Unique Session en web application?? How?

How can i to force in my web application that my clients can only loggon one time at same time?, local vars in the application? if the client shutdown de PC?, i use OID for authentication, any way?
Any data, url?
Thanks

You basically have to keep track of who is logged in yourself. Use an HttpSessionBindingListener to make sure you are notified when a session expires, so you can let the user back in.

Similar Messages

Not able to clear session of web application running inside wpf browser control

Hi,
I have used below code to clear session of web application running inside wpf browser control .
[DllImport("wininet.dll", SetLastError = true)]
private static extern bool InternetSetOption(IntPtr hInternet, int dwOption, IntPtr lpBuffer, int lpdwBufferLength);
InternetSetOption(IntPtr.Zero, INTERNET_OPTION_END_BROWSER_SESSION, IntPtr.Zero, 0);
This code is working in Windows 8 but it is not working in windows 7 and windows 8.1.
I want to know why it is not working and how to make it work in windows 7 and windows 8.1
Please help.
Thanks & Regards,
Pritesh

Hi,
I have used below code to clear session of web application running inside wpf browser control .
[DllImport("wininet.dll", SetLastError = true)]
private static extern bool InternetSetOption(IntPtr hInternet, int dwOption, IntPtr lpBuffer, int lpdwBufferLength);
InternetSetOption(IntPtr.Zero, INTERNET_OPTION_END_BROWSER_SESSION, IntPtr.Zero, 0);
This code is working in Windows 8 but it is not working in windows 7 and windows 8.1.
I want to know why it is not working and how to make it work in windows 7 and windows 8.1
Please help.
Thanks & Regards,
Pritesh

Can't record web session in Web Application Transaction Monitoring using IE10 (Tried under Windows Server 2008R2 and 2012)

Hi,
In Operations Manager Console 2012 SP1 including RU2 I am trying to record a web session in Web Application Transaction Monitoring.
I have check that:
The add-on (Microsoft Web Recorder Helper) 64bit is Enabled.
The 64bit version of IE10 is running/launched. See this link for how to modify your registry key if needed: http://kevingreeneitblog.blogspot.co.uk/2012/01/scom-2012-recording-web-browser-session.html
I have tried both on a Windows 2008R2 and 2012 server, but the recorder is not showing up as can been seen from Kevin's Blog (link above).
Any Ideas?

I managed to get this working on both Windows 8 IE10 and server 2012 IE10. Tested on SCOM 2012 SP1 UR2 and UR3. I've done this process in lab and production several times so hopefully this helps you out.
Checklist:
1. Ensure that the 64bit IE10 is launching when the "start web-capture" is started in SCOM.
2. Enable IE10 internet options:
a: Advanced - Security - Enable Enhanced Protected Mode
b: Advanced - Browsing - Enable third-party browser extensions
3. Close all running IE sessions and open the Registry Editor
4. Registry Change (No reboot needed)
- Browse to the following regkey:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- Add a new DWORD called TabProcGrowth and set it to 0
5. Registry Change (No reboot needed)
- Browse to the following regkey:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\
-You should see two subkeys labeled: (These are the cached BHO IE objects related to the Web Recorder)
{00021493-0000-0000-C000-000000000046}
{00021494-0000-0000-C000-000000000046}
- Delete only the above two mentioned keys (This will force IE to recache them next launch)
6. Try to start the web capture again from SCOM 2012 SP1.
7. When IE10 Launches enable the add-on again if you are prompted.
8. If you still don't see the Web-Recorder pane in IE you can now show it by:
- View - Explorer bars - Web Recorder

Sessions across Web Applications (WARs)

I've heard that you can't share session information (http session) across web applications or war files in the j2ee framework. However, I haven't seen any proof of this? I'm struggling to find information telling that I can't do this. Can someone elaborate a bit?
Thanks.

Hi !
It is TOTALLY WRONG that someone wrote here that a
separate JVM is started for each web-app! No way. Run
any appserver and do a 'ps -ef|grep java' and I bet
you will see only one forever :-). Correct
Steve, it is the classloader hierarchy in all
appservers that prevents you from sharing sessions (i
would say classes loaded by various web-apps). There
is something called a web-app / WAR classloader, which
is 4th in the hierarchy of JVm classloader hierarchy.
Since all your web-app loaded classes are loaded by
this classloader and since each web-app has a "peer"
classloader at same level for its own web-app, you
will never be able to share across web-apps. Incorrect, just because you can have separate classloaders for separate web applications does not mean that those web applications cannot share instances.
It is also possible to have classes which are globally available to ALL web applications which are loaded as part of the servlet container. Tomcat versions 4+ have a common area where classes can be made available. These classes are not loaded within the Web Application classloader at all.
Not only that but it is possible to configure web application contexts such that they can also share things like sessions. This feature is definitely part of the Apache Tomcat release and as this is taken by Sun to be the Reference Implementation of the Servlet Container I would assume that is also part of the J2EE Standard as well.
YOu can always use the DB stuff that other genltmen
has already suggested.

How do i use the jsp session in web application

pls i do i go about trying to maintain a user in a web application when he sign in so that his state would be mainain through out the other pages and also adding sound to my pge the page is being design with jsp thank u frm hamzah

I see what you are saying.
The JNDI approach should work-we will try to reproduce this internally.
I would recommend leveraging the OSGi service registry, instead of using JNDI, however. The Event Server is a modular server based on OSGi, so one should use the OSGi service registry whenever possible instead of using the jndi registry. Jndi is primarily there to support legacy code that requires Jndi.
Any data sources that you configure are automatically registered in the OSGi service registry. When there is more than one data source they can be distinguished using their name.
There are a couple of options.
If you want to inject a reference to your datasource into a Spring bean, you can use an annotation, @Service, to annotate a setter method on your bean (see my previous post). The container will then inject a reference to the data source into the bean.
You can also put the following in your spring application context file
<osgi:reference id="myDataSource"
interface="javax.sql.DataSource"/>
This creates a bean proxy that references the datasource by looking up the datasource in the OSGi service registry. It works similarly to JndiObjectFactoryBean, but it uses the OSGi service registry instead of the JNDI registry. You can read more about it here
http://www.springframework.org/osgi/specification
(Look in section 3.3)
Hope that helps.
Seth
Edited by swhite at 08/01/2007 6:19 PM

Create a new web application, how shall I update the file server.xml

Hi,
I will create a new web application, i.e named newApp. Then I create a file structure as follows:
- <server-root>/newApp
- <server-root>/newApp/WEB-INF
- <server-root>/newApp/WEB-INF/classes
Then I must tell the server that I have created a new web application. Then I must update my file server.xml, How shall I do this and where in the file shall I type in the new information?
I use windows XP Pro, and Tomcat 4.1.27.
My server.xml file looks like below:



<Server port="8005" shutdown="SHUTDOWN" debug="0">


<Listener className="org.apache.catalina.mbeans.ServerLifecycleListener"
debug="0"/>
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"
debug="0"/>

<GlobalNamingResources>

<Environment name="simpleValue" type="java.lang.Integer" value="30"/>

<Resource name="UserDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="User database that can be updated and saved">
</Resource>
<ResourceParams name="UserDatabase">
<parameter>
<name>factory</name>
<value>org.apache.catalina.users.MemoryUserDatabaseFactory</value>
</parameter>
<parameter>
<name>pathname</name>
<value>conf/tomcat-users.xml</value>
</parameter>
</ResourceParams>
</GlobalNamingResources>


<Service name="Tomcat-Standalone">


<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="8080" minProcessors="5" maxProcessors="75"
enableLookups="true" redirectPort="8443"
acceptCount="100" debug="0" connectionTimeout="20000"
useURIValidationHack="false" disableUploadTimeout="true" />




<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="8009" minProcessors="5" maxProcessors="75"
enableLookups="true" redirectPort="8443"
acceptCount="10" debug="0" connectionTimeout="0"
useURIValidationHack="false"
protocolHandlerClassName="org.apache.jk.server.JkCoyoteHandler"/>












<Engine name="Standalone" defaultHost="localhost" debug="0">



<Logger className="org.apache.catalina.logger.FileLogger"
prefix="catalina_log." suffix=".txt"
timestamp="true"/>


<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
debug="0" resourceName="UserDatabase"/>







<Host name="localhost" debug="0" appBase="webapps"
unpackWARs="true" autoDeploy="true">





<Logger className="org.apache.catalina.logger.FileLogger"
directory="logs" prefix="localhost_log." suffix=".txt"
timestamp="true"/>

<DefaultContext reloadable="true"/>

<Context path="" docBase="ROOT" debug="0"/>

<Context path="/examples" docBase="examples" debug="0"
reloadable="true" crossContext="true">
<Logger className="org.apache.catalina.logger.FileLogger"
prefix="localhost_examples_log." suffix=".txt"
timestamp="true"/>
<Ejb name="ejb/EmplRecord" type="Entity"
home="com.wombat.empl.EmployeeRecordHome"
remote="com.wombat.empl.EmployeeRecord"/>




<Environment name="maxExemptions" type="java.lang.Integer"
value="15"/>
<Parameter name="context.param.name" value="context.param.value"
override="false"/>
<Resource name="jdbc/EmployeeAppDb" auth="SERVLET"
type="javax.sql.DataSource"/>
<ResourceParams name="jdbc/EmployeeAppDb">
<parameter><name>username</name><value>sa</value></parameter>
<parameter><name>password</name><value></value></parameter>
<parameter><name>driverClassName</name>
<value>org.hsql.jdbcDriver</value></parameter>
<parameter><name>url</name>
<value>jdbc:HypersonicSQL:database</value></parameter>
</ResourceParams>
<Resource name="mail/Session" auth="Container"
type="javax.mail.Session"/>
<ResourceParams name="mail/Session">
<parameter>
<name>mail.smtp.host</name>
<value>localhost</value>
</parameter>
</ResourceParams>
<ResourceLink name="linkToGlobalResource"
global="simpleValue"
type="java.lang.Integer"/>
</Context>
</Host>
</Engine>
</Service>
</Server>

To use servlets u have indeed to update your web.xml...Well I'm not sure this is relevant to your case anyway.
You have to add a <servlet> element to this file.
Something like this:
<servlet>
<servlet-name>blabla</servlet-name>
<servlet-class>blablapackage.Blablaclass</servlet-class>
<init-param>...</init-param>
</servlet>
Now this may not solve your problem. Make sure you refer to your servlets using their full qualified names.btw, just to be sure, what is your definition of "servlet"? (i mean: any java class or only javax.servlet.Servlet)

Preserve session across web applications.

I've deployed 2 different web applications, each part of their own .ear . Is
there any way to make the two web applications use the SAME session object
? My problem is that when I store an object in the session within one
application, the object isn't available in the session-context for the other
application.
I've also verified that they are actually using two different sessions by
tracking the session-id at script-level. I'm using wl 6.1 if that helps
//Linus Nikander - [email protected]

Linus,
We were faced with a similar situation but our team responsible for the
Web applications decided to go with a single web-app in the end and we
bear the cost of not very nice build.
An alternative solution for you will be instead of setting the
authentication in the session to set the user object in a cookie and
then use it for all web applications.
I believe that is the idea behind the Weblogic Identity Assertion
security providers
(http://e-docs.bea.com/wls/docs70/dvspisec/ia.html#1145598) but we've
never had to deal with it yet.
Regards,
Dejan
Linus Nikander wrote:
Thank you for your answer, a few follow-up questions.
As you point out I definitely don't want to implement something that is
outside the spec. and vendor specific. But how then would you suggest
solving the following situation:
At the moment we are co-operating with other actors within a larger project.
Our task is to design and code one of the modules, which consists of EJBs,
JSPs and Servlets. From the beginning this was successfully deployed and
packaged in a single EAR.
Problems arose when we started to integrate our EAR with a WAR written by
one of the other participants in the project. The problem was that they are
responsible for authentication for the whole site, i.e. the login-module.
The've implemented the login so that when a user successfully logs in, a
"user"-object is stored in the session. The very fact that the user-object
exists means that the user is validated. The method for verifying that a
user is authenticated is thus to check the session for the occurence of this
object before execution of any JSP or Servlet. For files within their WAR
this works fine, but as soon as a call is made to a JSP or Servlet within
our EAR the method of authentication breaks because a new session is
generated, void of the user-object.
We've solved the problem by co-deploying a single WAR. In my opinion this is
a really ugly solution because there is no longer a clean separation of
"their" and our files, and it makes deployment a real hassle.
Skipping any points of view as to their chosen method of authentication (we
don't like it either but its going to remain unchanged no matter what), do
you see any other way for us to get things to work where we (hopefully) can
keep our files separate from one another.
//Linus Nikander - [email protected]
"Deyan D. Bektchiev" <[email protected]> wrote in message
news:[email protected]...
It would be a violation of the Servlet spec to do so and although in 6.0
you could share the session at least in 7.0 it isn't the case.
I'm not familiar with 6.1 but even if you could do it there then your
application is not going to be portable since you'll be relying on a
specific vendor implementation.
Regards,
Dejan
Linus Nikander wrote:
I've deployed 2 different web applications, each part of their own .ear .
Is
there any way to make the two web applications use the SAME session
object
? My problem is that when I store an object in the session within one
application, the object isn't available in the session-context for the
other
application.
I've also verified that they are actually using two different sessions by
tracking the session-id at script-level. I'm using wl 6.1 if that helps
//Linus Nikander - [email protected]

BPS Web Application - How to change function button property dynamically

We have created BPS web application for sales force, it contains 2 button.
1. To send Workflow notification to Managers 'Request for Approval' - This would be used by sales person
2. Button for Manager to approve the Plan 'Manager Approval' - This would be used by the Manager
We are using Territory Management in CRM to determine who is the manager and sales person.
We would like to use the same Web application to be used by both sales person as well as the manager. However depending on the user ID, we need to access the Territory Management table in BW to determine whether the person logging in is Manager / Sales person. If it is a Sales Person, we need to display 'Request for Approval' button and hide 'Manager Approval' button. Similarly, if it is Manager, 'Manager Approval' button to be displayed and 'Request for Approval' button to be hidden.
Would appreciate, if any one has faced similar requirement and how to do this.
Thanks,
VJ Sudharsan

Thanks Ananad and Srini for the suggestion. Actually I was working on the direction Anand Suggestion and make it working but I am not sure what I did is correct or not.
I have a bogus variable that checks for Manager / Sales person and brings back following code in the variable, if it is manager:
'<style> #Req_Approval_s </style>'
and I added a new text component of type HTML and code
<%=descr(VarvlSel2/value)%>
it works. Is this the correct way of doing the enhancement. Or is there a different place where we can add JavaScript.
Srini - I am using exit function, can you explain how we can I use BPS authorization to achieve this.

Maintaining session among Web Applications

Hi!
I would like to know if there is a good solution for this purpose: maintain the session in three, four or more web applications.
We know that if a user navigates through the pages that belong to only one of the web apps, the session can possibly expire in other web apps. What would be a good strategy to eliminate this problem?
I was thinking about a solution in which for each request the user does, or in other words, for each submit the user executes, I would call other servlets located in the other Web apps, and such servlets would have only this objective, that is maintaining the session, but I�m not sure whether it is really the best way.
Any thoughts?
Thanks.

SSO will be a good options, using some available products, e.g, Sun Access Manager, or you can go for Webservices, with token management.

Sharing sessions between web applications (WAR files)

I am using weblogic 6.1. The opinion I have read indicates that
          sessions cannot be shared between WAR files. That is, I cannot put an
          attribute on the session from a servlet/JSP in one WAR file and read
          it out from the other. The only justification I've seen is "security".
          Now, I find this rather difficult to accept for several reasons:
          1. I cannot fathom what kind of "security" would prevent me from
          sharing the session between two web applications that I wrote myself.
          Let's say I want to write a system that I divide up, for
          modularity/separate deployment purposes, into 5 different WAR files.
          Why should I not be able to just sign on once and pass that logon
          information in the session from one to the other? (I know, I can use
          cookies or URL rewriting - but that doesn't seem to be to be a good
          solution. And if you can share information through cookies, why not
          through sessions?) What about other user information like currently
          selected language?
          2. Several app servers (iPlanet and I have heard two others) allow you
          to share sessions between WARs. Why not weblogic?
          Thanks for any information you can give me. I have not been able to
          find anything in weblogic documentation about this. If I am
          misunderstanding the server capabilities, please enlighten me.
          Thanks,
          <>< gary


http://www.weblogic.com/docs51/classdocs/webappguide.html
          --kumar allamraju
          Grant Lewis wrote:
          > I'm currently evaluating weblogic and I can't find any references in
          > their documentation set stating they support web applications or war
          > files. They explicitly state in their docs the Servlet 2.2 specification
          > has been supported since version 4.5. I'm evaluating version 5.1. Can
          > anybody clear up the confusion for me.
          >
          > Grant

Flex Builder, debugger and web application: how?

Hello,
I'm traying to setup a project in eclipse with both a java
web application (servlets, jsp) and flex applications as a
frontend. So I installed flex builder as a plugin on an eclipse+web
standard tools, then created a WST web application project, and
used the "Add flex nature.." of the flex plugin. I don't want to
use the flex data services.
Now, in a standard run (I installed a tomcat 5.5 and
configured it in eclipse), my mxlm files are being correctly
compiled into swf, and they are successfully calling my servlets
(which simulates a backend xml-based interface).
I'm having problems in debug: if I launch the debug profile
related to tomcat, the normal version of the sfw will be used (even
manually switching to the "-debug" version, it says that a running
flex debugger has not be found on localhost). On the other way, if
I launch the debug as a "flex application", it seems to work (it
stops at breakpoints) but my tomcat is not started at all, the swf
is accessed as a local file and all call to my servlet will fail..
so it will stop working almost immediately.
There is a way to setup eclipse to start standard java
debugging with tomcat *and* the flex debugger?
Thanks
Cosma

I found a workaround of sorts for the problem: don't
terminate the applications!
Previously, I would terminate the application using either
the Terminate button in the Debug view or by closing the tab in the
browser (Firefox). Now I just let them pile up in the browser and I
rarely see this problem.
In other words, I was having lots of trouble when doing
Launch-Terminate-Launch-Terminate... but now I just
Launch-Launch-Launch... and clean up once in a while.

How Session based web Application should work even after session expiry??

I am looking for an experts opinion that how could I develop an application that should work after the expiry of web session too in the same way as it works in web session.
How the session should be activated.
As I understood, what if I store all the required information in xml and then on unlock session reload all the information from XML.
Am I right or is there any other better way to do using servlets.
Basically I need to implement Lock and UnLock mechanism in an application.
Thanks

I'm not sure I understand your question. But since no one answered this yet, here is my idea:
If the user's session expires, any unsaved data is lost. The user should expect this.
If do need to save any data, normally you store it it a database table with the user's ID so you can retrieve it. Two free databases are Oracle Lite and MySql. However, this will take quite a bit of time to learn if you are not already familiar with databases. Storing it in a database and retrieving it is much much faster than storing it in a file.

My Program need support SESSION with web server, How to do it???

My Program is a client program, but at server side will use Session to manage some data when client start communication with itself.
I only known the web explorer (eg: IE) support the SESSION and COOKIES, HOW TO REALIZE IT ?

According to the following link http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_1_12/ol_2170.htm#xtocid9 this version of IOS for the 4006 will support MPLS.

Client/server/web application

My application will be deployed as client/server application and as well as web application. An database is used to keep the persistent data.
For the client/server environment, I will need client tier, application server tier, and the database tier. For the web applicaiton, I will need web interface, web server, and the database tier.
My question is that since the application will be deployed as both client/server application and web application, how to leverage the components, so the application server and the web server has less code duplication.
Is there any guideline for designing such an architecture?
The application uses J2SE, and Tomcat is the servlet engine.
Thanks for any input /danclemson

Your business logic should be written so that it can used from anywhere. Command line, GUI, webapp, it's irrelevant. Likewise with the db layer, so those will be exactly the same. Then you just put whatever front end you want on it. Now, if you're talking about having the same server used for both at the same time, that's a different question. But it sounds like you're asking about code.

Configure Service Principle Name for Application Pool account and web application?

Hello Community
    On WS2012 Server running Sharepoint 2013 Server when you
configure SPN you configure it for the SQL server object "MSSQLSvc" (domain account)
and the user object "HTTP" (domain account).
    The question is if you also should configure SPN for the Application Pool account and
configure SPN for the web application, how do you configure SPN for the Application Pool
account and the web application?
    Thank you
    Shabeaut

The Web Application is only an IIS Site. You're configuring the SPN for the Domain User running the IIS Application Pool (that the Web Application (IIS Site) leverages).
So you would just need to use the format of:
setspn -A HTTP/webAppUrl domain\iisapppoolacctusername
setspn -A HTTP/webAppUrl.fqdn.com domain\iisapppoolacctusername
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Unique Session en web application?? How?

Similar Messages

Maybe you are looking for