Session management question

I have a requirement to prevent multiple sessions per user id. So, when a
user logs in to our app, any existing sessions he has must be invalidated.
Does anyone know the correct WebLogic API call to use to locate a session
object for a given user id? I need to call this so that I can invalidate the
existing session.
Thanks,
Rob.

Hi Rob,
Using Servlet 2.3 features this can be done using the sessionCreated and
sessionDestroyed API (chapter 10 of the servlet 2.3 Spec). This Spec has been
implemented in WLS 61.
These methods are provided by the HttpSessionListener interface and they are
called by the container whenever a session is created or destryed as their name
suggests. These methods take in HttpSessionEvent as their parameter which can be
use to get a handle of the corresponding Session object. Once you get this
handle you can store it in a Hashtable with userID as the key.
You can use this Hashtable to verify if the session for a particular user
already exists or not. Once the session is invalidated, the sessionDestroyed
method will be called and this allows you to remove the session handle from the
Hashtable. The Hashtable thus, maintains a list of active sessions in an web
application.
A sample impl:
public void sessionCreated(HttpSessionEvent evt){
sess = evt.getSession();
/* have code to populate the sesion Attributes */
log("\nsession created " + sess.getId() );
log("Session id: " + sess.getAttribute("userID") );
synchronized(this) {
h.put(sess.getAttribute("userID"), sess);
public void sessionDestroyed(HttpSessionEvent evt){
sess = evt.getSession();
log("\nsession destroyed: " + sess.getId() );
synchronized(this) {
h.remove(sess.getAttribute("userID"));
hope this helps,
mihir
Rob Worsnop wrote:
OK. I posted the original message after speaking to BEA tech support. They
had told me there was an API for getting hold of the session. Now they tell
me there is not.
It looks like I have to implement this particular aspect of session
management myself.
It's a pretty simple task - provided you expect no more than a few hundred
users logged on at a particular time.
Anyone got any tips about how to implement this in scalable manner?
Thanks,
Rob.
"Rob Worsnop" <[email protected]> wrote in message
news:[email protected]...
I have a requirement to prevent multiple sessions per user id. So, when a
user logs in to our app, any existing sessions he has must be invalidated.
Does anyone know the correct WebLogic API call to use to locate a session
object for a given user id? I need to call this so that I can invalidatethe
existing session.
Thanks,
Rob.

Similar Messages

NI session manager question

I use NI session manager to control instrument,when I get the instrumenthandle and can testing .but my question is :
if I close instrument power and not close NI teststand,but the teststand can run sucess ,my dll document run in demo.
but I think there must be a error ,and the dll return value is 0. in fact ,if the instrument closed, the return value maybe a negative.
how can I deal with it ?

Hello Sean,
I want to make sure I fully understand your question. Do you have a DLL that you are calling in your TestStand sequence as a code module? If so, does a function within the DLL return a negative number if the instrument is not powered? Is your overall question how can you determine whether the return value from the DLL is negative and make a decision based on this result? Thanks in advance for these answers!
Matt G.
National Instruments
Applications Engineering

Authentication & Session Management questions

Hi. Apex 2.2.1. I'm going crazy trying to set up authentication for my application. I'd appreciate any pointers. My scenario is
Siteminder intercepts all calls to the application
User authenticates with Siteminder
If authenticated, Siteminder sets HTTP_SM_USER in the header
If not authenticated, then APEX is never called
Pull the user out of the header
Create a session if needed
Log the user in if needed
Redirect the user to the request page
I've followed the example that I've found in the forum and set up a page sentry function to create a session when the user first comes in. After that I try to verify that the session belongs to them. That's not working because wwv_flow_custom_auth_std.get_username never returns a value. I think that's because I'm not logging the user in to APEX. I can't figure out the difference between wwv_flow_custom_auth_std.post_login and wwv_flow_custom_auth_std.login. (it probably doesn't help that I inherited the application from some consultants that left a year ago and there is no documentation on it or even APEX here at my site).
Mike

Thanks, Scott. The problem is that it seems to keep looping. You can see from the log that it creates the session, then invalidates it, then creates it, etc.
Mike
debug log
     384     1000     Enter 604 - 1 user MDHENDER session NOT valid
     384     4000     session is NOT valid
     384     4100     dn_network_id is acct\mdhender
     384     5000     creating a new session
     384     5010     created new session
     384     6000     setting up follow up url
     384     6010     follow up url is 604:1:
     384     7000     register new session
     384     7010     registered session
     384     9000     clean exit
     385     1000     Enter 604 - 1 user MDHENDER session valid
     385     3000     session is valid 1707655438517376
     385     3010     authenticated user MDHENDER cookie
     385     3100     marker
     385     3200     marker
     386     1000     Enter 604 - 1 user MDHENDER session NOT valid
     386     4000     session is NOT valid
     386     4100     dn_network_id is acct\mdhender
     386     5000     creating a new session
     386     5010     created new session
     386     6000     setting up follow up url
     386     6010     follow up url is 604:1:
     386     7000     register new session
     386     7010     registered session
     386     9000     clean exit
     387     1000     Enter 604 - 1 user MDHENDER session valid
     387     3000     session is valid 2743127946937676
     387     3010     authenticated user MDHENDER cookie
     387     3100     marker
     387     3200     marker
Here is the code
<code>
CREATE OR REPLACE FUNCTION lmf_siteminder_page_sentry RETURN BOOLEAN IS
vAuthenticatedUsername VARCHAR2(512);
vCurrentSessionId NUMBER;
vDeclaredUser VARCHAR2(512);
vLogFlag VARCHAR2(1);
vMaxIdleMinutes NUMBER := 15;
vNextPage VARCHAR2(1024);
vTransNo NUMBER;
PROCEDURE log_msg(vFlag in varchar2,
vTransNo in number,
vSeqNo in number,
vMessage in varchar2) is
pragma autonomous_transaction;
BEGIN
IF vFlag = 'Y' THEN
insert into sm_debug_log
(transno, seqno, msg)
values
(vTransNo, vSeqNo, vMessage);
commit;
END IF;
EXCEPTION
WHEN OTHERS THEN
rollback;
raise;
END;
-- determine if the siteminder user is authorized
FUNCTION CheckAuthorizedUser(vUserName in varchar2) return boolean is
vDeclaredUser VARCHAR2(512);
BEGIN
-- verify that the user is supposed to have access to the application.
-- a quick check of the authorized users table will settle that question
select dn_network_id
into vDeclaredUser
from user_authorization
where UPPER(network_id) = UPPER(vUserName);
return true;
EXCEPTION
WHEN OTHERS THEN
return false;
END;
-- if the session cookie's user matches our authenticated user then
-- return true
FUNCTION CheckCookieUser(vUserName in varchar2) return boolean is
BEGIN
IF vAuthenticatedUsername = wwv_flow_custom_auth_std.get_username THEN
return true;
END IF;
return false;
END;
FUNCTION URLRedirect(vUrl IN varchar2) return boolean is
BEGIN
log_msg(vLogFlag, vTransNo, 9999, 'redirect => ' || vUrl);
owa_util.redirect_url(vUrl, true);
wwv_flow.g_unrecoverable_error := true;
return false;
END;
BEGIN
BEGIN
select debug, sm_seq_no.nextval
into vLogFlag, vTransNo
from sm_settings;
EXCEPTION
WHEN OTHERS THEN
vLogFlag := 'N';
END;
-- get authenticated user from siteminder. APEX may expect it
-- to be upper case
vAuthenticatedUsername := UPPER(lmf_siteminder_user());
IF wwv_flow_custom_auth_std.is_session_valid THEN
log_msg(vLogFlag,
vTransNo,
1000,
'Enter ' || v('APP_ID') || ' - ' || v('APP_PAGE_ID') ||
' user ' || nvl(vAuthenticatedUsername, '*null*') ||
' session valid');
ELSE
log_msg(vLogFlag,
vTransNo,
1000,
'Enter ' || v('APP_ID') || ' - ' || v('APP_PAGE_ID') ||
' user ' || nvl(vAuthenticatedUsername, '*null*') ||
' session NOT valid');
END IF;
-- no surprise here - let anyone view a page flagged as public
IF htmldb_custom_auth.current_page_is_public THEN
log_msg(vLogFlag, vTransNo, 1010, 'current page is public');
return true;
END IF;
-- redirect all unauthorized users to our no-access page
IF not CheckAuthorizedUser(vAuthenticatedUsername) THEN
-- send the user to our unathorized page
log_msg(vLogFlag,
vTransNo,
1100,
'unable to find dn_network_id for authenticated user ' ||
lmf_siteminder_user());
log_msg(vLogFlag,
vTransNo,
1110,
'try a redirect to ' || '/pls/apex/f?p=' || v('APP_ID') ||
':105:' || vCurrentSessionId || ':');
return URLRedirect('/pls/apex/f?p=' || v('APP_ID') || ':105:' ||
vCurrentSessionId || ':');
END IF;
-- use the current session if it is valid and assigned to
-- our authenticated user
IF wwv_flow_custom_auth_std.is_session_valid THEN
vCurrentSessionId := wwv_flow_custom_auth_std.get_session_id_from_cookie;
log_msg(vLogFlag,
vTransNo,
3000,
'session is valid ' || vCurrentSessionId);
log_msg(vLogFlag,
vTransNo,
3010,
'authenticated user ' || vAuthenticatedUsername || ' cookie ' ||
wwv_flow_custom_auth_std.get_username);
-- if the session cookie's user matches our authenticated user then
-- accept it and proceed with displaying the page
IF CheckCookieUser(vAuthenticatedUsername) THEN
wwv_flow_custom_auth.define_user_session(p_user => vAuthenticatedUsername,
p_session_id => vCurrentSessionId);
return true;
END IF;
log_msg(vLogFlag, vTransNo, 3100, 'marker');
-- the names do not match. assume that someone hijacked the session.
-- invalidate it and bump them out
-- Unset the session cookie and redirect back here to take other branch
wwv_flow_custom_auth_std.logout(p_this_flow => v('APP_ID'),
p_next_flow_page_sess => v('APP_ID') || ':' ||
nvl(v('APP_PAGE_ID'),
0) || ':' ||
vCurrentSessionId);
wwv_flow.g_unrecoverable_error := true;
log_msg(vLogFlag, vTransNo, 3200, 'marker');
-- tell APEX that we are not pleased
return false;
END IF;
log_msg(vLogFlag, vTransNo, 4000, 'session is NOT valid');
-- we did not have a valid session so verify that the user is supposed
-- to access our application. a quick check of the authorized users
-- table will settle that question for us
BEGIN
select dn_network_id
into vDeclaredUser
from user_authorization
where UPPER(network_id) = vAuthenticatedUsername;
log_msg(vLogFlag, vTransNo, 4100, 'dn_network_id is ' || vDeclaredUser);
EXCEPTION
WHEN NO_DATA_FOUND THEN
-- send the user to our unathorized page
log_msg(vLogFlag,
vTransNo,
4900,
'unable to find dn_network_id for authenticated user ' ||
vDeclaredUser);
log_msg(vLogFlag,
vTransNo,
4910,
'try a redirect to ' || '/pls/apex/f?p=' || v('APP_ID') ||
':105:' || vCurrentSessionId || ':');
return URLRedirect('/pls/apex/f?p=' || v('APP_ID') || ':105:' ||
vCurrentSessionId || ':');
END;
-- create new session
log_msg(vLogFlag, vTransNo, 5000, 'creating a new session');
wwv_flow_custom_auth.define_user_session(p_user => vAuthenticatedUsername,
p_session_id => wwv_flow_custom_auth.get_next_session_id);
log_msg(vLogFlag, vTransNo, 5010, 'created new session');
wwv_flow.g_unrecoverable_error := true;
-- set cookie
-- set the followup URL to page 1
log_msg(vLogFlag, vTransNo, 6000, 'setting up follow up url');
vNextPage := to_char(wwv_flow.g_flow_id) || ':1:';
log_msg(vLogFlag, vTransNo, 6010, 'follow up url is ' || vNextPage);
--wwv_flow_custom_auth.remember_deep_link(p_url => vNextPage);
--log_msg(vLogFlag, vTransNo, 6020, 'completed follow up url');
--IF owa_util.get_cgi_env('REQUEST_METHOD') = 'GET' THEN
-- wwv_flow_custom_auth.remember_deep_link(p_url => 'f?' ||
-- wwv_flow_utilities.url_decode2(owa_util.get_cgi_env('QUERY_STRING')));
--ELSE
-- wwv_flow_custom_auth.remember_deep_link(p_url => 'f?p=' ||
-- to_char(wwv_flow.g_flow_id) || ':' ||
-- to_char(nvl(wwv_flow.g_flow_step_id,
-- 0)) || ':' ||
-- to_char(wwv_flow.g_instance));
--END IF;
-- register new session with the application
log_msg(vLogFlag, vTransNo, 7000, 'register new session');
if 0 < 1 then
wwv_flow_custom_auth_std.post_login(p_uname => vAuthenticatedUsername,
p_flow_page => vNextPage);
log_msg(vLogFlag, vTransNo, 7010, 'registered session');
else
wwv_flow_custom_auth_std.login(P_UNAME => vAuthenticatedUsername,
P_PASSWORD => 'dummy',
P_SESSION_ID => v('APP_SESSION'),
P_FLOW_PAGE => v('APP_ID') || ':1');
log_msg(vLogFlag, vTransNo, 7011, 'registered session');
end if;
if 0 > 1 then
owa_util.mime_header('text/html', FALSE);
owa_cookie.send(name => 'LOGIN_USERNAME_COOKIE',
value => vAuthenticatedUsername,
expires => null,
path => '/',
secure => 'yes');
owa_cookie.send(name => 'HTMLDB_IDLE_SESSION',
value => to_char(sysdate + (vMaxIdleMinutes / 1440),
'DD-MON-YYYY HH24:MI:SS'),
expires => null,
path => '/',
secure => 'yes');
end if;
log_msg(vLogFlag, vTransNo, 9000, 'clean exit');
-- tell htmldb engine to quit
return false;
EXCEPTION
WHEN OTHERS THEN
return false;
END;
</code>

What is the difference between Session timeout and Short Session timeout Under Excel Service Application -- session management?

Under Excel Service Application --> session management; what is the difference between Session timeout and Short Session timeout?

Any call made from the API will automatically be set to the “Session Timeout” period, no matter
what. Calls made from EWA (Excel Web Access) will get the “Short Session Timeout” period assigned to it initially.
Short Session Timeout and Session Timeout in Excel Services
Short Session Timeout and Session Timeout in Excel Services - Part 2
Sessions and session time-outs in Excel Services
above links are from old version but still applies to all.
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Session Manager not thread safe

We are running 6.0 web server with IWSSessionManager turned on. We have the failover set to true so that we always load from the persistent store.
We had a situation where a frame set invoked 2 requests to the application. The logic in the session manager seems to be for each request:
1) the session is loaded from the database.
2) the new session overwrites the session in memory.
3) the servlet/jsp uses that session.
4) that session is persisted.
Now.. if only one of the requests actually modifies the session then threadA and threadB have 2 session instances which have unique objects with the same session id. The last one to complete is stored in the database. This would result in data loss. (btw.. the code in question is IWSSessionManager.getSession(String id, ServletContext context)).
Has anyone else seen this, or have we set up something really wacky?
Thanks!
-- bk

c

Win 7 "Desktop WM Session Manager" stopped by FW CS5

Whenever I start Fireworks CS5 it stops my "Desktop Window Manager Session Manager" thus disabling Aero in WIndows 7.
Any clues on how to prevent this from happening??
Everything seems to work fine elsewhere (Photoshop, InDesign, Illustrator) just Fireworks has a problem.

This seems like an older issue.
http://superuser.com/questions/26195/issue-with-fireworks-8-on-vista-windows-7-and-aero
Can someone please comment if they have this happen also.
Is there some kind of work around that anyone knows of?

Database session management in APEX

How is the database session managed in APEX? I found that sometimes a database session can last from page to pages in an APEX application, but sometimes every page starts a new database session.
Is there a way to control the database session in APEX?
Thanks,
-Fengting

Since HTTP is a stateless and connectionless protocol, you are not guaranteed to get the same database session between pages. APEX maintains the session state implicitly. Each session is assigned a unique identifier with APEX. The APEX engine uses the session ID to store and retrieve the applications working set of data or session state before and after each page view.
The session information persists in the database until purged. Therefore, as long as the client's session cookie has not expired, a user can continue running the application long after having first launched it. This is also what allows a user to run multiple instances of an application simultaneously in different browser sessions.
That being said, I think the answer to your question is that it is not necessarily going to be the same database session (but could be), nor can you control it. You should use session state.

What's the role of jsessionids in ADF session management?

Hi all,
I'm fairly new to ADF and I've had a client ask me if ADF is using jsessionid consistently for sessionization.
From a quick google search it sounds like all J2EE applications will be using jsessionids as part of their session management, and it doesn't look too difficult to access this information programmatically. Can anyone elaborate for me on what exactly jessionids are and whether they are guaranteed to exist if a session of an ADF application has been instantiated? Basically I think I know the answer to my client's question is yes, but can anyone help me understand the role of jsessionids in ADF apps and other J2EE apps?

Hi.
This is a basic behavior in all Java application servers, as it is mandated by the Java Enterprise Edition specification. The ID is used to match the HTTP request to its session object. Basically, the web container will add jsessionid to the URL when the session id cannot be saved in a cookie. This behavior can also be enforced through settings in weblogic.xml, for example, if you are using WLS.
ADF is built on the top of JEE; consequently, it uses jsessionid in exactly the same way as any other Java application.
Best Regards,
Frédéric.

Session management in JAX-RCP with JWSDP 1.0_01

Hi all,
How can I access to the HTTP Session of the TOMCAT which run the Web Services engine?
Browsing by the API I've found the method getHttpSession() in the interface javax.xmlrpc.server.ServletEndpointContext.
How can get an instance which implements this interface?
Regards,
C�sar.

An old thread but I have a question re session management and web services.
The documentation for ServletEndpointContext says getHttpSession returns null if there is no HTTP session currently active and associated with the service endpoint. It further says the endpoint class should not rely on the HTTP session always being there.
I need to ensure a session is active after a user successfully logs in. Other than spending alot of time implementing session management myself its the only way to tell whether the service requestor is allowed to use the service. Is the session not guaranteed to be active to take account of things like session timeout? Under normal circumstances where the user is sufficiently active to prevent timeout is it reasonable to assume the session will be there?

Session management thru SOAP services

          Hi I am trying to deploy our application in a clsutered environment. Previsouly
          I had some problems with http session replication. That problems were solved but
          now I have another problem.
          Our application has multiple clients, some are browser based and some are swing
          based that use our SOAP services.
          all browser based clients use httpsession for session management, since weblogic
          replicates the httpsession, we have no problem clustering http webapps. But SOAP
          services has no access to httpsession.
          We have implemented our own session management (we cache the app specific session
          objects) so that SOAP services works fine (SOAP services doesn't have access to
          httpsession, so we could not use httpsession for session management). Each method
          in our soap services takes a sessionid and we get the session objects (not http
          session objects but our app specific session objects) based on the sessionid.
          But now that our application is clustered, the session cache mechanism doesn't
          work since its not replicated thru out the clusters.
          I thought I could use stateful session beans to cache the sessions, but how do
          I cache the SFSB thru out the session w/o sending any references to the SFSB to
          the client. I know I can send the Handle reference to the client but We cannot
          change the SOAP API now. The only information client has is the session id.
          My question is: How do I use SFSB w/o changing my soap services method paramaters.
          My SOAP method looks like methodName(String sessionid, ..............)
          I could use a clustered cache but we can't buy anything in the current situation.
          Any help would be appreciated.
          Praveen


Well, does the DSM log have any details? (see [Note 529924|https://service.sap.com/sap/support/notes/529924] on how to view the logs)
My guess is that you are using different protocols between the dispatcher and a backend system: they both have to use HTTP or both use HTTPS (as described in the same note). That would also explain why the URL for the direct connection to the portal doesn't present the error, if that URL has the same protocol as the backend.
Regards,
Sean

BI Administrator error: Session Management will not work

Hi!
I am about to set up BI Administrator Addon in SAP Portal. All the configuration steps seems to be ok.
Unfortunately when I try to start some of applications of BI Administrator I get the following error:
Session Management will not work.
Please check the DSM log file for details
Question:
How can I solve this problem?
Thank you very much!
regards

Hi
This error means--Please notify us of this problem by submitting an IT Service Request (Please Note: In order to log into the Infra system, you will need to preface your NKU account with nku\. For example, if your user name is smithj7, the "User Name" field would need to be populated with nku\smithj7.)
under the problem type "SAP BW/Portal.
Much of EP / BASIS issue.
Hope it helps

Session Managed Beans + Session Destory

Hey guys,
I have an simple question. How can I destroy an Session in JSF. For Example if I have an Manged Beans in scope Session:
        <managed-bean>
          <managed-bean-name>User</managed-bean-name>
          <managed-bean-class>example.user.User</managed-bean-class>
          <managed-bean-scope>session</managed-bean-scope>
     </managed-bean>          This would instance if an User successful logged in. But if the User logged out, I can set all attributes = Null; But the easier and better way is to destroy the Session. But how can I destory an Session Managed Bean?
Thanks for help

Yes, there's an easy way.
          //Reset current state of application (for the current user) by
          //invalidating the session
          HttpSession session = (HttpSession)FacesContext.getCurrentInstance().
               getExternalContext().getSession(false);
          if (session != null)
               session.invalidate();CowKing

I have a problem with session manager session files because of the invalid json storage data submited by firefox

Hi, i have problem with session manager's session files. The problem is: the submitted storage data from firefox which is put between "storage":{ and its matching closing brace } But in some of my session files there is non equal { and } under storage's braces. I need to get storage data but in my case it is very hard to do. My question is there any char put before or after { and } like /{ or \{ to avoid confusion? If there is not such thing, i think there could be different solution but i am not sure: i look couple of my session files; after "storage":{...} there is ,_"formDataSaved" so i can get storage data in this example ... by looking between "storage":{ and ,"_formDataSaved" easily. Is there every time ,"_formDataSaved" after "storage":{ ? Thank you.

Well, it seems waiting is not my strong suit..! I renamed a javascript file called recovery to sessionstore. This file was in the folder sessionstore-backups I had copied from mozilla 3 days ago, when my tabs were still in place. I replaced the sessionstore in mozilla's default folder with the renamed file and then started mozilla. And the tabs reappeared as they were 3 days ago!
So there goes the tab problem. But again when I started mozilla the window saying "a script has stopped responding" appeared, this time the script being: chrome//browser/contenttabbrowser.xml2542
If someone knows how to fix this and make firefox launch normally, please reply! Thank you

FF29 fails to load Session Manager, old tabs, any add-ons, Cool Preview, etc after upgrade on XP

FF29 fails to load Session Manager, old tabs, any add-ons, Cool Preview, etc after forced upgrade on an XP system. Connecting to sites, especially support.mozilla.org requires numerous retries. Clicking Add0on shows none of the previous working ones. They are gone. No Session Manager at all. Even reporting this has taken over 3 hours. Yesterday, everything worked fine before the restart to 29. What can be done to recover settings from 2-3 days ago? Thanks for keeping it simple!

Thank you for your question. Once history is gone, there is not a big chance of getting it back. However there are some places to check. For next time, try to backup your profile [http://kb.mozillazine.org/Profile_backup].
The crash reports from your troubleshooting information is caused by a hang in the Flash plug in version 13. I understand however that this is an issue with the history.
*[[Recovering important data from an old profile]]
*[[https://addons.mozilla.org/en-US/firefox/addon/cacheviewer/ Cache Viewer]] is an add on to help you search through the dates of the history
*SQLite add on will allow you to open places.sqlite file in the current profile.

Session Manager with i3/Awesome/Xmonad?

Hello, First post here so let me know if I am doing anything wrong,
I recently started using i3 and I could not recommend it more, I have given xmonad a shot and was a big fan and I know a lot of people seem to like Awesome, my only question is...
Are there any session managers that would work for any of them?
I love them but I spend a lot of time getting things just right so I have a nice flow at work (I loooooove i3 once I have everything where I want it). Before switching to xmonad from xfce4 I always had my work from office session, my work from home session, and one or two others. Anyone know of any way to save sessions in one of the mentioned window managers? Or are there any other window managers I should look into for this feature?
Thanks!!

I think this session thing is about stopping the applications in a way that you can start them again.
1. Different users/computers - It's very static and doesn't really scale.
2. Any X11 Session Manager - You have to log out of X11 and you can only have one session open.
3. My super script - For sessions on a tag/workspace level. Sorry for the bad english and bash. I'm about to rewrite it, it will support i3 and openbox. But maybe I should wait for wayland.
I have read that systemd article more than once, but I didn't understand if it's limited to 2 or not?

Session management question

Similar Messages

Maybe you are looking for