2 Replies Latest reply on Feb 9, 2005 2:05 AM by Zhidao Xu

    JAAS and httpsession

    Zhidao Xu Newbie

      Hi,
      I am doing a web application using JBoss 3.2.1 and using DatabaseServerLoginModule for JAAS.

      I get some problem with httpSession.

      After user login, if he open another IE and login using same username on same PC but without log out the previous login, it seems these two login will share the information inside httpsession.

      How to config the JAAS or JBoss to assign different session for different login?

      I am new to JAAS.

      Thanks in Advanced!

        • 1. Re: JAAS and httpsession
          sj_bennett Newbie

          Actually, I don't think that this is a JAAS issue at all. I think that the 2 IE windows share the session information on a single user computer. The 2nd window should not require a login at all.

          steve

          • 2. Re: JAAS and httpsession
            Zhidao Xu Newbie

             

            "sj_bennett" wrote:
            Actually, I don't think that this is a JAAS issue at all. I think that the 2 IE windows share the session information on a single user computer. The 2nd window should not require a login at all.
            steve


            Not exactly:
            If there is one username "Admin", and one user login as "ADMIN" and the other one login using "AdMin", actually there are two principals, and different session for different user.

            If both login using exactly same user name. there is only one principla and one session.