Problem with valueUnbound() in 5.1 SP12

Question

We are facing a problem with WLServer 5.1 SP12 when the session gets invalidated.
Please find the problem description below.
References:
1.) SessionListener Class : A class that implements HttpSessionBindingListener
2.) Login JSP : A JSP which adds the instance of SessionListener object to the
session once the user is authenticated succuessfully.
Problem Description:
Once the SessionListener object is added to the session valueBound() method is
always called. When the user logs out explicitly valueUnbound() is always called.
At this point we call the session.invalidate() method.
However, valueUnbound() is not called after the Inactive interval properly, for
instances like system crash or closing of browser by the user before he actually
logs out. Most of the time it works perfectly, but sometimes it happens the above
mentioned problem comes.
I am not able to justify whether it is a problem with my code or an issue with
the wlserver. Appreciate any help in this matter.
I am giving the important fragments of code below for reference:
<PRE>
/*---SessionListener.java ----*/
public class SessionListener implements HttpSessionBindingListener {
private String loginUserId; //Holds the user id in the session.
     public SessionListener(String loginUserId) {
          this.loginUserId = loginUserId;
     public void valueBound(HttpSessionBindingEvent event) {
          try {
               //Initialization code.
               LogWriter.log(new Date() + "<BOUND>" + loginUserId + ":"+ event.getSession().getId());
          } catch(Exception e) {
               LogWriter.log("<ERROR OCCURRED DURING BOUND>\n" + e.getMessage());
     public void valueUnbound(HttpSessionBindingEvent event) {
     //Clean up Code.
     LogWriter.log(new Date() + "<UNBOUND>" + loginUserId + ":"+ event.getSession().getId());
Code fragment from Login.jsp
SessionListener ssnlstnr = new SessionListener(LoginBn.getLoginId());
session.setAttribute("ssnLstnrObj", ssnlstnr);
</PRE>
Thanks for any help in advance.

Answer 1

Hi Simon,
Thanks for your explanation. Yes, we are aware that the session will not be invalidated
immediately after the system crashes or the browser is closed. We are using weblogic
5.1 , so use weblogic.properties file instead of weblogic.xml. The property used
is, 'weblogic.httpd.session.timeoutSecs'. Currently, it is set to 600 seconds.
So, the session should be invalidated after 10 minutes if there is no activity
done, even in the cases of system crash. This is inturn fires the valueUnbound()
method. Most of the times, it is called. But, in some instances, it is
not called. Is there any way that we can ensure that it is definitely called always,
although the specs say that it will be called whenever the object is removed from
the session or the session itself is invalidated.
Thanks,
Tejokiran.Y
Simon Evans <[email protected]> wrote:
the valueUnbound method will be called when the object is removed from
the session. this will happen if you explicitly remove the object from
the session, if you call session.invalidate(), or if the session
timesout (expires). the session will timeout if the user is inactive
for
the time specified in the session-timeout element in web.xml.
the method will usually not be called on a system crash, and will not
be
called when the user closes the browser.
the session-param InvalidationIntervalSecs in weblogic.xml does not
specifiy the session timeout, this is an interval for weblogic to check
for timed-out or invalidated sessions and clean up the memory.
you can specify the session timeout in weblogic.xml with the
session-param TimeoutSecs, but this is overridden by the session-timeout
value in web.xml.
Tejokiran wrote:
We are facing a problem with WLServer 5.1 SP12 when the session getsinvalidated.
Please find the problem description below.
References:
1.) SessionListener Class : A class that implements HttpSessionBindingListener
2.) Login JSP : A JSP which adds the instance of SessionListener objectto the
session once the user is authenticated succuessfully.
Problem Description:
Once the SessionListener object is added to the session valueBound()method is
always called. When the user logs out explicitly valueUnbound() isalways called.
At this point we call the session.invalidate() method.
However, valueUnbound() is not called after the Inactive intervalproperly, for
instances like system crash or closing of browser by the user beforehe actually
logs out. Most of the time it works perfectly, but sometimes it happensthe above
mentioned problem comes.
I am not able to justify whether it is a problem with my code or anissue with
the wlserver. Appreciate any help in this matter.
I am giving the important fragments of code below for reference:
<PRE>
/*---SessionListener.java ----*/
public class SessionListener implements HttpSessionBindingListener{>
     public void valueBound(HttpSessionBindingEvent event) {
          try {
               //Initialization code.
               LogWriter.log(new Date() + "<BOUND>" + loginUserId + ":"+ event.getSession().getId());
          } catch(Exception e) {
               LogWriter.log("<ERROR OCCURRED DURING BOUND>\n" + e.getMessage());
     public void valueUnbound(HttpSessionBindingEvent event) {
     //Clean up Code.
     LogWriter.log(new Date() + "<UNBOUND>" + loginUserId + ":"+ event.getSession().getId());
Code fragment from Login.jsp
SessionListener ssnlstnr = new SessionListener(LoginBn.getLoginId());
session.setAttribute("ssnLstnrObj", ssnlstnr);
</PRE>
Thanks for any help in advance.