[jetty-users] Untimely session timeout

[Pavel Jbanov <pavel.jbanov@xxxxxxxxx>]

Hi,

I'm trying to investigate really strange untimely session timeouts, happening relatively regular for some clients, and looking for possible ideas to look into, because I'm starting to run out of ideas of my own.

I'm running Jetty 7.1.6. I've added a session listener and added debug statements into HashSessionManager and here is the sequence of events:

[09-12-2010 12:51:42] sessionCreated p7wexn203xb3vmf4fp54l3uv

[09-12-2010 12:51:42] attributeAdded to p7wexn203xb3vmf4fp54l3uv

[09-12-2010 01:19:43] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:31-12-1969 05:00:00 ttl:1800s

[09-12-2010 01:19:44] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:09-12-2010 12:51:42 ttl:1800s

[09-12-2010 01:21:07] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:09-12-2010 01:20:46 ttl:1800s

[09-12-2010 01:24:05] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:09-12-2010 01:22:06 ttl:1800s

[09-12-2010 01:24:13] sessionCreated p7wexn203xb3vmf4fp54l3uv

[09-12-2010 01:24:13] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:31-12-1969 05:00:00 ttl:1800s

[09-12-2010 01:24:18] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:09-12-2010 01:24:13 ttl:1800s

[09-12-2010 01:28:26] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:09-12-2010 01:28:25 ttl:1800s

[09-12-2010 01:43:05] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:09-12-2010 01:43:05 ttl:1800s

[09-12-2010 01:51:18] access id:p7wexn203xb3vmf4fp54l3uv lastAccess:09-12-2010 01:50:22 ttl:1800s

[09-12-2010 01:54:40] sessionDestroyed id:p7wexn203xb3vmf4fp54l3uv created:09-12-2010 12:51:42 lastAccess:09-12-2010 01:53:49

[09-12-2010 01:54:40] attributeRemoved p7wexn203xb3vmf4fp54l3uv

[09-12-2010 01:54:40] sessionDestroyed id:p7wexn203xb3vmf4fp54l3uv created:09-12-2010 01:24:13 lastAccess:09-12-2010 01:24:19

[09-12-2010 01:55:00] sessionCreated sj8emozrd5m1rcv3dtc2um5k

[09-12-2010 01:55:00] attributeAdded sj8emozrd5m1rcv3dtc2um5k

So what I see from the logs, is that the session is created at 12:51, but then at 01:24 another session with the same ID is created and later that second session expires at 1:54 (30 minutes later) and it get the first (active) session destroyed as well probably because they have the same ID. 

Does it make sense? Is it even possible to create another session with the same ID?

Any suggestions/ideas are very appreciated.

Thank you,

Pavel