牛骨文教育服务平台(让学习变的简单)
博文笔记

weblogic的sessionId

创建时间:2010-03-02 投稿人: 浏览次数:3152

<%
  out.println(session.getId());
 %>

tomcat:32位随机 v2DMLMfYjJSQTQ12btFm2wDCZfgT2QDw

weblogic:QtLLLLCYjwwZSKQQJ7x2XpgdsLWGmCnhpTPwjG2G0CYKsQHSVhXF!-1432758472!1267417688388

http://forums.oracle.com/forums/thread.jspa?threadID=834161

How unique is the jsessionid generated by Weblogic Server 9.2? Unique per app? Unique per server? Unique per universe?

Thanks in advance

------------------------>>>>>>>>>>

As per the documentation, the format of a session cookie is as follows :

sessionid!primary_server_id!secondary_server_id

where:
sessionid is a randomly generated identifier of the HTTP session. The length of the value is configured by the IDLength parameter in the <session-descriptor> element in the weblogic.xml file for an application. By default, the sessionid length is 52 bytes.

primary_server_id and secondary_server_id are 10 character identifiers of the primary and secondary hosts for the session.

Link:[http://edocs/wls/docs81/cluster/load_balancing.html#1026940]

It means that the jsessionid should be unique across HTTP sessions. I am not sure if the internal algorithm(obviuosly not explained in edocs, may be for security reasons) for generating random identifier is unique per universe.

It should atleast be unique per app and also across servers as multiple applications and server instances can exist at the same time and proxied by the same plugin. I believe some one could throw light on this .

Regards.

 

声明:该文观点仅代表作者本人,牛骨文系教育信息发布平台,牛骨文仅提供信息存储空间服务。