Multiple browser instances receiving same session ID

I am using Firefox with OC4J, and I've discovered that multiple simultaneous instances of the browser are receiving the same session ID. This is a pretty serious problem I beleive, as it prevents the ability to safely store one browser instance's state information safely in the session. In other words, one browser instance's behavior can stomp on another browser instance's state data.
Does anyone know what criteria OC4J is using to determine session IDs, and whether to create a new session or deliver an existing one?
Thanks,
Brad

Tugdual,
Another comment -- the case where the cookie does not exist or is expired isn't the problem. The problem is when the cookie is valid and another browser instance is opened. Since the browser instances access the same cookie, you have no way of knowing on the server side that you are actually talking to two different browser instances. Hence, any storage of state information that is contextual has the potential to be stomped on by the other browser instances.
In my case, one browser instance (the result of a new window spawn in a UIX page) was knocking over the original window, because it was overwriting some important state infomration.
Brad

Similar Messages

Multiple HttpSession instances for same session/sessionid?

Is it possible that my servlet code may encounter different HttpSession Java objects that infact represent the same session and have the same sessionid? (Assuming non-replicated sessions and single JVM)
I am wondering as we are doing "request serialization per session" by synchronizing on the requests' HttpSession objects, and it (on rare occasions) seems not to work out...
//Mike

"Mike Wilson" <[email protected]> wrote in message news:41722d5e$1@mail...
Ok! So you're saying that encountering multiple HttpSession objects with the
same sessionid during concurrent requests is a legitimate situation? II did not say that. I said that if you wanted to serialize access to
objects contained in the session you needed to serialize on the content,
not HttpSession object itself. That main reason for this you may be getting
new HttpSession proxies or delegates everytime request is sent and those
proxies will refer to the same session conntent, but referencese may be
incomparable so serialization that objects will no work.
tried to look this up in the servlet spec but didn't really find anything mentioned...
(apart from the fact that as it is not mentioned it is not forbidden).
Do you know if this is weblogic specific behaviour, or if it seen on many
containers?Not understaning what is being done is platform-independent.
As I understand your solution I could instead sync on an object added to the
session with the setAttribute() method?That's right.
Regards,
Slava Imeshev
>
Thanks
Mike
"Slava Imeshev" <[email protected]> wrote in message news:4171fb2b$1@mail...
Try to serialize on objects that are under your control, i.e. HttpSession
content, not on the HttpSession object itself.
Slava
"Mike Wilson" <[email protected]> wrote in message
news:14069661.1097764200040.JavaMail.root@jserv5...
Is it possible that my servlet code may encounter different HttpSession
Java objects that infact represent the same session and
have the same sessionid? (Assuming non-replicated sessions and single
JVM)
I am wondering as we are doing "request serialization per session" by
synchronizing on the requests' HttpSession objects, and it
(on rare occasions) seems not to work out...

Multiple AIA instances on same Linux box

H,
Can multiple SOA instances be deployed on same linux box then with AIA on top of it.
Can some one pls answer this?
Regards,
Rakesh

Yes you can but:
Each SOA installation must be in his own ORACLE_HOME directory.
Each AIA installation must be in his own ORACLE_HOME directory.
You must point to different databases. You can not have mulitple SOA schema's in one sinlge database.
Marc
http://orasoa.blogspot.com

Multiple AIA instances on same server?

Hi,
Does anyone know how to install multiple AIA instances on the same SOA server? The installer hints that this might be possible, although I have not seen how this is done because the installer expects an empty oracle home path. The only information I have found so far is for an earlier 2.x release of AIA and that suggested:
"Each SOA installation must be in his own ORACLE_HOME directory.
Each AIA installation must be in his own ORACLE_HOME directory.
You must point to different databases. You can not have mulitple SOA schema's in one sinlge database."
Is this true?
Thanks,
Kev.

957354 wrote:
Hi Laxman,
If its a testing purpose its ok to have a one oracle_home and single listener for multiple DB. One problem when applying oracle patches for one of the instances running in a multiple DB running then you need to bring all the DB running in that host since the oracle_home is sharing between all db instances.
Thanks
Sunil Rajesh K.C.Starting with 11g, patchset updates are full installs and done into a new home. This makes it possible to migrate one instance at a time. However, your point would be a consideration for one-off patches like CPUs.
However, please note ... OP --- PLEASE NOTE even with multiple oracle homes, you still only need a single listener.

Multiple DMVPN Instances on Same WAN Interface

Hi Folks,
Is it possible to run Multiple DMVPN Instances on a single WAN Interface ? Can we for example configure 3 Tunnels on a Router using one same WAN Interface but running separate EIGRP Instances for each Tunnel ? Kindly let me know , Alioune

Hi Alioune,
Yes you can create DMVPN as you said with one WAN interface that is possible..... you can have multiple tunnel interfaces pointed to a WAN interface as the source interface which resides in public zone..... with different public ip's as the destination tunnel...
interface Tunnel1
description ** A-VPN Tunnel **
bandwidth 100000
ip vrf forwarding red
ip address 10.0.252.2 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1500
load-interval 60
tunnel source GigabitEthernet0/0 (WAN Interface)
tunnel destination 1.1.1.1
tunnel protection ipsec profile dmvpn
interface Tunnel1
description ** B-VPN Tunnel **
bandwidth 100000
ip vrf forwarding red
ip address 10.0.252.5 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1500
load-interval 60
tunnel source GigabitEthernet0/0 (WAN Interface)
tunnel destination 2.1.1.1
tunnel protection ipsec profile dmvpn
like the above..... shown sample...
Please rate if the given information helps!!!

Multiple RFC calls in same session

Hi All,
I'm looking for a way to execute multiple RFCs (one after the other) within the same "session". The reason I need to execute them within the same session is because the initial RFCs store information in ABAP memory (EXPORT x TO MEMORY ID y) and subsequent ones will use that information (IMPORT x FROM MEMORY ID y) for further processing. I thought I could do it all as a transactional RFC call but as one of the RFCs invokes the GUI, it seems to cause complications. I don't think tRFCs are the correct solution because it invovles client interaction from the GUI in one of the calls.
Has anyone tried to do this with the .NET Connector before? I've tried reusing the connection but it seems to get reset after the first call. Please help!
Tim.

Hi Tim,
How are you doing ?
A session [when using NCo] is the length of time that the connection is open.
please let me know why the connection is being reset.
the client number is a mandatory attribute in any connection string, it is a part of a composite key which uniquely identifies the user
please let me know how you would like to proceed ?
with respect,
amit

Simulate Multiple users connecting to same session

Hi All,
Is there anyway we can simulate multiple users connecting to the same session in oracle using PL/SQL.
Thanks,
MK.

As per the architects in our company, lots of users connect to the same session and access the database.Exactly what does this mean? A single session can service one user at a time. I would wager that the architects are envisioning (or describing) a connection pooling setup where the middle tier server maintains a relatively small number of connections to the database (each with its own session most likely) and users operate by getting a connection from the pool, making a request, and returning the connection back to the pool. At any given point, only one user can be using a connection.
If that's the case, you would simulate this by simply executing code in a loop in PL/SQL.
Of course, if this is the case, each connection in the connection pool would its own copy of the collection and so each connection would get its own list of order numbers. You'd have to develop some way to ensure that each session populated its collection with a different set of order numbers.
Justin

Multiple users to share same session

Hi guys. I am writing a Flash game, where the state of the game and the moves will be stored in the session. Several users will be sharing the same game session though.
Flash will send variables containing the move made by a particular player to a Servlet, that will be on a different web server. That Servlet will then return to Flash, when requested an XML response containing the state of the game for the next player.
Lets say there are always 3 players playing per game. How do I share this same session among those 3 users?
Question 1:
Is there a way to store a Vector of sessions in a Servlet?
Question 2:
Supposed the above answer is yes, I could send back and forth an id for the session between Flash and the Servlet. Is it possible to associate a session stored with a particular id? And how would I retrieve that session based on a given id?

Do you want to run multiple games concurrently? If so, the application object won't work, because all the user data will then be available to all users.
I would recommend that you continue to use the session-per-user paradigm. Instead of storing all the game data in session, store it in a global lookup structure (a Singleton or static variable of the servlet, probably a Hashtable). Key the game data for each user off of a unique id (potentially the session id?). In each user session, store the id's of the other users they are playing against.
So, when you are responding to a request from one user, you can quickly get the id's for the other players, use those to lookup the necessary game data for those users, and then use it to create your response.
At that point, all you need is some way to expire the data from your storage structure. If you store a "last access" timestamp along with the game data, you can use a thread to expire old data in much the same way that a session would be expired.

Multiple web services sharing same session?

I was wondering if anyone has ever implemented multiple web services for an application that allowed the web services to share the same session?
Furthermore, I was wondering if support might be included/buried in the WSDL spec. somewhere?

There are a number of standards emerging to support long-running conversations among Web services as well as Web service composition. Can you expand on what you're trying to achieve?
Doron.
Collaxa, Inc.

Multiple dialog instances on same host for different System

Dear Sir,
I install two dialog instances on same host ,one for DEV one for QAS.
First I install dialog instance for DEV and startup with no error.
Second dialog instance for QAS install with success end ,but can not start dispatchers.
Service
sapmsDEV     3600/tcp     # SAP System Message Port
sapmsQAS     3601/tcp     # SAP System Message Port
sapdp01s 4701/tcp # SAP System Dispatcher Security Port
sapgw01s 4801/tcp    # SAP System Gateway Security Port
sapdp00       3200/tcp     # SAP System Dispatcher Port
sapdp00s 4700/tcp # SAP System Dispatcher Security Port
sapgw00       3300/tcp # SAP System Gateway Central Instance Port
sapgw00s 4800/tcp # SAP System Gateway Security Port
Disp_dev
***LOG Q0I=> NiPConnect2: SiPeekPendConn (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 8716]
ERROR => MsIAttachEx: NiBufConnect to sap-qas/sapmsQAS failed (rc=NIECONN_REFUSED) [msxxi.c      633]
***LOG Q0L=> DpLoopInit, nomscon () [dpxxdisp.c   1549]
Stderr
D:\usr\sap\QAS\D01\work>ntscmgr start MSSQLSERVER -m sap-qas
failure: StartService, NT ErrorMessage: An instance of the service is already running. StartService SUCCESS
D:\usr\sap\QAS\D01\work>ntscmgr start SQLSERVERAGENT -m sap-qas
failure: StartService, NT ErrorMessage: An instance of the service is already running. StartService SUCCESS
It seem that first startup dialog instance already start MSSQLSERVER -m sap-dev and SQLSERVERAGENT -m sap-dev, so next instance can not start again ,and cause NICONN_REFUSED.
Could someone help me?
Thanks
Regards,
Matt

It appears to be possible, at least in IDM 7.1
The release notes and Installation guide reference a setting called waveset.serverId that you set in your application server startup script like so:
-Dwaveset.serverId=Name
This would allow each JVM to identify itself differently from any others running on the same physical server.
I haven't tried this yet myself, so caveat emptor.
Jason

Applescript to get the Url's of Safari for multiple browser instance??

Hi All,
am trying to get the URL's of the opened windows in more than one instance of Safari.
I have got the script to get the url's of single instance, Pls suggest the same for multiple instances of safari browser with different windows opened for each instance. current code am uisng:
tell application "System Events"
          set theURL to URL of current tab of window 1
end tell

Try this:
set theURLs to {}
tell application "System Events"
    get id of processes whose name is "Safari"
    repeat with thisID in result
        tell (process 1 whose id is thisID)
            tell windows
                copy value of text field 1 of group 2 of tool bar 1 to the end of theURLs
            end tell
            tell (windows whose name contains "abc")
                click button 1 -- close
            end tell
        end tell
    end repeat
end tell
theURLs

Multiple IDM instances on same host

Can multiple Identity Manager app server instances be run on the same host, connecting to the same db? If so, how is this accomplished. From what I see Identity Manager instances attempt to register themselves using the host name. Is there a property in the properties file that can set a unique name?

It appears to be possible, at least in IDM 7.1
The release notes and Installation guide reference a setting called waveset.serverId that you set in your application server startup script like so:
-Dwaveset.serverId=Name
This would allow each JVM to identify itself differently from any others running on the same physical server.
I haven't tried this yet myself, so caveat emptor.
Jason

Multiple SIM instances on same db - disable Active Sync for one?

Hello. I am trying to set up two instances of Identity Manager that are running on the same machine and are connected to the same database.
I want one to be doing the Active Sync provisioning and the other to not.
Is there a way to disable Active Sync resources from starting up on one instance but not the other? I know I can manually start them, but I'd like the Active Sync resources to automatically start up for one of the servers.
I am using -Dwaveset.hostname and setting it to a different value for each instance.
Thanks.

957354 wrote:
Hi Laxman,
If its a testing purpose its ok to have a one oracle_home and single listener for multiple DB. One problem when applying oracle patches for one of the instances running in a multiple DB running then you need to bring all the DB running in that host since the oracle_home is sharing between all db instances.
Thanks
Sunil Rajesh K.C.Starting with 11g, patchset updates are full installs and done into a new home. This makes it possible to migrate one instance at a time. However, your point would be a consideration for one-off patches like CPUs.
However, please note ... OP --- PLEASE NOTE even with multiple oracle homes, you still only need a single listener.

Multiple WL instances on same machine with multiple clusters

Hi,
          I am wondering if it is possible to run two separate instances of WL on a
          single machine, with each instance belonging to a separate cluster? The
          machines are not multi-homed, so each instance must listen on a separate
          port.
          Our current architecture looks like this:
          4 web servers running NSAPI WL plug-in
          3 app. server boxes running WL 5.1 SP2
          I would like to start multiple instances of WL on each app. server to better
          utilize the hardware, and would like each instance to be part of a separate
          cluster.
          My questions are:
          1. Do I have to have a separate multicast address for each cluster, or can
          I use the same address since the clusters are on different ports?
          2. In the NSAPI plug-in, you simple specify a list of all the servers for a
          cluster. Are there any issues with having the machine/port names in this
          list belonging to different clusters?
          Thanks,
          Bob


Comments inline.
          Cheers - Wei
          www4.weblogic.com <[email protected]> wrote in message
          news:[email protected]...
          > Hi,
          >
          > I am wondering if it is possible to run two separate instances of WL on a
          > single machine, with each instance belonging to a separate cluster? The
          > machines are not multi-homed, so each instance must listen on a separate
          > port.
          Yes, you can. FYI, in addition, each cluster use different multicast
          address.
          >
          > Our current architecture looks like this:
          >
          > 4 web servers running NSAPI WL plug-in
          > 3 app. server boxes running WL 5.1 SP2
          >
          > I would like to start multiple instances of WL on each app. server to
          better
          > utilize the hardware, and would like each instance to be part of a
          separate
          > cluster.
          >
          > My questions are:
          >
          > 1. Do I have to have a separate multicast address for each cluster, or
          can
          > I use the same address since the clusters are on different ports?
          Different multicast addresses.
          >
          > 2. In the NSAPI plug-in, you simple specify a list of all the servers for
          a
          > cluster. Are there any issues with having the machine/port names in this
          > list belonging to different clusters?
          In-memory replication will not work.
          >
          > Thanks,
          > Bob
          >
          >
          >

Bug - multiple related instances of same class

We've discovered a rather subtle bug in the process by which Kodo
searches for reachable related objects to persist. If an instance of a
PC class (A) has two relationships to the same PC class (B), and both
related instances of B have the same value for their PK-field, then only
one of the related instances of B will be persisted.
Obviously, this problem only occurs in the context of application
identity. We've only encountered it when all the instances involved are
newly created and being made persistent for the first time (else the
instances would have different PK-values). It should also be noted that
we're assigning PK-values in jdoPreStore(). Here's the specific
situation we encountered:
Class A has two relationships to class B, represented by fields "B b1"
and "B b2". In our case, A.b1 is the many-side of a bidirectional
one-to-many relationship; the one-side is implemented by a field "List
aList" in B. A.b2 is the navigable side of a unidirectional
relationship; there is no corresponding field in B. (We haven't checked
whether or how the cardinality or navigability of the relationships
affects the problem.)
Let "a1" be the sole instance of A. If a1.b1 is set to an instance of B
but a1.b2 is null, and makePersistent( a1 ) is called, then a1 and b1
are persisted correctly and the relation field b2_id in TableA is NULL.
However, if a1.b2 is set to a second instance of B and both instances of
B have the same initial value of their PK-field, then a.b2 is not
persisted. Only one record is added to TableB; it corresponds to A.b1.
Interestingly, in this case the relation field b2_id in TableA is not
NULL, but has the default value of b2's PK-field. jdoPreStore() is not
called on b2 and b2 is not persisted, but its PK-field is read in the
process of persisting a1.
Since we've placed the jdoPreStore() callback in a common non-persistent
adapter superclass, we're currently able to work around the problem with
a static "seed" PK value that is incremented in the superclass default
constructor to provide a unique initial value for each PK-field. If
anyone would like the code for this approach we'll post it, although
it'll become unnecessary when the problem is fixed.
Jerry Pulley
Sr. Developer
Commerce Technologies, Inc.

I'm curious what behavior, besides throwing an exception, could even be
possible. If the pm discovers two object with the same id, it seems that it
has to choose one of them to make persistent. How could it possibly resolve
differences in the fields of the two instances in deciding which one is the
correct one to put in the db? Additionally, allowing this behavior could
lead to subtle, difficult to detect bugs in your program, since ( as Abe
points out ) JDO promises that there will only be one instance of an object
with a given primary key per PM. Other code may make decisions based on
this expectation ( like refreshing one of the objects after making a change
in a different PM ), that would lead to problems for code still hanging on
to the second instance.
IMHO, it should throw an exception.
-Eric
"Abe White" <[email protected]> wrote in message
news:[email protected]...
Thanks for the bug report! However, I'm not entirely sure that this is a
bug (at least not the bug you think it is); either way it's an extremely
interesting case. The reason I say it might not be a bug is thatassigning
pk values in jdoPreStore seems suspect.
We know that a single PM cannot at any time contain multiple instances
with the same oid value, app id or otherwise. This is obvious from the
getObjectById method -- only one object can have a particular oid.
We also know that jdoPreStore is called only for instances managed by a
PM (duh!).
Thus it should not be possible to see a case where jdoPreStore is
called for 2 objects with the same initial oid.
Now, I realize that when you're dealing with persistence-by-reachability
things become less clear. However, I think the general point stands: at
the time that the objects are made persistent they all must have unique
oid values, and objects must be made persistent before jdoPreStore is
called.
Technically we could get around this. The current
persistence-by-reachability algorithm is something like:
flushed = {}
while flushed.size < persistent.size:
for each persistent instance:
if instance not in flushed:
instance.jdoPreStore // may persist more instances
instance.persistFirstClassFields // may persist more too
flushed += instance
In sum this is a breadth-first method of persisting relations. It could
be changed to a depth-first system instead of persisting all first class
fields each one is persisted and then immediately the algorithm is
repeated for that object before the other fields are touched. However,
this seems like it might lead to other unexpected behavior.
Generally, it just seems like waiting till jdoPreStore to assign the oid
of an object seems like a bad idea. I think the real bug is that Kodo is
not throwing an exception as soon as 2 object with the same oid are
detected (currently it just lets one overwrite the other in the cache,
which results in the behavior you see).
Does anyone else have an opinion on this? I'm certainly not fixed on my
interpretation of things; if you disagree I'd be very interested in
hearing other arguments.

Multiple browser instances receiving same session ID

Similar Messages

Maybe you are looking for