2 Replies Latest reply on Feb 9, 2005 2:05 AM by leeson1125

    JAAS and httpsession

    leeson1125
    leeson1125 Feb 6, 2005 8:27 PM

      Hi,
      I am doing a web application using JBoss 3.2.1 and using DatabaseServerLoginModule for JAAS.

      I get some problem with httpSession.

      After user login, if he open another IE and login using same username on same PC but without log out the previous login, it seems these two login will share the information inside httpsession.

      How to config the JAAS or JBoss to assign different session for different login?

      I am new to JAAS.

      Thanks in Advanced!

      • 2929 Views
      • Tags:
        • 1. Re: JAAS and httpsession
          sj_bennett
          sj_bennett Feb 8, 2005 8:45 PM (in response to leeson1125)

          Actually, I don't think that this is a JAAS issue at all. I think that the 2 IE windows share the session information on a single user computer. The 2nd window should not require a login at all.

          steve

            • Actions
          • 2. Re: JAAS and httpsession
            leeson1125
            leeson1125 Feb 9, 2005 2:05 AM (in response to leeson1125)

             

            "sj_bennett" wrote:
            Actually, I don't think that this is a JAAS issue at all. I think that the 2 IE windows share the session information on a single user computer. The 2nd window should not require a login at all.
            steve


            Not exactly:
            If there is one username "Admin", and one user login as "ADMIN" and the other one login using "AdMin", actually there are two principals, and different session for different user.

            If both login using exactly same user name. there is only one principla and one session.

              • Actions