this.sessioncluster=true breaks sessions

Description

We store session data in a database. When our Application.cfc includes the line this.sessioncluster=true the standard items are written for a new session (timecreated, sessionid, lastvisit) but session variables created by our application are not written to the database.

If we remove this.sessioncluster=true or change the session storage setting to "memory" the problem goes away. The same applications worked fine on version 5.0.0

I noticed that with this.sessioncluster=true the session data seems to be overwritten... the timecreated data is updated for each page request and always matches the lastvisit. When I remove this.sessioncluster=true this behaviour goes away... the timecreated stays the same while the lastvisit is updated and other data is written.

Environment

Windows Server 2012R2, Windows 8.1. Fresh install from current Windows installer.

Activity

Michael Offner 
8 June 2018 at 06:32

the clustering feature has changed between 5.0 and 5.2 to handle better synchronisation of multiple server storing at the same time.
But 5.2 should be able to load sessions from 5.0, but the other way around of course it is not possible. 5.0 does not understand 5.2 sessions.

Ken John 
19 September 2017 at 19:08
(edited)

This is also happening in Lucee 4.5.5.006
Please look at the comment by Simon Goldschmidt in

Pothys - MitrahSoft 
16 June 2017 at 07:14

& I hope, this issue is related to & LDEV-1346.

Please look at the comment of Simon Goldschmidt in

Pothys - MitrahSoft 
30 May 2017 at 13:35

I've analyzed this ticket a lot & confirmed the issue with changing in the format for cf_session_data. In lucee 5.0.x.x, session data stored in JSON format, but in lucee5.2.x.x version session data's were stored as encryption of data. If we switch from 5.0.x.x to 5.2 version. It throw error like

It breaks the session.

NOTE: If we have session data in 5.2.x.x version with encrypted value in cf_session_data. If we changed to 5.0.x.x version. It throw error like

If we switch 5.1.0.x version to 5.2.x.x version. It throw error like:

Issue occurs only when changed format data on cf_session_data

Fixed

Details

Assignee

Reporter

Priority

Fix versions

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Sprint

Affects versions

Created 22 February 2017 at 23:46
Updated 8 May 2020 at 19:25
Resolved 8 June 2018 at 14:19