Uploaded image for project: 'Application Server 3  4  5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-5608

Removing a session from a clustered sso entry removes all sessions

    XMLWordPrintable

    Details

      Description

      From SingleSignOnEntry.removeSession(...)

      boolean removed = false;
      Session[] nsessions = new Session[sessions.length - 1];

      ...

      sessions = nsessions;
      // Only if we removed a session, do we replace our session list
      if (removed)
      sessions = nsessions;

      The line above the final if test defeats the purpose of the if test and sets sessions to an empty Session[].

      Minor problem because the "if (removed)" guard is just a safety check; in practice should return true whenever method is invoked.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  brian.stansberry Brian Stansberry
                  Reporter:
                  brian.stansberry Brian Stansberry
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: