How are session timeouts handled

Hi,
Can anyone tell me how session timeouts are handled by the Servlet
Engine.
What is the exact role of the SessionInvalidator class. Are sessions
correctly timed
out by iAS, because I get strange behaviour in handling session timeouts
in my application
which is following MVC architecture.
What I am observing is that sessions dont seem to timeout after the
length of
time specified and sometimes they do timeout correctly. The difference
between the
time the session should have timed out and when it actually does is too
high, which is
really a concern for us.
Thanks in advance to evryone.
Amar bhat.

Hi AmarBhat,
Actually this is a bug in iAS (bug id: 556909, Status: Fixed ). This is
happeninig because iAS has a bad ( late) cleanup of timed out sessions. The
getSession method (HttpSession) calls IsRequestedSessionIdValid() as a check
for timeout and this check returns "Valid" even after a couple of seconds of
timeout. Thus, the getSession from Java layer returns the valid session. So
you are still able to read and write data on the session.
We can specify iAS the session to invalidate itself after being timeout.
Alternately, we can do it manually with HttpSession method, invalidate().
Plese get back if you have any issues.
Thanks,
Rakesh.
Developer -support, iAS.
amar bhat wrote:
Hi,
Can anyone tell me how session timeouts are handled by the Servlet
Engine.
What is the exact role of the SessionInvalidator class. Are sessions
correctly timed
out by iAS, because I get strange behaviour in handling session timeouts
in my application
which is following MVC architecture.
What I am observing is that sessions dont seem to timeout after the
length of
time specified and sometimes they do timeout correctly. The difference
between the
time the session should have timed out and when it actually does is too
high, which is
really a concern for us.
Thanks in advance to evryone.
Amar bhat.

Similar Messages

Business vs. Private purchase - how are App updates handled?

Hi,
I have my own business, but already purchased a few apps for private use on my Mac. Now I need to make a business purchase and I'm wondering how the App Store handles this.
If I switch accounts, can I still see, run, and update the same apps? Do I need to switch accounts to use an app? Do I (please no) need to log out and in to use an app from a different account?
Any help is appreciated, thanks!
Vincent

You don't need to be logged in with the purchasing account in order to use a app.
You would have to log in with the purchasing account in order to update.
Matt

How are tax updates handled in SAP for asset depreciation?

We are implementing Assets and currently using a system that not only calculates the tax on depreciation but also updates any new changes to the taxes as mandated by the federal and state government.
My understanding is that SAP does not auto update the tax changes in the system unless we have a tax software, is that right? And if we have no need for a tax software just to update depreciation tax changes, what are the options out there that will enable the new tax to be calculated and applied in SAP?
We are looking for an auto option instead of manually updating the percentage rates/tax for calculating depreciation in SAP. Is there any software that can be interfaced to SAP that can perform this function and enable the calculation of depreciation tax?
Appreciate any input/suggestions or help in resolving this issue.
Thanks

In AM you set-up a separate depreciation are for TAX with complete different rules as your normal depreciation. You can do with it what you want to get the correct values.
Based on your tax requirements you can set this up. If there is a specific question you can drop it on this forum:
You have option like revaluation, inflation, unplanned depreciation, write up...... When you have activated the extension AE-FIN you have some extra options.
There is not a standard for tax changes. You have to know the change and based on that to use the correct option to update the values. There are hundreds of possible changes.

How are duplicate parameters handled when starting WLS?

I was given some memory tuning suggestions for WLS and told to set them in $USER_MEM_ARGS. However, when I try to start the AdminServer I am getting an error "Invalid initial heap size: -Xms512m". This puzzles me because it looks like that was the original heap size. I am wondering if it is because the parameter appears twice.
So my question is, "If a parameter is used twice, is the first one used? the last one? or is it an error?"
Now to see if I can add an image. Guess not. Soooo... note -Xms=512m appears twice.
* To start WebLogic Server, use a username and *
* password assigned to an admin-level user. For *
* server administration, use the WebLogic Server *
* console at http://hostname:port/console *
RRP Debugging...
$SERVER_NAME: AdminServer
$JAVA_VENDOR: Sun
$USER_MEM_ARGS: -Xms=512m -Xmx=512m -Xns=128m -d64 -XgcPrio:throughput -XXnoSystemGC -Djava.security.egd=file:/dev/../dev/urandom -XX:PermSize=128m -XX:MaxPermSize=256m -XX:PermSize=128m -XX:MaxPermSize
starting weblogic with Java version:
java version "1.6.0_25"
Java(TM) SE Runtime Environment (build 1.6.0_25-b06)
Java HotSpot(TM) 64-Bit Server VM (build 20.0-b11, mixed mode)
Starting WLS with line:
/app/oracle/product/ofm/jdk1.6.0_25/bin/java -server -Xms=512m -Xmx=512m -Xns=128m -d64 -XgcPrio:throughput -XXnoSystemGC -Djava.security.egd=file:/dev/../dev/urandom -XX:PermSize=128m -XX:MaxPermSize=256m -XX:PermSize=128m -XX:MaxPermSize -Dweblogic.Name=AdminServer -Djava.security.policy=/app/oracle/product/ofm/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.ProductionModeEnabled=true -da -Dplatform.home=/app/oracle/product/ofm/wlserver_10.3 -Dwls.home=/app/oracle/product/ofm/wlserver_10.3/server -Dweblogic.home=/app/oracle/product/ofm/wlserver_10.3/server -XX:PermSize=256m -XX:MaxPermSize=512m -Dcommon.components.home=/app/oracle/product/ofm/oracle_common -Djrf.version=11.1.1 -Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.Jdk14Logger -Ddomain.home=/app/oracle/product/ofm/user_projects/domains/IDMDomain -Djrockit.optfile=/app/oracle/product/ofm/oracle_common/modules/oracle.jrf_11.1.1/jrocket_optfile.txt -Doracle.server.config.dir=/app/oracle/product/ofm/user_projects/domains/IDMDomain/config/fmwconfig/servers/AdminServer -Doracle.domain.config.dir=/app/oracle/product/ofm/user_projects/domains/IDMDomain/config/fmwconfig -Digf.arisidbeans.carmlloc=/app/oracle/product/ofm/user_projects/domains/IDMDomain/config/fmwconfig/carml -Digf.arisidstack.home=/app/oracle/product/ofm/user_projects/domains/IDMDomain/config/fmwconfig/arisidprovider -Doracle.security.jps.config=/app/oracle/product/ofm/user_projects/domains/IDMDomain/config/fmwconfig/jps-config.xml -Doracle.deployed.app.dir=/app/oracle/product/ofm/user_projects/domains/IDMDomain/servers/AdminServer/tmp/_WL_user -Doracle.deployed.app.ext=/- -Dweblogic.alternateTypesDirectory=/app/oracle/product/ofm/oracle_common/modules/oracle.ossoiap_11.1.1,/app/oracle/product/ofm/oracle_common/modules/oracle.oamprovider_11.1.1 -Djava.protocol.handler.pkgs=oracle.mds.net.protocol -Dweblogic.jdbc.remoteEnabled=false -Dem.oracle.home=/app/oracle/product/ofm/oracle_common -Djava.awt.headless=true -Didm.oracle.home=/app/oracle/product/ofm/Oracle_IDM1 -Xms512m -Xmx1024m -Xss512K -Djava.net.preferIPv6Addresses=true -DuseIPv6Address=true -Djava.protocol.handler.pkgs=oracle.mds.net.protocol -Dweblogic.management.discover=false -Djava.net.preferIPv6Addresses=true -Dweblogic.management.discover=true -Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=false -Dweblogic.ext.dirs=/app/oracle/product/ofm/patch_wls1035/profiles/default/sysext_manifest_classpath:/app/oracle/product/ofm/patch_ocp360/profiles/default/sysext_manifest_classpath weblogic.Server
Invalid initial heap size: -Xms=512m
Could not create the Java virtual machine.
Edited by: rrp on Oct 26, 2011 10:38 AM

I just noticed that in one place it is -Xms=512m and in the other it is -Xms512m. But the example I was given works - but apparently with JRocket, not sun. Does the format of this parameter vary between Hotspot and JRocket??? But the question on duplicate parameters remains.
Edited by: rrp on Oct 26, 2011 10:50 AM

How are static methods handled in a multithreaded application?

hi
i have a class Drawer with a static method public static draw(Graphics g). now assume there are more thrads callin at the same time Drawer.draw(g). What happens? have some threads to wait until the others have finished calling the method, or can static methods be multithreaded, (can they perform simultaniously)?
thanks, jo

ups, i am not drawing on the screen, but in every thread i am drawing a Image. this means before i call the static method in every thread there will be created a BufferedImage and then i pass the Graphics from this images to the static method. also in this case the method performs simultaniously? every thread has its own image and graphics, so the static method should be perform at the same time, isn't it?

How are valuation types handled in SRM

Hi SRM Gurus,
We have a back end ERP system which uses valuation type in Material accounting view. We are using Extended classic sceanrio and wanted to know if while PO create in SRM, based on the MM master data from ERP, can we have valuation types in SRM PO line items. I saw in BBP_PD transaction for a PO line item, there was a valuation type field BE_VAL_TYPE in table BBP_PDBEI.
Also wanted to know if Vendot and Plant jursidcition entered in MM - when replicated, where do they reside in SRM tables?
Will award points for replies found useful.
Thanks,

Ryan,
We wanted to use valuation types as well. Even though you have the BE_VAL_TYPE field, we didn't want to make a modification to allow the field to show on the screen. So, we created a customer field, appended to the appropriate structures and maintained methods in the BBP_DOC_CHECK_BADI, BBP_DOC_CHANGE_BADI, BBP_CREATE_BE_PO_NEW & BBP_CREATE_BE_RQ_NEW BADIs in order to process the field.
I hope that helps.
Regards, Dean.

How are control characters handled in keyboard layouts?

Warmup question: What exactly is the difference between an "input method" and a "keyboard layout"?
Real question: What exactly happens when I switch keyboard layouts and enter control characters, and how can I change it?
I'll use as an example Hebrew-QWERTY and the "a" key. That key maps to Hebrew character aleph or א. What happens when I press control-a?
The Emacs text editor claims to receive a control-aleph, saying "^א is undefined". This is a very strange character: א with bit 26 set. It doesn't even have a Unicode codepoint.
TextEdit normally responds to control-a by moving to the start of the line. It doesn't do so with Hebrew-QWERTY in force, hence it's not getting a control-a. I have no idea what it is getting.
The goal, by the way, is to create a keyboard layout that does NOT change the mapping of control characters. I don't want control-a to send a useless control-aleph; I want it to send control-a as usual. But if I examine the Hebrew-QWERTY layout in (say) Ukelele, it knows nothing of control-aleph and claims to map control-a to itself as usual. Therefore something else is producing these weird control characters. Who?
If I'm hopelessly confused, please don't hesitate to say so. I wouldn't be surprised to learn that I'm missing something simple but crucial.

Tom Gewecke wrote:
Regarding control characters, you might try posting a query on the Ukelele page -- the fellow who makes that app knows a lot about how all this works.
Layout vs Method: Thanks for the clarification.
Ukelele: I've already posted to the Ukelele-users Google group, thus:
http://groups.google.com/group/ukelele-users/browse_thread/thread/b9c8aadfd6969c 15?hl=en
If that's what you mean by "the Ukelele page", I'm all set (assuming he replies). If you meant somewhere else, please let me know. I didn't find an Apple discussion forum specifically for Ukelele.

Com.essbase.eas.essbase.defs.ServerCommands.Connect - Session timeout

Hello,
I set essabse as a cluster on 2 win 2008 64 bit server (active, passive), EAS console runs on both servers as actvie active, we set a loadblanace infront of those 2 server to have EAS loadbalanced
if I do accsess EAS directly to the server http://<hostA>:10080/easconsole/console.html or http://<hostB>:10080/easconsole/console.html all works fine
As soon I am using domain name and go though loadbalance http://<domainname>:10080/easconsole/console.html I am getting the errror below:
com.essbase.eas.essbase.defs.ServerCommands.Connect February 12, 2013 2:56:51 PM EST Session timeout Failed : -1 Your session is not currently authenticated. Please log in.
EAS version: 11.1.2.2.1

Is it the web console, I take it you are using a http server such as OHS in front of the EAS WebLogic cluster, if so does it work through the http server or is still the same, how are sessions handled on the load balancer are they set up as sticky.
Cheers
John
http://john-goodwin.blogspot.com/

Multiple Leads per Account - how are your companies managing this?

hi Experts
Question regarding accounts with multiple leads. How are other companies handling this in CRM? Currenlty, we have a two lead types, one captures customer first point of interest with our company and the second type represents all of the other interests the customer has with us. We are trying to simply to one lead type but Marketing is having an issue with how to manage the first point of contact and the point of contact which triggers the sale.
Basically, I would like to hear from other experts on how their companies model their leads and manage them.
Thanks,
Chris

hi, you can add a customize flag field in your lead document to present the first contact. And you can make the sales staff to tick this flag, or add a customize logic in the order save BADI to check if the lead is the first document for this BP, it so the set the flag aotumactically in the BADI.

How to set session timeout per user

Hi,
Ho do I set the session timeout per User in the
Application.cfm File??
I tried using
<cfif SESSION.UID EQ 1>
<CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
sessiontimeout="#CreateTimeSpan(0,0,20,0)#">
</cfelse>
<CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
sessiontimeout="#CreateTimeSpan(1,0,0,0)#">
</cfif>
But this didnt work because the cfapplication seems to have
to be at the top before I call the variable SESSION.UID which
I set on my login page..
Someone know how to do this??
Regards
Martin

Martin,
Your code example cannot work because the "session" scope
doesn't exist until your application scope is defined. So you have
to handle this manually. Here's how you can get it done. First,
define your application to the maximum sessiontimeout you want to
have.
<CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
SESSIONTIMEOUT="#CreateTimeSpan(1,0,0,0)#">
Then, I don't know how you are doing your login
authentication but when you have authenticated the user, you need
to define the userid and the most recent activity in the session.
Also determine your timeout value based on the userid. See example:
<CFIF IS_AUTHENTICATED>
<CFSET session.user.uid = form.userid>
<CFSET session.user.most_recent_activity = now()>
<CFIF session.user.id eq 1>
<CFSET session.user.timeout_mins = 20>
<CFELSE>
<CFSET session.user.timeout_mins = 1440>
</CFIF>
</CFIF>
Now, all you have to do is check whether the user has been
idle for too long and kill the session by purging all session
variables. For example:

<CFIF structKeyExists(session, "user") and
structKeyExists(session.user, "id")>

<CFIF datediff("n", session.user.most_recent_activity,
now()) gt session.user.timeout_mins>

<CFSET StructClear(session)>

<CFELSE>

<CFSET session.user.most_recent_activity = now()>
</CFIF>
</CFIF>

Re: [iPlanet-JATO] Re: session timeout when not submitting to a handler

Mark--
I know what's happening here, but am curious about your approach. You said
in an earlier email that you were generating links directly to JSPs, but
from what you are describing, you are generating JATO-style links to access
JATO pages. Nothing wrong with that, but there is a signficant difference.
Actually, it just occurred to me, I'm wondering what your URLs look like.
The way the request dispatching works in JATO is it ignores anything after
an initial "." in the final part of the URL path. For example, a request
for "/myapp/module1/MyPage.jsp" doesn't actually try to hit the JSP, instead
it tries to hit the JATO page "/myapp/module1/MyPage".
The end result is that you may think you are accessing a JSP directly, but
are instead accessing a JATO page. The reason the request dispatching works
this way is because it is illegal to access JATO JSPs directly, and there is
actually a (disabled) JATO feature that piggybacks on the use of the
dot-delimited URL.
So, now I need to understand your intent. I wasn't really sure why you were
generating direct JSP/page links to begin with. This works against the Type
II architecture JATO uses, in which all JATO requests go back to the
controller servlet.
If you are trying to design something like a menu page, you may have thought
that it was burdensome to create a number of HREF children, plus implement
event handlers for each of them. This definitely would be burdensome beyond
just a handful of links, but this is why JATO provides other mechanisms for
doing what I'll call here "polymorphic HREFs".
Assuming this menu page scenario, the easiest thing to do is to simply use
one HREF child on the page, and add a value to it each time it is rendered
that distinguishes it from the other instances on the page. In your event
handler for the HREF, you simply check this value and use it to decide which
page to forward to. You can add a value to an HREF or Button by using the
"addExtraValue()" method. Or, if you are using JATO 1.2, you can add extra
query string NVPs right in the JSP document using the "queryParams"
attribute of the <jato:href> tag. Thus, your one HREFchild and event
handler become "polymorphic" because what they do depends on the context in
which they are invoked.
Now, I still don't have confirmation that this is what you were trying to
do, so until I do, let me explain the exception you're seeing. JATO assumes
that when a request comes in for a page that includes the pageAttributes
NVP, it is a request coming from a previously generated JATO page. Because
of the way JATO works, this means that the request dispatching code should
send the request back to the originally rendered page. For example, if Page
A renders an HREF, which the user then activates, JATO sends the request
back to Page A for handling. All of the HREFs and forms generated during
rendering of Page A actually refer back to Page A, regardless of where those
links or buttons actually pass the request in their event handlers/Command
objects.
So, what's happening when you include the pageAttributes in your HREFs is
that JATO is assuming that a request is being sent to the target page, with
the assumption that the target page has a mechanism in place to handle the
request. This assumption relies on the specification of the "originator" of
the request being specified in the request. For links/HREFs, the name and
value of the HREF is sent along with the request. For forms, the name and
value of the button that was pressed are sent in the request. JATO uses the
presence of these name/value pairs to decide which event handler, or which
Command object, to invoke to handle the request.
The exception you are receiving is saying that there was no object on the
target page that indicated it could handle the request. This is to be
expected, since you have not specified a query parameter that indicates
which CommandField child is responsible the request. However, this is where
I see the disconnect, because that is not what I believe you were trying to
do (as explained above).
So now, given all the information above, can you tell me what you're trying
to accomplish, and whether or not the info I've given you has helped you to
design a mechanism more in line with a JATO approach? If not, given that I
understand what you're trying to do, I can offer a more concrete solution.
Todd
----- Original Message -----
From: <Mark_Dubinsky@p...>
Sent: Monday, November 05, 2001 2:54 PM
Subject: [iPlanet-JATO] Re: session timeout when not submitting to a handler
This is the exception we get:
(And BTW, leaving a blank value for the pageAttributes doesn't help)
[05/Nov/2001 17:49:18:4] error: <portalServlet.processRequest>
javax.servlet.ServletException: The request was not be handled by the
specified handler
at java.lang.Throwable.fillInStackTrace(Native Method)
at java.lang.Throwable.fillInStackTrace(Compiled Code)
at java.lang.Throwable.<init>(Compiled Code)
at java.lang.Exception.<init>(Compiled Code)
at
javax.servlet.ServletException.<init>(ServletException.java:107)
at
com.putnaminvestments.common.jato.ApplicationServletBase.dispatchRequ
est(Compiled Code)
at
com.putnaminvestments.common.jato.ApplicationServletBase.processReque
st(Compiled Code)
at
com.putnaminvestments.bp.portal.portalServlet.processRequest(Compiled
Code)
at
com.putnaminvestments.common.jato.ApplicationServletBase.doPost(Compi
led Code)
at
com.putnaminvestments.common.jato.ApplicationServletBase.doGet(Compil
ed Code)
at javax.servlet.http.HttpServlet.service(Compiled Code)
at com.putnaminvestments.bp.bpServletBase.service(Compiled
Code)
at javax.servlet.http.HttpServlet.service(Compiled Code)
at
com.netscape.server.servlet.servletrunner.ServletInfo.service(Compile
d Code)
at
com.netscape.server.servlet.servletrunner.ServletRunner.execute(Compi
led Code)
at com.kivasoft.applogic.AppLogic.execute(Compiled Code)
at com.kivasoft.applogic.AppLogic.execute(Compiled Code)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Compiled Code)
at java.lang.Thread.run(Compiled Code)
--- In iPlanet-JATO@y..., "Todd Fast" <Todd.Fast@S...> wrote:
Mark--
Initially we tried to add the pageAttributes NVP as well, but that
was
causing an exception, so we stopped doing that.That's odd--what was the exception?
Our problem now is that when the SessionTimes out it does not go
to
onSessionTimeout method as in processRequestMethod of the
ApplicationServletBase it looks for pageAttributes. If it is notnull
then only onSessionTimeOut method is called.This is sadly the only technique for determining if a session hastimed out
and a new one been created, versus the initial creation of thesession.
Is there any work around for this? Maybe you can suggest how topass
the pageAttributes without causing the initial exception?Definitely--let me know what the exception was and I'll be able tosuggest
something. However, it shouldn't really be any harder thanappending a
"jato.pageAttributes=" empty NVP on the HREF.
Todd
Todd Fast
Senior Engineer
Sun/Netscape Alliance
todd.fast@s...
For more information about JATO, please visit:
http://developer.iplanet.com/tech/appserver/framework/index.jsp

OK, here's what I'm trying to do: We have, like you said, a menu
page. The pages that it goes to and the number of links are all
variable and read from the database. In NetD we were able to create
URLs in the form
pgXYZ?SPIDERSESSION=abcd
so this is what I'm trying to replicate here. So the URL that works
is
pgContactUs?GXHC_GX_jst=fc7b7e61662d6164&GXHC_gx_session_id_=cc9c6dfa5
601afa7
which I interpreted to be the equivalent of the old Netd way. Our
javascript also loads other frames of the page in the same manner.
And I believe the URL-rewritten frame sources of a frameset look like
this too.
This all worked except for the timeout problem. In theory we could
rewrite all URLs to go to a handler, but that would be...
inconvenient.

How to deal with session timeouts?

How to deal with session timeouts?
With our current configuration of using single signon, when the web session times out (currently 20 minutes of inactivity), the user loses anything they have entered on a service form. The use case is that a user starts filling out a form and gets interrupted, goes to lunch, etc, returns and spends time filling out the form (in the mean time the web session has timed out). When they try to submit the service they get re-logged in through SSO and they have lost all of their entries in the service. This creates some very unhappy users.
I'd like to know how long other customers set their web session timeouts to and if anyone has come up with ways of handling this situation - either through somehow re-establishing the session or through warnings to the user about how long they have to complete a form.

Hi,
The timeout period for HTTP sessions that are created in the corresponding Web application. After being inactive for the specified timeout, the HTTP sessions expire. The period is specified in minutes:
<!ELEMENT session-timeout (#PCDATA)>
You can only change the session timeout property in the applicationu2019s own deployment descriptors. This is not possible for the Global Web Descriptor.
following may help you:
[Additional Configuration Settings |http://help.sap.com/saphelp_erp2005vp/helpdata/en/a9/7a9602ad094b82a293f06d1cbe2c14/frameset.htm]
Regards,
Sahidur

Iplanet 4.1 - How to set session timeout for a specific application

Hi everyone,
I have a Iplanet 4.1 old web instance running on Solaris 8. We are using this web instance to connect to few application instances running on Websphere 3.5. We have upgraded most of our web/app to higher version except this.
One of the websphere applications need more session timeout. (Which I fuguredout not possible to do on Websphere).
How do I achieve this on Iplanet 4.1.
NOTE: I referred to Iplanet 6.x where we can achieve this by updating web-app.xml timeOut value per URI. I do not find web-app.xml under v4.1
Thanks in advance,

Sorry to say that we can't help here. WS4.1 is obsolete a long time ago.
As you mentioned that you should use WS6.1SPx or WS7.0 for your production and get support.

Handle Session Timeout

I am using JDeveloper 11.1.1.6.
I am trying to gracefully handle session time outs in ADF. My application has been experiencing the 'canned' ADF session timeout popup when I am logged into my application and the session has timed out. That same popup is rendered even if I am sitting at my login page but haven't signed in.
I have followed Frank Nimphius's guidance as explained in the following forum to have my application re-direct to the login page after session timeout. That works great thanks to his well detailed document.
ADF Faces : session timeout best practice
The concern I have now is if I am sitting at my login page and my session times out, the application stays at the login page. I now type my credentials and click log in. Because the application thinks my session is timed out, I am taken back to the login page. Ideally I wouldn't think the login page would hold a session. Do you have any guidance on how I can get around this.

Hi,
what about using programmatic login, in which case the login form is part of a public page (see http://www.oracle.com/technetwork/issue-archive/2012/12-jan/o12adf-1364748.html for an example you can download)
Frank

Handling JSF session timeouts

I'm having a problem when my session in jsf times out. I have a logoutBean that handles the logout functionality for my app. The problem comes in when the session expires after period of time with no activity on the app. If i try then call the logout() method in my logoutBean i get the following error in Tomcat5.5 listed below (this is only a short extract, the exception thrown is a lot longer) Any idea on how to check if the session has expired before you submit a request??
SEVERE: Managedbean TopBean could not be created Can't instantiate class: 'za.co
.vodacom.rms.frontend.bean.TopBean'.. class za.co.vodacom.rms.frontend.bean.TopB
ean : java.lang.NullPointerException
javax.faces.FacesException: Can't instantiate class: 'za.co.vodacom.rms.frontend
.bean.TopBean'.. class za.co.vodacom.rms.frontend.bean.TopBean : java.lang.NullP
ointerException
at com.sun.faces.config.ManagedBeanFactory.newInstance(ManagedBeanFactor
y.java:229)
at com.sun.faces.application.ApplicationAssociate.createAndMaybeStoreMan
agedBeans(ApplicationAssociate.java:306)
at com.sun.faces.el.VariableResolverImpl.resolveVariable(VariableResolve
rImpl.java:97)
at com.sun.faces.el.impl.NamedValue.evaluate(NamedValue.java:145)
at com.sun.faces.el.impl.ComplexValue.evaluate(ComplexValue.java:166)
at com.sun.faces.el.impl.ExpressionEvaluatorImpl.evaluate(ExpressionEval
uatorImpl.java:263)

Here's a listing of my bean :
public class TopBean {
     private UserBean userBean = null;
//some code other code
public void logoff() {
          HttpSession session = (HttpSession)FacesContext.getCurrentInstance().getExternalContext().getSession(false);
          if (session==null) {
               System.out.println("Session is null");
          } else {
               UserController userCon = new UserController();
               if (userCon.logoffUser(userBean)) {
                    System.out.println("successful logout");
               } else {
                    System.out.println("Unsuccessful logout");
I have a logoff button on a jsp page:
<h:commandButton image="images/logoff.gif" alt="Logoff" action="#{TopBean.logoff}" styleClass="linkButton" onclick="javascript:logoffConfirm()"/></td>
The session timeout is 30minutes
<session-config>
     <session-timeout>30</session-timeout>
</session-config>
If after the session times out, i decide to click on logoff so that my logged_on status in my database is updated it throws an exception that it cannot instantiate the class TopBean (i have a bit field in my user table logged_on that needs to get updated otherwise on next logged my app throws error with "user is already logged on"). My bean TopBean gets initialised directly after I log in to my app. As you can see i'm already trying to validate if the session is null, however before i can even call the method it throws "cannot instantiate class TopBean" exception. This indicates to me that once the session has expired, i clears what ever objects that were being held in that session

How are session timeouts handled

Similar Messages

Maybe you are looking for