weblogic的sessionId

<%
  out.println(session.getId());
 %>

tomcat:32位隨機 v2DMLMfYjJSQTQ12btFm2wDCZfgT2QDw

weblogic:QtLLLLCYjwwZSKQQJ7x2XpgdsLWGmCnhpTPwjG2G0CYKsQHSVhXF!-1432758472!1267417688388

http://forums.oracle.com/forums/thread.jspa?threadID=834161

How unique is the jsessionid generated by Weblogic Server 9.2? Unique per app? Unique per server? Unique per universe?

Thanks in advance

------------------------>>>>>>>>>>

As per the documentation, the format of a session cookie is as follows :

sessionid!primary_server_id!secondary_server_id

where:
sessionid is a randomly generated identifier of the HTTP session. The length of the value is configured by the IDLength parameter in the <session-descriptor> element in the weblogic.xml file for an application. By default, the sessionid length is 52 bytes.

primary_server_id and secondary_server_id are 10 character identifiers of the primary and secondary hosts for the session.

Link:[http://edocs/wls/docs81/cluster/load_balancing.html#1026940]

It means that the jsessionid should be unique across HTTP sessions. I am not sure if the internal algorithm(obviuosly not explained in edocs, may be for security reasons) for generating random identifier is unique per universe.

It should atleast be unique per app and also across servers as multiple applications and server instances can exist at the same time and proxied by the same plugin. I believe some one could throw light on this .

Regards.

 

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章