PM07156: FALSE SESSION CROSSOVER DETECTION MESSAGES WHEN SESSION IS ACCESSED FROM FILTERS.

6.1.0.35: Java SDK 1.5 SR12 FP2 Cumulative Fix for WebSphere
6.1.0.37: Java SDK 1.5 SR12 FP3 Cumulative Fix for WebSphere
6.1.0.47: WebSphere Application Server V6.1 Fix Pack 47
6.1.0.39: Java SDK 1.5 SR12 FP4 Cumulative Fix for WebSphere Application Server
6.1.0.41: Java SDK 1.5 SR12 FP5 Cumulative Fix for WebSphere Application Server
6.1.0.43: Java SDK 1.5 SR13 Cumulative Fix for WebSphere Application Server
6.1.0.45: Java SDK 1.5 SR14 Cumulative Fix for WebSphere Application Server
6.1.0.47: Java SDK 1.5 SR16 Cumulative Fix for WebSphere Application Server

APAR status

• Closed as program error.

Error description

• False session crossover messages logged when the
  DebugSessionCrossover property is set to true:
  
  
  [10/28/09 14:40:13:325 CDT] 00000027 SessionContex E
  SESN0121E: Session crossover detected in Web application
  default_hostMyApp.
  Session SGb-tNVeUjhRbT4Mc7ieGI6 was retrieved when session
  vfjA_RkzkRKdfQTPZooTid4 was expected -
  com.ibm.ws.webcontainer.httpsession.SessionCrossoverStackTrace
   at
  com.ibm.ws.webcontainer.httpsession.SessionContext.getIHttpSessi
  on(Sessi
  onContext.java:2546)
   at
  com.ibm.ws.webcontainer.httpsession.SessionContext.getIHttpSessi
  on(Sessi
  onContext.java:2452)
   at
  com.ibm.ws.webcontainer.srt.SRTRequestContext.getSession(SRTRequ
  estConte
  xt.java:88)
   at
  com.ibm.ws.webcontainer.srt.SRTServletRequest.getSession(SRTServ
  letReque
  st.java:1612)
   at
  com.ibm.ws.webcontainer.srt.SRTServletRequest.getSession(SRTServ
  letReque
  st.java:1599)
   at
  com.ibm.MyExample.MyCustomFilter.do
  Filter(ThreadLocalCleanupFilter.java:44)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of IBM WebSphere Application          *
  *                  Server Version 6.1 who have a filter        *
  *                  defined for a static resource, access the   *
  *                  session within the filter, and have         *
  *                  enabled the session manager                 *
  *                  DebugSessionCrossver feature.               *
  ****************************************************************
  * PROBLEM DESCRIPTION: A false crossover message can occur     *
  *                      incorrectly.                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The false crossover may occur under the following circumstances:
  1. A filter is defined for a static resource, such as a html
  page of a web application.
  2. The session is accessed within the filter.
  3. The web container custom property DebugSessionCrossver is
  set to true.
  

Problem conclusion

• Code changes have been made in the session manager to detect
  and avoid the false crossover condition.
  The fix for this APAR is currently targeted for inclusion in
  fix pack 6.1.0.35.  This APAR is not applicable to version 7.
  Please refer to the Recommended Updates page for delivery
  information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBSPHERE APP S

• Fixed component ID

  5724J0800

Applicable component levels

• R61A PSY

     UP

• R61H PSY

     UP

• R61I PSY

     UP

• R61P PSY

     UP

• R61S PSY

     UP

• R61W PSY

     UP

• R61Z PSY

     UP