Session/State Management Strategies

Hi. I'm looking for a little help on strategies for session/state management.

I have an application where I use CFLogin against a database of users. When a user logs in, I set a number of session variables related to that particular user.

One of the behaviors I'm getting is that if I login as user A, then go to another computer and login as user A, Coldfusion recognizes that the user is logged in on the second machine (CFLogin credentials appear to be in tact - I testing this), but none of the session variables are set, which causes errors. The first machine application contintues to work fine.

Two questions:
1. If I wanted to enable a user to be able to login with a single ID and password from multiple locations at the same time, what would I need to do to support this?

2. If instead, I wanted to maintain the current behavior, how would I catch when a user is attempting to login again and fail gracefully?

I appreciate any ideas I could try.

Thanks.

I'm not familiar with that behavior of cflogin, that is interesting and something I'll have to look into. I have always built my own authentication system.

So if cflogin forces this on you, you'd have to write your own authentication system. As far as failing gracefully in the current situation, you could process the login and then check that the session variables were set. If they weren't but the credentials were set properly, then redirect to an error page.

Anyone else have experience with CFLOGIN that could help with this problem?