Problem with Apache loadbalancer, j_security_check and JBos

[sudeepthi]

Hi,
I am using Apache load balancer using mod_jk and Jboss as a application server. Currently in my cluster i configured two Jboss servers which are running on different machines. I am using round-robin load balancer algorithm.

In my application i am using JAAS as a form based authentication. In my clustered configuration the request will be go to the server in round-robin way. I mean that if the first request goes to the first server then the second request goes to the second server and the third request goes to again first server and so on.This configuration is done without sticky session.

Now the problem is if i request for login page, the request is going to first server and the login page is displayed successfully. After entering user name and password if i submit the page, the request is going to the second server and its displaying "HTTP Status 400 - Invalid direct reference to form login page" instead of displaying the home page of my application.

I am using Apache web server 2.2.4, mod_jk 1.2.50 and JBoss 4.0.2 Application server.

Can anybody help me how to solve this issue? I am waiting for your valuable response.

Thanks & Regards,
Sudeepthi

[brian.stansberry]

You have to use sticky sessions.

[trulore]

Yikes.

Turning on sticky sessions defeats the purpose of load balancing. It keeps a user pinned to one server regardless of load or anything else.

This is a VERY serious bug (in my opinion). I can't seem to find any info of any progress in fixing this bug. I was hoping JBoss offered some kind of work-around or Valve....but I haven't been able to find it.

Robert

[krisohary]

use tag in your app's web.xml
This will make your app distributed among the available nodes which is actually necessary in replication of your sessions.

[krisohary]

tag:

<ditributable />

[sureshrk19]

Hi,

Did the tag worked for you?
I have
true
in web.xml

but, still I see the same prob (with login)

Please let me know if you find any solution/work-around.

Thanks,
Suresh

[sureshrk19]

Please ignore my previous post...

The issue I'm facing is same as initial post by "sudeepthi" i.e., Problem with Apache loadbalancer, j_security_check and JBoss (in clustered env).

Please let me know if any of you come across any solution/work-around.

Thanks,
Suresh

[jmalkan]

I have a similar problem. I don't know the real solution. If anyone knows, please let me know. I am on JBoss 4.2.1.

However, Uncomment following valve in deploy\jboss-web.deployer\server.xml worked.

[jmalkan]

Sorry forgot to put code tag.

<Valve className="org.jboss.web.tomcat.service.sso.ClusteredSingleSignOn" />