Query about session management

Hi all,
I want to reset the session creation time how can i do it? My problem is I want to reset the Lastaccess time of the session to its creation time? I not sure It has possibilities? Is any possibilities to do it?
regards,
mahe

There's nothing in the HttpSession interface to do that, so no.
Why are you trying to deceive your application server?
Are you sure you understand all the server's internal mechanisms which use the last access time, and the security implications of changing the data?

Similar Messages

Query about Session Management in WebDynpro Component.

Hi to all, My Requirement is that,i have to Capture User-ID From Logon-Ticket and it will be use in the web-dynpro component,that access the Data From R/3 Server
(Back-end). and according to the login-ID information Captured from the Logon-ticket, i will do some task that will interact with the Bapi(R/3) on the basis of User-ID information. How Can I Do This.....Or How Can I Maintain the USer-Login Information into Portal and Use That in the Web-Dynpro Component embeded in the Portal.......
Plz if any-one have idea about, Help Me.......................
Thnx & Regard's
Dheerendra K. Shukla

Jitender,
You blindly copy example for stand-alone Java application and suggest it to server-side J2EE application... Not the best option...
Even this code could be improved:
public Connect1()
/* no need to have instance variable */
/* if it is used in single method */
final JCO.Client connection = null;
try
    /* Change the logon information
       to your own   system/user */
    connection = JCO.createClient
      "001",       /* SAP client    */
      "<userid>", /* userid        */
      "****",      /* password      */
      null,        /* language      */
      "<host>",    /* host name     */
      "00"         /* system number */
    connection.connect();
    try
      System.out.println(connection.getAttributes());
      /* and other operations with live connection */
    finally
      /* always release resources         */
      /* original code has potential leak */
      connection.disconnect();
catch (final Exception ex)
    ex.printStackTrace();
    /* DO NOT CALL THIS IN WEB-AS!!!          */
    /* THIS STOPS COMPLETE SERVER INSTANCE!!! */
    /* System.exit(1); */
    /* Re-throw instead or report in different manner */
    throw new RuntimeException(ex);
Worth to mention that Adaptive RFC model handle connections better then this.
Also note that WDSystemLandscape.getClient(LOGICAL_SYSTEM_NAME) allows to get connection without hardcoding connection details.
To summarize, what you advise is a plain "no-no".
And this code will works in same way as Java Print API for printing from WD -- see Re: how to print table data on click of a button
You guys are playing interesting game with each other ))
Valery Silaev
EPAM Systems
http://www.NetWeaverTeam.com

Help me about session management

i need session management sample coding and database connection

Any other version apart from XE. (XE is free for production use and therefore has this tablepsace limit).
In order of increasing licensing cost (and I don''t know the cost)
Oracle 10g Standard Edition One
Oracle 10g Standard Edition
Oracle 10g Enterprise Edition
You should be using version 10.2.0.1 or later

Session Manager - SQL QUERY

I want to get the query fired by OBIEE to database. I'm able to get it through the session manager in the Administration Settings. But for some reports it is firing multiple queries.
Is there any way to combine them?

Hi,
It depends on your datamodel. If the BI server 'thinks' it is the best way to get the desired results it makes multiple queries and stitches the datasets together into one result set. You can raise your logging level to see what happens.
Good Luck,
Daan Bakboord
http://obiee.nl/

Session Management API

I'm looking for some way to query the weblogic container about servlet sessions
by id. I'd like to create a management program that is supplied a session id,
performs a lookup against WL session manager, and dumps the data in that session.
Is there such an API or interfaces? Any docs, examples, etc. in that direction
would be appreciated.

Such API is not provided since it would constitute a security
hole.
James wrote:
I'm looking for some way to query the weblogic container about servlet sessions
by id. I'd like to create a management program that is supplied a session id,
performs a lookup against WL session manager, and dumps the data in that session.
Is there such an API or interfaces? Any docs, examples, etc. in that direction
would be appreciated.

Session management problems with SSO

Hi all-
I've been getting an Apex app tied to SSO as a partner app (per http://www.oracle.com/technology/products/database/application_express/howtos/sso_partner_app.html). So far, it sort of works. If I go to my apex app, it redirects me to SSO, where I authenticate and end up back in the apex app. Great. Here are two problems I've run into:
1. If I am already authenticated to SSO, and I go to my apex app (url like: http://host/pls/apex/f?p=101:1), my browser goes into an infinite redirect (url like: http://host/pls/apex/f?p=101:1:::::FSP_AFTER_LOGIN_URL:\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|||||FSP_AFTER_LOGIN_URL|\f?p=101|1|||||FSP_AFTER_LOGIN_URL|\f? p=101|1|\\\\\\\\\\\\\\\\\\\). To resolve, I have to clear cookies.
2. If I am using my apex app, then log out of SSO (in another browser window), I can still click around in my apex app (i.e., apex thinks I'm still authenticated).
Anyone have any thoughts? I'm wondering if I need to do something in page session management (under authentication schemes) to fix #2, but I have no clue about #1.
Thanks
Rob

Hi Scott-
Thanks for the info on #2 - I'll work on that after I get #1 sorted out, since it's the more dire problem. Here's some more info:
Apex version = 3.0.1.00.08
SSO SDK = ssosdk902.zip
I set it up as "My Application as Partner App." I used "MY_PARTNER_NAME" as SSO Partner Application Name. In the list of SSO Partner Apps on the SSO Admin page, my partner app name is also MY_PARTNER_NAME. It gives the following info:
Login URL: https://sso_host/pls/orasso/orasso.wwsso_app_admin.ls_login
Single Sign-Off URL: https://sso_host/pls/orasso/orasso.wwsso_app_admin.ls_logout
Home URL: http://apex_host/pls/apex
Success URL: http://apex_host/pls/apex/RBLICK.YOUR_PACKAGE.PROCESS_SUCCESS
Logout URL: http://apex_host/pls/apex
RBLICK is the schema owning the apex app. In there, I created a package called YOUR_PACKAGE:
create package YOUR_PACKAGE as
procedure process_success(urlc in varchar2);
end YOUR_PACKAGE;
CREATE PACKAGE BODY YOUR_PACKAGE AS
procedure process_success(urlc in varchar2) as
begin
wwv_flow_custom_auth_sso.process_success(
urlc=>urlc,
p_partner_app_name=>'MY_PARTNER_NAME');
end process_success;
END YOUR_PACKAGE;
Anything look obviously wrong to you?
Thanks!
Rob

Hello, I have a big problem with Firefox: Session Manager & Undo Closed Tab addons are not working, Sync Is not working. History is working. How to fix this?

Firefox remembers history but doesn't remember closed tabs, sessions.
It happened after updating Fox to v. 19.0.2 on one computer.
In Firefox Options is set Use Custom Settings For History, everything is checked except Always Use Private Browsing Mode. So I am not in private browsing.
When I press on Undo Closed Button nothing happens & in session manager Save Session Button is greyed out. I've tried installing other add-ons that can remember tabs. tried to disable/reinstall these 2 add-ons. Did't help. On my 2nd computer I have same add-ons, same settings and they are working normally. on 3rd computer undo closed tabs works also. How to fix this? I decided to ask before doing Firefox Reset...
Sync is a separate problem. It works, but quite often it logs me out of Sync account. Then I can log in only using long recovery key and password (choosing option I don't have device with me because it does not accept keys for pairing device.)
Thanks for reading.

I have exactly the same settings in Options (in both computers)
for history, these 2 add-ons and all other stuff in Options. The only difference is that on 1 pc sessions can be saved and closed tabs can be reopened, on other main pc they stopped to work. + no any other add-on that does similar things works on this pc.
It is also interesting that I can reopen closed visited sites from History Panel, but not by pressing the Button. For now I only manually bookmark links to a temporary folder.
Recently (some 2 month ago) I pressed x and Firefox closed all tabs without saving them without displaying save & quit pop up.
so I changed 4 settings in about.config
browser.tabs.warn on close true
browser.warn on quit true
browser.warn on restart true
browser.show.quit warning true
but the problem with sessions appeared only 1 week ago.
So I guess the problem is not with the History settings or other settings. Seems that something responsible for button or for storing info about tabs/sessions got corrupted. :(

Web service authentication/session management using Axis2

I'm creating a web service using Axis2 where the client will need to login to the service and maintain a session. I'm trying to figure out a good way to do this. I've read the article on the following link:
http://www.developer.com/services/article.php/3620661/Axis2-Session-Management.htm
and it describes 4 main ways of doing this: Request Session Scope, Soap session scope, Transport session scope, and Application scope. However, it doesn't give much detail in actually implementing this. It says to add a parameter to services.xml like this:
<service name="foo" scope=" transportsession">
</service>
but what about the actual code that goes in the server and client to actually handle the login process and verify the username/password in an SQL database on the server? I'm having a lot of trouble finding a good tuturial on this. Can anyone point me in the right direction? I'm also open to other ideas that don't necessarily directly involve Axis2.

Session management for a web service and already answered. Locking.

Session management for a web service

I am building a web service where the user will need to login and the application will need to maintain a persistent session. I am using Apache Axis2 for client/server communication via SOAP/XML. What would the simplest and most common way of doing this? I know I could implement session management from scratch similarly to how a browser does it, using cookies, but I'd rather use standard Java libraries for this. Am I correct in assuming that even though I'm using Axis2, the solution doesn't really have anything to do with Axis2 since Axis2 is basically just a way for the client/server to send messages to each other?
I've read a lot of information online about this, but there's so much information that it's hard to know where to start. Basically I'm just looking for someone to point me in the right direction on what classes to use and so on. I just need a simple username password authentication and session management system for a web service.

Container Managed Authentication. Does everything you need.

Session manager backup fail

I just got the following message and get similar messages
This operation failed due to a file access error:
undefined(undefined)
backup.session
undefined:undefined

hello commus, for support about an addon please directly contact the extension developers through the means provided at the [https://addons.mozilla.org/firefox/addon/session-manager/ homepage] - they can likely give you more detailed guidance and are the only ones who can fix bugs or make necessary adjustments in the addon. thank you...

BI Administrator error: Session Management will not work

Hi!
I am about to set up BI Administrator Addon in SAP Portal. All the configuration steps seems to be ok.
Unfortunately when I try to start some of applications of BI Administrator I get the following error:
Session Management will not work.
Please check the DSM log file for details
Question:
How can I solve this problem?
Thank you very much!
regards

Hi
This error means--Please notify us of this problem by submitting an IT Service Request (Please Note: In order to log into the Infra system, you will need to preface your NKU account with nku\. For example, if your user name is smithj7, the "User Name" field would need to be populated with nku\smithj7.)
under the problem type "SAP BW/Portal.
Much of EP / BASIS issue.
Hope it helps

Cfdiv and session managment

I am working on a website that uses session managment for
security login.
The site was developed with CF6, and we are now trying
migrating it to CF8.
Currently, forms are submitted passing the session token in
the URL like this:
<form
action="Assignments.cfm?<cfoutput>#session.URLToken#</cfoutput>"
method="post">
</form>
I'm trying to integrate CFDIV into the code, so I have
<cfform>
</cfform>
<CFDIV bind="url:AnotherForm.cfm ...>
When I run this, Instead of including "AnotherForm.cfm" the
session is not getting passed and the system logs me out.
I've tried
bind="url:AnotherForm.cfm?<cfoutput>#session.URLToken#</cfoutput>
(also logs me out)
and putting the code in a
<cfdiv>
<cfform
action="AnotherForm.cfm?<cfoutput>#session.URLToken#</cfoutput>">
</cfform>
<cfdiv>
Doesn't abend, but doesn't do anything either.
So, does anybody know how to incorporate cfdiv into session
management?
thank you,
Steve Shapiro
University of Oregon

Yes, entity managers are allowed to have one transaction active at any given time.
Assuming that you have a resource-local entity manager (from your comment about JDBC and non-JTA data sources) then any container-managed transaction associated with a session bean is going to be a JTA transaction and be completely independent of the entity manager transaction (as long as the non-JTA-data source is properly set to a data source that is not a JTA data source).
If you are using a non-JTA data source element to configure your database then the entity manager will simply do a getConnection() on the data source. If you are using the JDBC persistence properties in persistence.xml then the connection will be obtained directly from the JDBC driver.

Trouble with Session Management

I am trying to assess how many people I lose on my site
because they dont have cookies enabled. when I disable cookies in a
browser and <cfoutput> a urltoken, it prints out a new value
every time I refresh the page, as expected. But when I try to log
the CFID when people come to my home page so that I may pass it
around through the site, I get some "element CFID undefined in
session" errors

thanks for the help. I thought Id tell you more about what I
am doing and see if you have comments - we use google to market our
company so clicks are costing us big bucks. currently, our sites
rely on session management to operate, so I realize that folks
having cookies off is really hurting us. All the references I can
find tote passing the session.URLToken around the site to make it
cookie independent. I havent done this yet, first im trying to get
a handle on how many people have cookies off (like you are), and
where people are coming from to see if we are having click fraud
(which we are very suspicious of).
Is this what you would do (passing the URLToken around)? Any
other comments you have would be very much appreciated.

Session management question

I have a requirement to prevent multiple sessions per user id. So, when a
user logs in to our app, any existing sessions he has must be invalidated.
Does anyone know the correct WebLogic API call to use to locate a session
object for a given user id? I need to call this so that I can invalidate the
existing session.
Thanks,
Rob.

Hi Rob,
Using Servlet 2.3 features this can be done using the sessionCreated and
sessionDestroyed API (chapter 10 of the servlet 2.3 Spec). This Spec has been
implemented in WLS 61.
These methods are provided by the HttpSessionListener interface and they are
called by the container whenever a session is created or destryed as their name
suggests. These methods take in HttpSessionEvent as their parameter which can be
use to get a handle of the corresponding Session object. Once you get this
handle you can store it in a Hashtable with userID as the key.
You can use this Hashtable to verify if the session for a particular user
already exists or not. Once the session is invalidated, the sessionDestroyed
method will be called and this allows you to remove the session handle from the
Hashtable. The Hashtable thus, maintains a list of active sessions in an web
application.
A sample impl:
public void sessionCreated(HttpSessionEvent evt){
sess = evt.getSession();
/* have code to populate the sesion Attributes */
log("\nsession created " + sess.getId() );
log("Session id: " + sess.getAttribute("userID") );
synchronized(this) {
h.put(sess.getAttribute("userID"), sess);
public void sessionDestroyed(HttpSessionEvent evt){
sess = evt.getSession();
log("\nsession destroyed: " + sess.getId() );
synchronized(this) {
h.remove(sess.getAttribute("userID"));
hope this helps,
mihir
Rob Worsnop wrote:
OK. I posted the original message after speaking to BEA tech support. They
had told me there was an API for getting hold of the session. Now they tell
me there is not.
It looks like I have to implement this particular aspect of session
management myself.
It's a pretty simple task - provided you expect no more than a few hundred
users logged on at a particular time.
Anyone got any tips about how to implement this in scalable manner?
Thanks,
Rob.
"Rob Worsnop" <[email protected]> wrote in message
news:[email protected]...
I have a requirement to prevent multiple sessions per user id. So, when a
user logs in to our app, any existing sessions he has must be invalidated.
Does anyone know the correct WebLogic API call to use to locate a session
object for a given user id? I need to call this so that I can invalidatethe
existing session.
Thanks,
Rob.

ITS / IAC session management?

ERP2004 old style 4.7 MSS iviews (ie 60.1.18)
Having problems with IACs (based on essinmss iview).
1st time user navs to the iview fine and all works. 2nd time in they get the 'Start SAP Easy Access' front screen instead of the IAC transaction. If user clicks the 'log out' link on the IAC before navigating away then they can get back in the 2nd time.
So looks like this is an ITS session management issue.
Our Basis guys are telling me that ERP2004 integrated ITS doesn't have a/the rz10 parameter to switch on the session management so that when navigating away from an IAC it shuts the session properly.
Anyon got any experience with this? Hints tips etc...
TIA
J

I have posted this in another post with same issue. Just putting it here for anybody trying to find solution.
Note 918265 - SAP GUI for HTML in EP: /!\ Session not fail-safe /!\
Note 827375 - Integrated ITS 6.40: ~disconnectonclose and IACs
These notes are talking about upgrading ITS to higher support packages:
external ITS 6.20 patch level 22
NetWeaver 2004 Integrated ITS 6.40 Support Package 16
NetWeaver 2004s Integrated ITS 7.00 Support Package 7
and upgrading Netweaver kernal to Patch 68.
Regards,
Parimal

Query about session management

Similar Messages

Maybe you are looking for