Guest Sessions and Firefox 44

Document created by Terry Patterson on Feb 9, 2016
Version 1Show Document
  • View in full screen mode

This is the email item that Kelly Crone-Willis posted to the Bb-ADMIN listserv regarding guest sessions and Firefox 44.  Many thanks to him!

 

-----Original Message-----

From: bbadmin-l - listserv [mailto:BBADMIN-L@asu.edu] On Behalf Of Crone Willis, Kelly R

Sent: Monday, February 08, 2016 9:14 AM

To: BBADMIN-L@ASU.EDU

Subject: Re: [BBADMIN-L] Guest Sessions increase since FF44

 

We use the tab page.

We are seeing the increase in guest sessions (tens of thousands).

I can NOT confirm FF44 creating multiple guest sessions on our Dev via Seth's steps.  I only get one on Mac, Linux and Windows 10.

 

However, I am seeing strange looping behavior in the Tomcat bb-access log.

The looping lines are usually not logged in (no PK in the 4th field).  The dozen or so I've checked were all FF44 or greater (yes, some even running pre-release versions 45 and 46).  Here is an example of what the loop lines looks like:

 

  1. 134.124.101.24 127.0.0.1 connector-13 - [08/Feb/2016:08:13:37 -0600] "GET

/webapps/portal/execute/tabs/tabAction?tab_tab_group_id=_1_1 HTTP/1.1" 302 -

"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20

100101 Firefox/44.0" "-" 5 -

  1. 134.124.101.24 127.0.0.1 connector-63 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/login/ HTTP/1.1" 200 573 "Mozilla/5.0 (Windows NT 6.1; WOW64;

rv:44.0) Gecko/20100101 Firefox/44.0" "-" 20 573

  1. 134.124.101.24 127.0.0.1 connector-64 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/portal/execute/defaultTab HTTP/1.1" 302 - "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0" "-" 1

3 -

  1. 134.124.101.24 127.0.0.1 connector-19 - [08/Feb/2016:08:13:37 -0600] "GET

/webapps/portal/execute/tabs/tabAction?tab_tab_group_id=_21_1 HTTP/1.1" 302

- "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/2

0100101 Firefox/44.0" "-" 4 -

  1. 134.124.101.24 127.0.0.1 connector-57 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/login/ HTTP/1.1" 200 573 "Mozilla/5.0 (Windows NT 6.1; WOW64;

rv:44.0) Gecko/20100101 Firefox/44.0" "-" 11 573

  1. 134.124.101.24 127.0.0.1 connector-37 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/portal/execute/defaultTab HTTP/1.1" 302 - "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0" "-" 1

4 -

  1. 134.124.101.24 127.0.0.1 connector-39 - [08/Feb/2016:08:13:37 -0600] "GET

/webapps/portal/execute/tabs/tabAction?tab_tab_group_id=_21_1 HTTP/1.1" 302

- "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/2

0100101 Firefox/44.0" "-" 5 -

  1. 134.124.101.24 127.0.0.1 connector-9 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/login/ HTTP/1.1" 200 573 "Mozilla/5.0 (Windows NT 6.1; WOW64;

rv:44.0) Gecko/20100101 Firefox/44.0" "-" 13 573

  1. 134.124.101.24 127.0.0.1 connector-45 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/portal/execute/defaultTab HTTP/1.1" 302 - "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0" "-" 1

4 -

  1. 134.124.101.24 127.0.0.1 connector-50 - [08/Feb/2016:08:13:37 -0600] "GET

/webapps/portal/execute/tabs/tabAction?tab_tab_group_id=_21_1 HTTP/1.1" 302

- "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/2

0100101 Firefox/44.0" "-" 5 -

  1. 134.124.101.24 127.0.0.1 connector-42 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/login/ HTTP/1.1" 200 573 "Mozilla/5.0 (Windows NT 6.1; WOW64;

rv:44.0) Gecko/20100101 Firefox/44.0" "-" 13 573

  1. 134.124.101.24 127.0.0.1 connector-62 - [08/Feb/2016:08:13:37 -0600] "GET /webapps/portal/execute/defaultTab HTTP/1.1" 302 - "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0" "-" 1

4 -

  1. 134.124.101.24 127.0.0.1 connector-1 - [08/Feb/2016:08:13:38 -0600] "GET

/webapps/portal/execute/tabs/tabAction?tab_tab_group_id=_21_1 HTTP/1.1" 302

- "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20

100101 Firefox/44.0" "-" 4 -

  1. 134.124.101.24 127.0.0.1 connector-51 - [08/Feb/2016:08:13:38 -0600] "GET /webapps/login/ HTTP/1.1" 200 573 "Mozilla/5.0 (Windows NT 6.1; WOW64;

rv:44.0) Gecko/20100101 Firefox/44.0" "-" 13 573

  1. 134.124.101.24 127.0.0.1 connector-27 - [08/Feb/2016:08:13:38 -0600] "GET /webapps/portal/execute/defaultTab HTTP/1.1" 302 - "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0" "-" 1

6 -

  1. 134.124.101.24 127.0.0.1 connector-16 - [08/Feb/2016:08:13:38 -0600] "GET

/webapps/portal/execute/tabs/tabAction?tab_tab_group_id=_21_1 HTTP/1.1" 302

- "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/2

0100101 Firefox/44.0" "-" 5 -

 

Some of my observations:

 

1) This is the very beginning of this IP hitting our logs today.  Started at 8:13am and is still continuing as I write this.

2) The very first hit is to tab _1_1.  This is the logged in tab, but they are clearly not logged in (no PK in the 4th column, and no session key).

Was the logged in tab bookmarked or set as browser homepage?

3) Next they get sent to the login page.  However, it is a GET and not a POST but still generates a status 200.

4) Then they are redirected (status 302, temporarily moved) through defaultTab and tab _21_1 which is our not logged in landing tab and finally right back to the login page

5) They are generating about 11 hits per second

6) This is FF44 on Windows 7

7) Last check they had generated 15,000 hits with this loop.

8) I'm trying to think how to confirm if these looping hits are the ones generating thousands of sessions.

 

I'm still digging and thinking.  If you have any ideas, please keep this thread going!

 

Thanks,

Kelly

Attachments

    Outcomes