.NET Framework - What causes session to disappear?

Asked By gnewsgroup

19-Jan-08 12:49 PM

In my asp.net 2.0 web application, in Web.config, I have

timeout="30", s l i d i n g E x p i r a t i o n = "true"

for the Authentication element.  I suppose, this means that as long as
we don't let a 30 min elapse without making any request, the session
should stay alive, right?

But I notice that quite often, the application throws out Null
reference exception where I try to access a session variable like so:

System.NullReferenceException: Object reference not set to an instance
of an object.

Apparently, the session variable is lost.

I am sure it is way before a 30 minutes' elapse without making any
request.

Question:

1. Do we lose the session if the project gets JIT-recompiled?

2. Do we lose the session if an Exception happens?

Thank you.

18-Jan-08 05:28 PM

Anytime the IIS application is restarted, all sessions are restarted too.
So yes, this would generally happen during recompilations and some major
unhandled application level exceptions.

--
I hope this helps,
Steve C. Orr,
MCSD, MVP, CSM, ASPInsider
http://SteveOrr.net
http://iPhonePlaza.net

18-Jan-08 06:01 PM

I think the answer depends on the session-state "Mode" of your web app.
Assuming it's "in-proc" (the default) then modifying web.config or a DLL in
the "bin" directory will do it. As will restarting the application pool
(either manually, or automatically due to memory limits, cpu utilization,
etc.).

You might try switching to StateServer or SQLServer mode, but you will need
to ensure that you only put value types and serializable objects into the
session if you do that.

In general, you should always verify the existence of a session object
before trying to use it - and handle the case where it doesn't exist.

18-Jan-08 07:36 PM

An application domain will unload (causing loss of session variables
unless session state is maintained with State Server or SQL Server),
when any one of the following occurs:

a. Machine.Config, Web.Config or Global.asax are modified
b. The bin directory or any of its contents is/are modified
c. The App_Code directory contents changes
d. The number of re-compilations (aspx, ascx or asax) exceeds the limit specified by the
(by default this is set to 15)
e. The physical path of the virtual directory is modified
f. The CAS policy is modified
g. A web service is restarted
h. (2.0 only) Application Sub-Directories are deleted
i. Any of a number of configurable App Pool recycling reasons occurs

This should cover most scenarios.



Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
======================================

19-Jan-08 12:50 PM

On Jan 18, 5:28 pm, "Steve C. Orr [MCSD, MVP, CSM, ASP Insider]"

First of all, Steve, thank you so much, and I just found your
marvelous ExportPanel yesterday and have put it into my code. Really
nice and neat.  Thanks for sharing your wonderful work for free.

Now back to this thread topic.  I also notice that the session does
not always disappear when an exception happens.  Is it possible to
predict what type of exception will cause the session to disappear?

19-Jan-08 12:50 PM

On Jan 18, 5:28 pm, "Steve C. Orr [MCSD, MVP, CSM, ASP Insider]"

Is it possible to predict what type of exception will cause the
session to disappear?  Or does M$ has a list of Exception types that
will cause session to disappear?

BTW, I found your cool ExportPanel just yesterday and have put it into
my web application.  Really nice and neat.  Thanks for sharing your
wonderful work for free.

19-Jan-08 12:50 PM

On Jan 18, 6:01 pm, "Scott Roberts" <srobe...@no.spam.here-webworks-

That brings up a question which I have always been wondering.  So you
suggest that we should always do something like:

if ( Session.Contents["MySessionVariable"]  != null)
{
// Do things with MySessionVariable
}
else
{
// Do something else, maybe including logout a user if some
critical
// session variables such as "UserName" is missing.
}

before we use that session variable?  That's a lot of if-else's if we
use quite many session variables.

19-Jan-08 12:50 PM

On Jan 18, 7:36 pm, "Juan T. Llibre" <nomailrepl...@nowhere.com>
ecified by the
or web.config
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D"Scott Roberts" <srobe...@no.spam.=

Fantastic, I never know about this.  Your list of situations are
certainly enough to explain why my sessions are mysteriously missing.
Thank you.