[Xerte-dev] Re: Session ID

[Julian Tenney]

OK.

From: xerte-dev-bounces at lists.nottingham.ac.uk [mailto:xerte-dev-bounces at lists.nottingham.ac.uk] On Behalf Of Smith, John
Sent: 18 July 2013 13:14
To: For Xerte technical developers
Subject: [Xerte-dev] Re: Session ID

I think that could be key and why you can’t reproduce… is it to do with expired cookies/sessions which then could be affected by timezones…

Perhaps Julian you need to repeat what you did yesterday… log in as the static user before you leave tonight and then log in tomorrow as you and see if it does it again…

Regards,

John Smith
Learning Technologist
School of Health & Life Sciences
Glasgow Caledonian University

From: xerte-dev-bounces at lists.nottingham.ac.uk<mailto:xerte-dev-bounces at lists.nottingham.ac.uk> [mailto:xerte-dev-bounces at lists.nottingham.ac.uk] On Behalf Of Thomas Rochford
Sent: Thursday, July 18, 2013 1:00 PM
To: For Xerte technical developers
Subject: [Xerte-dev] Re: Session ID

Hi,

This is the problem I reported a month or so ago. At the time I thought it was something to do with session Cookies and Timezones. In the end I resolved it, for myself at any rate, by forcing the browser to reload the page on every visit, rather than on startup etc.

I think the browsers try to be helpful and discretely submit any cached session cookies when the re-visit the page, with the inevitable result you have seen.

I suggest you look into ways in which the session cookies can be removed, virtually ot otherwise, when the main page is closed, alternatively it may be possible to do some thing with 'pragma nocache' but I have a feeling that may be deprecated in HTML 5.

Thomas
=======================
Sent from my Windows 8 Phone
Please excuse brevity & typos
eml: thomas.rochford at jiscadvance.ac.uk<mailto:thomas.rochford at jiscadvance.ac.uk>
mob: 07500 669002
________________________________
From: Julian Tenney<mailto:Julian.Tenney at nottingham.ac.uk>
Sent: ‎18/‎07/‎2013 12:48
To: For Xerte technical developers<mailto:xerte-dev at lists.nottingham.ac.uk>
Subject: [Xerte-dev] Re: Session ID
Yes, although in this cae I’m using LDAP and also using static.php to check for a ‘special’ user (osls_admin)

From: xerte-dev-bounces at lists.nottingham.ac.uk<mailto:xerte-dev-bounces at lists.nottingham.ac.uk> [mailto:xerte-dev-bounces at lists.nottingham.ac.uk] On Behalf Of Smith, John
Sent: 18 July 2013 12:19
To: For Xerte technical developers
Subject: [Xerte-dev] Re: Session ID

Ok, I’m looking at the Auth process to see where it could possibly be falling over…

Are you using LDAP?

Regards,

John Smith
Learning Technologist
School of Health & Life Sciences
Glasgow Caledonian University

From: xerte-dev-bounces at lists.nottingham.ac.uk<mailto:xerte-dev-bounces at lists.nottingham.ac.uk> [mailto:xerte-dev-bounces at lists.nottingham.ac.uk] On Behalf Of Julian Tenney
Sent: Thursday, July 18, 2013 12:16 PM
To: For Xerte technical developers
Subject: [Xerte-dev] Re: Session ID

When I get a bit of time alter on I’ll see if I can replicate it,

From: xerte-dev-bounces at lists.nottingham.ac.uk<mailto:xerte-dev-bounces at lists.nottingham.ac.uk> [mailto:xerte-dev-bounces at lists.nottingham.ac.uk] On Behalf Of Smith, John
Sent: 18 July 2013 12:12
To: For Xerte technical developers
Subject: [Xerte-dev] Re: Session ID

Perhaps that’s why I don’t really see it – I’m always logged in with the same account… perhaps there is a cookie remnant being left that is interfering with the session…

Can’t we just run the “Logout” code to expire/flush the old cookie when login process is run, before setting the new cookie?

Regards,

John Smith
Learning Technologist
School of Health & Life Sciences
Glasgow Caledonian University

From: xerte-dev-bounces at lists.nottingham.ac.uk<mailto:xerte-dev-bounces at lists.nottingham.ac.uk> [mailto:xerte-dev-bounces at lists.nottingham.ac.uk] On Behalf Of Julian Tenney
Sent: Thursday, July 18, 2013 12:03 PM
To: For Xerte technical developers (xerte-dev at lists.nottingham.ac.uk<mailto:xerte-dev at lists.nottingham.ac.uk>)
Subject: [Xerte-dev] Re: Session ID

Logging out and back in again has fixed it.

From: Tenney Julian
Sent: 18 July 2013 12:02
To: For Xerte technical developers (xerte-dev at lists.nottingham.ac.uk<mailto:xerte-dev at lists.nottingham.ac.uk>)
Subject: Session ID

Just happened. First time login to toolkits today since booting, not been on any other installs. The last time I used it yesterday I logged in another user via static.php, maybe there’s a clue there?

[cid:image001.png at 01CE83B4.F773B3B0]

Glasgow Caledonian University is a registered Scottish charity, number SC021474

Winner: Times Higher Education’s Widening Participation Initiative of the Year 2009 and Herald Society’s Education Initiative of the Year 2009.
http://www.gcu.ac.uk/newsevents/news/bycategory/theuniversity/1/name,6219,en.html

Winner: Times Higher Education’s Outstanding Support for Early Career Researchers of the Year 2010, GCU as a lead with Universities Scotland partners.
http://www.gcu.ac.uk/newsevents/news/bycategory/theuniversity/1/name,15691,en.html

Glasgow Caledonian University is a registered Scottish charity, number SC021474

Winner: Times Higher Education’s Widening Participation Initiative of the Year 2009 and Herald Society’s Education Initiative of the Year 2009.
http://www.gcu.ac.uk/newsevents/news/bycategory/theuniversity/1/name,6219,en.html

Winner: Times Higher Education’s Outstanding Support for Early Career Researchers of the Year 2010, GCU as a lead with Universities Scotland partners.
http://www.gcu.ac.uk/newsevents/news/bycategory/theuniversity/1/name,15691,en.html


This message and any attachment are intended solely for the addressee and may contain confidential information. If you have received this message in error, please send it back to me, and immediately delete it.   Please do not use, copy or disclose the information contained in this message or in any attachment.  Any views or opinions expressed by the author of this email do not necessarily reflect the views of the University of Nottingham.

This message has been checked for viruses but the contents of an attachment may still contain software viruses which could damage your computer system, you are advised to perform your own checks. Email communications with the University of Nottingham may be monitored as permitted by UK legislation.


Glasgow Caledonian University is a registered Scottish charity, number SC021474

Winner: Times Higher Education’s Widening Participation Initiative of the Year 2009 and Herald Society’s Education Initiative of the Year 2009.
http://www.gcu.ac.uk/newsevents/news/bycategory/theuniversity/1/name,6219,en.html

Winner: Times Higher Education’s Outstanding Support for Early Career Researchers of the Year 2010, GCU as a lead with Universities Scotland partners.
http://www.gcu.ac.uk/newsevents/news/bycategory/theuniversity/1/name,15691,en.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nottingham.ac.uk/pipermail/xerte-dev/attachments/20130718/52cb7b63/attachment-0001.html>