07/19/09 11:57 pm *** (CHG: Sta->97)
    *** 07/19/09 11:57 pm RESPONSE ***
    ALSO SEE THIS FROM SUPPORT
    Error 'Unable To Connect Discoverer Server: Null' When Opening A Second Plus Session From The Same Browser [ID 790187.1]
    Cause
    Bug 6656139, JVM 1.5 : RUNNING TWO PLUS SESSIONS ERRORS WITH UNABLE TO CONNECT: NULL
    The Java Console reports the following error:
    Error: java.lang.StackOverflowError
    java.lang.StackOverflowError
    at java.awt.DefaultFocusTraversalPolicy.accept(Unknown Source)
    at java.awt.ContainerOrderFocusTraversalPolicy.getFirstComponent(Unknown Source)
    at java.awt.ContainerOrderFocusTraversalPolicy.getFirstComponent(Unknown Source)
    at javax.swing.DefaultFocusManager.getFirstComponent(Unknown Source)
    Per Bug 6656139 this problem is a limitation/bug with current Sun JRE 1.5
    and higher and needs to be addressed by Sun.
    Solution
    Currently launching two Discoverer Plus sessions from the same browser connection page is not supported/certified.
    Enhancement Request :
    Bug 7261918, ALLOW ABILITY TO LAUNCH TWO DISCOPLUS SESSIONS FROM SAME BROWSER CONNECTION PAGE
    has been logged for this issue but is still waiting on a Sun Java fix.
    Use the following workaround:
    Use JRE 1.4.2_xx until the ER is implemented and the SUN JRE bug is fixed.

  • Multiple sessions with Viewer 3.3.61

    Hi,
    I have Discoverer Server set up on a single machine, using OAS as the HTTP server, and Viewer 3.3.61.
    If a user tries to run 2 queries at the same time (opens up two browser windows), one of the queries will be cancelled (usually te first query started).
    Why is this? Is this normal functionality, or do I need to set something up for multiple sessions? If I need to set something up, where can I find documentation?
    Thanks,
    Suzanne
    null

    Suzanne,
    I think this is normal for Discoverer. It seems to be that there is a session for each user login. Thus a single query for each login. This is just my observation.
    Christopher

  • How to handle multiple session in ADF using jdevloper11g

    Hello All
    i want to use the form in Multiple sessions.
    i have one sign up form. user enter only 4 to 5 fields & he may not fill the the manditory field & he left.but data base dont give the error to him. but next day he will come at the next day to complet his sign up i.e. when he commit the all detail that time all validation will hapen.
    for that i use one table without constrain to store the temarory detail.& use other table (with constrains) for final submition.
    1) i creat the view n entity for temparory table
    2) & also i create views n entity for Final table
    n i create one methos in viewRowImple file in that file i overrid create method from using this i set the value from tempary to final table...
    but when user left the manditory field then it allow to submit the data in temparory field but when i copy that data to final table(with constrain) n user submit the data then validation happn i.e. "this fild is mandatory".when i click this error message it goes to first screen.
    IS Thiis Possible.. in ADF

    Generally this can be done.
    I see a problem with your use case, which has nothing to do with jdev or java:
    How do you identify the user when he comes back to finish the form?
    For this you can't use information like session cookie or IP address because they change.
    So you have to save some information about the user which lets you identify him when he comes back. All other requirements can be implemented by ADF.
    Timo

  • How to open multiple sessions for one user?

    Sorry for the silly question but I couldn't find it googling or searching through this forum, so I started wondering whether it's possible in SQL Developer to open multiple sessions for one user. I'm fairly new to SQL Developer and databases in general.
    When I open SQL Developer and connect to a schema, a worksheet opens named MYSCHEMA. If I disconnect then connect, another worksheet opens, named MYSCHEMA~1. I assumed these were different sessions, but if I enter into one worksheet:
    select col1 from my_table where row_id = 1
    -- shows result is 1
    update my_table set col1 = 0 where row_id = 1
    select col1 from my_table where row_id = 1
    -- shows result is 0and then enter into the second worksheet:
    select col1 from my_table where row_id = 1
    -- shows result is 0I would have expected the second worksheet to report 1 because the first worksheet did not issue a COMMIT. Thus, I'd guess both worksheets are the same session? Is that right? If so, how do I have two sessions open simultaneously (opened by same user)?
    I'm trying to implement the code at the bottom of this post, for which testing requires at least two sessions:
    Re: Help with Procedure
    Edited by: tem on Apr 18, 2012 6:44 AM

    Thanks Jim,
    Ctrl-Shift-N doesn't do anything for me. I'm on a mac -- by experimenting it looks like command-N does what you're looking for. This appears to be the same as left-clicking on the "New" icon in the top left corner of SQL Developer, or selecting from the pull-down menu, File > New.
    This opens "Create a New" window that appears to be a wizard. What would I select at this point? Options are: Database Connection, Table, View, Package, ...
    I don't see an option for "Worksheet".
    UPDATE:
    OK, I found that if I select "SQL File", a worksheet becomes available. Perhaps this is what you intended. However, when I issue the command
    select col1 from my_table where row_id = 1;it still returns 0 instead of 1. Hmm, maybe my initial assumption was wrong -- if this is a second (e.g. different) session, should I expect the changes made in the first session in SQL Developer (the UPDATE command) WITHOUT a commit, to be observed in this second session? I thought that changes made in one session were not viewable in a different session until these changes are committed in the first session? If so, how to show this in SQL Developer? I must be missing something basic here.
    Or, is SQL Developer issuing some sort of "auto-commit" without my knowledge?
    Edited by: tem on Apr 18, 2012 8:00 AM

  • How to open multiple Sessions in Solution Manager

    Good Day Gurus,
    I am currently working on Solman 7.1 Sp12.My question is :Is it possible to open multiple sessions in Solution Manager? Here is the scenario: The client is working on multiple incidents and instead of logging on to the system again to access the 2nd incident he would like to open another session within the current call he is working on.
    Is this functionality possible in Solman? I have seen the functionality working before  in CRM interaction center not sure if it applies in Solman.
    Your help is highly appreciated.
    Thanks
    Maria

    Hi Maria,
    Options to Call a Function in an SAP System, by entering transaction codes in the command field, the transaction in bold is the one your want for opening multiple sessions.
    You can use the F1 key on the command field to display the following possible entries:
    /N to cancel the current transaction
    /NXXXX to call transaction XXXX directly from another transaction. Without the prefix, you can only call XXXX from the SAP Easy Access screen.
    /O to display the overview of the SAP GUI sessions on your computer
    /OXXXX to call transaction XXXX in a new window directly from another transaction
    /NEND to end the log on session with a confirmation dialog box
    /NEX to end the log on session without a confirmation dialog box
    /I to delete the window you are currently using
    Regards,
    Ruth

  • MULTIPLE SESSIONS IN SINGLE FORM

    HELLO ALL
    HOW CAN I HAVE MULTIPLE SESSIONS IN A SINGLE FORM? MY REQUIRMENT
    IS SUCH THAT I HAVE A CONTROL BLOCK WHICH IS MARKED AS UPDATED
    WHEN USER PRESS COMMIT BUTTON, BUT I WANT TO ROLL IT BACK AND I
    HAVE ISSUED SOME UPDATE COMMANDS MYSELF WHICH I WANT TO BE
    COMMITED. ANYONE HAVE ANY IDEA?
    THANKS IN ADVANCE

    Give the submit button a name. It will be sent as well, so you can see it in the request variables.

  • OIM 11g r2 disabling multiple account provisioning

    Hello all,
    I have a question, in oim 10g and 11g, on resource object there was a "allow multiple" checkbox.
    So you could configure your resource if you want to prevent it from multiple provisioning.
    But in 11gr2 I cannot see that checkbox.
    How can i configure my resource as it is going to disable multiple account provisioning?

    Is there anyone who can help?

Maybe you are looking for