java – tomcat中的Spring警告输出“无法创建会话”

我收到了消息,我不知道他们的意思.一切似乎都运转正常,但我只是想保持安全.是否可以对这些警告做些什么：

2011-01-25 / 23：30：06.856 / EST [http-80-exec-1] WARN无法创建会话,因为响应已提交.无法存储SecurityContext.

2011-01-25 / 23：30：09.597 / EST [http-80-exec-3] WARN认证事件InteractiveAuthenticationSuccessEvent：[email protected];详细信息：org.springframework.security.web.authentication.WebAuthenticationDetails@957e：RemoteIpAddress：170.9.26.16; SessionId：null

我正在运行春季3和tomcat 6春季安全3

UPDATE

我根据这个信息重新配置了以下bean(从here开始)：

create-session

Controls the eagerness with which an HTTP session is created. If not set,defaults to “ifrequired”. Other options are “always” and “never”. The setting of this attribute affect the allowSessionCreation and forceEagerSessionCreation properties of HttpSessionContextIntegrationFilter. allowSessionCreation will always be true unless this attribute is set to “never”. forceEagerSessionCreation is “false” unless it is set to “always”. So the default configuration allows session creation but does not force it. The exception is if concurrent session control is enabled,when forceEagerSessionCreation will be set to true,regardless of what the setting is here. Using “never” would then cause an exception during the initialization of HttpSessionContextIntegrationFilter.

ecurity.web.context.HttpSessionContextIntegrationFilter">
    

最佳答案

将以下内容添加到您的配置中：http session-creation =’never’>
更多关于Spring论坛：http://forum.springsource.org/showthread.php?t=82196

版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 [email protected] 举报，一经查实，本站将立刻删除。