tracker issue : CF-3300531

Problem Description:
When the "Enable Monitoring Server" in ColdFusion Administrator is checked and J2EE Servlet session management is used, the session values may not be persistent if the Server Monitor is also opened with the same browser(new window or tab) because the jsessionid value is overwritten by an application and the Server Monitor.

Steps to Reproduce:
1) In ColdFusion Administrator, make sure both "Use J2EE session variables" in "Memory Variables" under "SERVER SETTINGS" and "Enable Monitoring Server" in "Monitoring Settings" under "SERVER MONITORING" are checked.

2) In ColdFusion Administrator, go to "SERVER MONITORING" - "Server Monitor" and launch Server Monitor.

3) In Server Monitor, click the "STATISTICS" tab on the top and select "Active Sessions" under "REQUEST STATISTICS" on the left to see the current active session IDs.(Any menu would be fine though.)

4) While both ColdFusion Administrator and Server Monitor are open in the separate tabs or windows of a browser, create the following two files and placed them in the same directory.  Then open the index.cfm file in a new tab or window of the same browser.

Application.cfc
===============
component {
  this.name = "sessionTest";
  this.sessionManagement = true;
  this.sessionTimeout = createTimeSpan(0,0,30,0);
  this.setClientCookies = true;
}

index.cfm
=========
<cfscript>
  if (!structKeyExists(session, "currentTime"))
    session.currentTime = now();
		
  writeoutput("<h1>Session Test</h1>");
  writedump(session);
</cfscript>

5) Refresh the index.cfm page a couple of times to see if the values of "currentTime" and "sessionid" would change.  If not, go back to the Server Monitor and select other menu, for instance, "Active Requests" under "REQUEST STATISTICS."  Then go back and refresh the index.cfm page again.

6) Repeat step 5 if necessary.  The values of "currentTime" and "sessionid" should be changed even the session is not yet expired by the sessionTimeout value set in Application.cfc.

Note:
When ColdFusion session management is used, the values of "cfid" and "cftoken" are changed after the ColdFusion Administrator login, but the session values are maintained.

Actual Result:
The session values do not persist.

Expected Result:
The session values should persist until the session times out or the browser is closed.

Any Workarounds:
Open the Server Monitor with a different browser.

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3300531

Deployment Phase:	Release Candidate

External Customer Info:
External Company:  
External Customer Name: CF-AXL
External Customer Email:  
External Test Config: My Hardware and Environment details:

Attachments:

Comments: