Session Id no longer Alphanumeric

[adetola fadahunsi]

HI all,

I have just integrated a Web App I had on JBOSS 6 to JBOSS 7.1.1 I have noticed that the SessionId is no longer alphanumeric it has  + and -  signs. As this application is currently acting as a portal to a legacy system running Apache server with Perl and depends on the sessionId this HTML incompatible of the session id is a problem. Before going through the possibility of encoding or even just stripping out non alphanumeric characters. Is it there a configurable option to get the old way back. If I look at the SessionId of the root context where JBOSS APP is running its JSESSION ID is as before Capitalized alphanumeric characters so I am hoping I can achieve this also in my Web app.

[Jaikiran Pai]

Moved to JBoss Web forum.

[Jean-Frederic Clere]

setting org.apache.catalina.session.ManagerBase.SESSION_ID_ALPHABET should be the way to remove the + - _ that are in the default encoding string.

[adetola fadahunsi]

I set the property JAVA_OPTS="$JAVA_OPTS -Dorg.apache.catalina.session.ManagerBase.SESSION_ID_ALPHABET=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789" in the conf file and it seem to work fine but intermittently I get another exception thrown

Exception initializing page context: java.lang.ArrayIndexOutOfBoundsException: 63

Since I wanted only alphanumeric characters i removed the + and - sign reducing the value from 65 to 63 characters. I think i read somewhere else that SESSION_ID_ALPHABET has to be 65 characters in length

[Jean-Frederic Clere]

you need 64: from 0 to 3F.