title: Spring security 3.1 : session concurrency control not working, why?
body: <p>I'm trying to use security concurent session with spring security 3.1.4. But it's not working i don't understand why. Tomcat https is configured to redirect http request but i don't know if it's playing a role in the actual problem.</p>
  
  <p>Could you give me a hand on this ? </p>
  
  <p>Thanks.</p>
  
  <p>This is my spring security xml.</p>
  
  <pre><code> &lt;security:http auto-config="true" use-expressions="true" disable-url-rewriting="true"&gt;
       &lt;security:intercept-url pattern="/Loginsucess*" access="isAuthenticated()"  /&gt;
       &lt;security:intercept-url pattern="/Login" access="hasRole('ROLE_ANONYMOUS')" /&gt;   
       &lt;security:intercept-url pattern="/Login/Error" access="hasRole('ROLE_ANONYMOUS')" /&gt;    
       &lt;security:form-login  login-page="/Login"  login-processing-url="/j_spring_security_check"  authentication-failure-url="/Login/Error" default-target-url="/Loginsucess" /&gt;
       &lt;security:logout logout-url="/j_spring_security_logout" logout-success-url="/Login" delete-cookies="JSESSIONID"  invalidate-session="true"/&gt;
       &lt;security:anonymous/&gt;
       &lt;security:session-management invalid-session-url="/Login" &gt;
          &lt;security:concurrency-control max-sessions="1" error-if-maximum-exceeded="true"  /&gt;
       &lt;/security:session-management&gt;
       &lt;security:port-mappings&gt;
        &lt;security:port-mapping http="8086" https="8443"/&gt;
       &lt;/security:port-mappings&gt;
  &lt;/security:http&gt;
  </code></pre>
  
  <p>I already add this to my web.xml :</p>
  
  <pre><code>&lt;listener&gt;
  &lt;listener-class&gt;
    org.springframework.security.web.session.HttpSessionEventPublisher
  &lt;/listener-class&gt;
  </code></pre>
  
  <p></p>
  
  <p>EDIT : </p>
  
  <p>FIRST LOGGIN ON 1 MACHINE :</p>
  
  <pre><code>&gt; 17:57:17,116 DEBUG FilterChainProxy:337 - /j_spring_security_check at
  &gt; position 1 of 11 in additional filter chain; firing Filter:
  &gt; 'SecurityContextPersistenceFilter' 17:57:17,117 DEBUG
  &gt; HttpSessionSecurityContextRepository:139 - HttpSession returned null
  &gt; object for SPRING_SECURITY_CONTEXT 17:57:17,117 DEBUG
  &gt; HttpSessionSecurityContextRepository:85 - No SecurityContext was
  &gt; available from the HttpSession:
  &gt; org.apache.catalina.session.StandardSessionFacade@1a60232c. A new one
  &gt; will be created. 17:57:17,117 DEBUG FilterChainProxy:337 -
  &gt; /j_spring_security_check at position 2 of 11 in additional filter
  &gt; chain; firing Filter: 'ConcurrentSessionFilter' 17:57:17,117 DEBUG
  &gt; FilterChainProxy:337 - /j_spring_security_check at position 3 of 11 in
  &gt; additional filter chain; firing Filter: 'LogoutFilter' 17:57:17,117
  &gt; DEBUG FilterChainProxy:337 - /j_spring_security_check at position 4 of
  &gt; 11 in additional filter chain; firing Filter:
  &gt; 'UsernamePasswordAuthenticationFilter' 17:57:17,117 DEBUG
  &gt; UsernamePasswordAuthenticationFilter:189 - Request is to process
  &gt; authentication 17:57:17,118 DEBUG ProviderManager:152 - Authentication
  &gt; attempt using
  &gt; org.springframework.security.authentication.dao.DaoAuthenticationProvider
  &gt; Hibernate: select user0_.id as id1_13_, user0_.username as
  &gt; username2_13_, user0_.firstname as firstnam3_13_, user0_.lastname as
  &gt; lastname4_13_, user0_.password as password5_13_, user0_.email as
  &gt; email6_13_, user0_.enabled as enabled7_13_ from biomoltracker.LOG_user
  &gt; user0_ where user0_.username=? Hibernate: select roles1_.role_name as
  &gt; col_0_0_ from biomoltracker.LOG_user user0_ inner join
  &gt; biomoltracker.LOG_role roles1_ on user0_.id=roles1_.id_user_fk where
  &gt; user0_.id=? 17:57:17,355 DEBUG ConcurrentSessionControlStrategy:88 -
  &gt; Invalidating session with Id '4A09DE3E6ACDE04373284600DACDBE39' and
  &gt; migrating attributes. 17:57:17,355 DEBUG HttpSessionEventPublisher:83
  &gt; - Publishing event: org.springframework.security.web.session.HttpSessionDestroyedEvent[source=org.apache.catalina.session.StandardSessionFacade@1a60232c]
  &gt; 17:57:17,356 DEBUG HttpSessionEventPublisher:66 - Publishing event:
  &gt; org.springframework.security.web.session.HttpSessionCreatedEvent[source=org.apache.catalina.session.StandardSessionFacade@60e9ebe1]
  &gt; 17:57:17,356 DEBUG ConcurrentSessionControlStrategy:98 - Started new
  &gt; session: 7431CCBD3008FC59A2AF1C44632F33F0 17:57:17,356 DEBUG
  &gt; SessionRegistryImpl:107 - Registering session
  &gt; 7431CCBD3008FC59A2AF1C44632F33F0, for principal
  &gt; com.clb.genomic.lyon.model.User@654f8017 17:57:17,356 DEBUG
  &gt; UsernamePasswordAuthenticationFilter:317 - Authentication success.
  &gt; Updating SecurityContextHolder to contain:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@ff2ffd00:
  &gt; Principal: com.clb.genomic.lyon.model.User@654f8017; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@0:
  &gt; RemoteIpAddress: 192.168.154.18; SessionId:
  &gt; 4A09DE3E6ACDE04373284600DACDBE39; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN 17:57:17,357 DEBUG
  &gt; SavedRequestAwareAuthenticationSuccessHandler:107 - Using default Url:
  &gt; /Loginsucess 17:57:17,357 DEBUG DefaultRedirectStrategy:36 -
  &gt; Redirecting to '/Lyric/Loginsucess' 17:57:17,357 DEBUG
  &gt; HttpSessionSecurityContextRepository:292 - SecurityContext stored to
  &gt; HttpSession:
  &gt; 'org.springframework.security.core.context.SecurityContextImpl@ff2ffd00:
  &gt; Authentication:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@ff2ffd00:
  &gt; Principal: com.clb.genomic.lyon.model.User@654f8017; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@0:
  &gt; RemoteIpAddress: 192.168.154.18; SessionId:
  &gt; 4A09DE3E6ACDE04373284600DACDBE39; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' 17:57:17,357 DEBUG
  &gt; SecurityContextPersistenceFilter:97 - SecurityContextHolder now
  &gt; cleared, as request processing completed 17:57:17,360 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 1 of 11 in additional
  &gt; filter chain; firing Filter: 'SecurityContextPersistenceFilter'
  &gt; 17:57:17,361 DEBUG HttpSessionSecurityContextRepository:158 - Obtained
  &gt; a valid SecurityContext from SPRING_SECURITY_CONTEXT:
  &gt; 'org.springframework.security.core.context.SecurityContextImpl@ff2ffd00:
  &gt; Authentication:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@ff2ffd00:
  &gt; Principal: com.clb.genomic.lyon.model.User@654f8017; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@0:
  &gt; RemoteIpAddress: 192.168.154.18; SessionId:
  &gt; 4A09DE3E6ACDE04373284600DACDBE39; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' 17:57:17,361 DEBUG FilterChainProxy:337 -
  &gt; /Loginsucess at position 2 of 11 in additional filter chain; firing
  &gt; Filter: 'ConcurrentSessionFilter' 17:57:17,361 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 3 of 11 in additional
  &gt; filter chain; firing Filter: 'LogoutFilter' 17:57:17,361 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 4 of 11 in additional
  &gt; filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
  &gt; 17:57:17,361 DEBUG FilterChainProxy:337 - /Loginsucess at position 5
  &gt; of 11 in additional filter chain; firing Filter:
  &gt; 'BasicAuthenticationFilter' 17:57:17,361 DEBUG FilterChainProxy:337 -
  &gt; /Loginsucess at position 6 of 11 in additional filter chain; firing
  &gt; Filter: 'RequestCacheAwareFilter' 17:57:17,362 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 7 of 11 in additional
  &gt; filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
  &gt; 17:57:17,362 DEBUG FilterChainProxy:337 - /Loginsucess at position 8
  &gt; of 11 in additional filter chain; firing Filter:
  &gt; 'AnonymousAuthenticationFilter' 17:57:17,362 DEBUG
  &gt; AnonymousAuthenticationFilter:107 - SecurityContextHolder not
  &gt; populated with anonymous token, as it already contained:
  &gt; 'org.springframework.security.authentication.UsernamePasswordAuthenticationToken@ff2ffd00:
  &gt; Principal: com.clb.genomic.lyon.model.User@654f8017; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@0:
  &gt; RemoteIpAddress: 192.168.154.18; SessionId:
  &gt; 4A09DE3E6ACDE04373284600DACDBE39; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' 17:57:17,362 DEBUG FilterChainProxy:337 -
  &gt; /Loginsucess at position 9 of 11 in additional filter chain; firing
  &gt; Filter: 'SessionManagementFilter' 17:57:17,362 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 10 of 11 in additional
  &gt; filter chain; firing Filter: 'ExceptionTranslationFilter' 17:57:17,362
  &gt; DEBUG FilterChainProxy:337 - /Loginsucess at position 11 of 11 in
  &gt; additional filter chain; firing Filter: 'FilterSecurityInterceptor'
  &gt; 17:57:17,362 DEBUG AntPathRequestMatcher:116 - Checking match of
  &gt; request : '/loginsucess'; against '/loginsucess*' 17:57:17,363 DEBUG
  &gt; FilterSecurityInterceptor:194 - Secure object: FilterInvocation: URL:
  &gt; /Loginsucess; Attributes: [isAuthenticated()] 17:57:17,363 DEBUG
  &gt; FilterSecurityInterceptor:310 - Previously Authenticated:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@ff2ffd00:
  &gt; Principal: com.clb.genomic.lyon.model.User@654f8017; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@0:
  &gt; RemoteIpAddress: 192.168.154.18; SessionId:
  &gt; 4A09DE3E6ACDE04373284600DACDBE39; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN 17:57:17,363 DEBUG AffirmativeBased:65 -
  &gt; Voter:
  &gt; org.springframework.security.web.access.expression.WebExpressionVoter@6479b43f,
  &gt; returned: 1 17:57:17,363 DEBUG FilterSecurityInterceptor:215 -
  &gt; Authorization successful 17:57:17,363 DEBUG
  &gt; FilterSecurityInterceptor:227 - RunAsManager did not change
  &gt; Authentication object 17:57:17,364 DEBUG FilterChainProxy:323 -
  &gt; /Loginsucess reached end of additional filter chain; proceeding with
  &gt; original chain 17:57:17,469 DEBUG ExceptionTranslationFilter:115 -
  &gt; Chain processed normally 17:57:17,469 DEBUG
  &gt; SecurityContextPersistenceFilter:97 - SecurityContextHolder now
  &gt; cleared, as request processing completed
  </code></pre>
  
  <p>When second user with the same (username/password) login from another machine .</p>
  
  <pre><code>&gt; 8:01:47,309 DEBUG FilterChainProxy:337 - /j_spring_security_check at
  &gt; position 1 of 11 in additional filter chain; firing Filter:
  &gt; 'SecurityContextPersistenceFilter' 18:01:47,310 DEBUG
  &gt; HttpSessionSecurityContextRepository:139 - HttpSession returned null
  &gt; object for SPRING_SECURITY_CONTEXT 18:01:47,310 DEBUG
  &gt; HttpSessionSecurityContextRepository:85 - No SecurityContext was
  &gt; available from the HttpSession:
  &gt; org.apache.catalina.session.StandardSessionFacade@67a53697. A new one
  &gt; will be created. 18:01:47,310 DEBUG FilterChainProxy:337 -
  &gt; /j_spring_security_check at position 2 of 11 in additional filter
  &gt; chain; firing Filter: 'ConcurrentSessionFilter' 18:01:47,310 DEBUG
  &gt; FilterChainProxy:337 - /j_spring_security_check at position 3 of 11 in
  &gt; additional filter chain; firing Filter: 'LogoutFilter' 18:01:47,310
  &gt; DEBUG FilterChainProxy:337 - /j_spring_security_check at position 4 of
  &gt; 11 in additional filter chain; firing Filter:
  &gt; 'UsernamePasswordAuthenticationFilter' 18:01:47,310 DEBUG
  &gt; UsernamePasswordAuthenticationFilter:189 - Request is to process
  &gt; authentication 18:01:47,310 DEBUG ProviderManager:152 - Authentication
  &gt; attempt using
  &gt; org.springframework.security.authentication.dao.DaoAuthenticationProvider
  &gt; Hibernate: select user0_.id as id1_13_, user0_.username as
  &gt; username2_13_, user0_.firstname as firstnam3_13_, user0_.lastname as
  &gt; lastname4_13_, user0_.password as password5_13_, user0_.email as
  &gt; email6_13_, user0_.enabled as enabled7_13_ from biomoltracker.LOG_user
  &gt; user0_ where user0_.username=? Hibernate: select roles1_.role_name as
  &gt; col_0_0_ from biomoltracker.LOG_user user0_ inner join
  &gt; biomoltracker.LOG_role roles1_ on user0_.id=roles1_.id_user_fk where
  &gt; user0_.id=? 18:01:47,317 DEBUG ConcurrentSessionControlStrategy:88 -
  &gt; Invalidating session with Id 'E644740185BC8E28272BD4F80751D445' and
  &gt; migrating attributes. 18:01:47,318 DEBUG HttpSessionEventPublisher:83
  &gt; - Publishing event: org.springframework.security.web.session.HttpSessionDestroyedEvent[source=org.apache.catalina.session.StandardSessionFacade@67a53697]
  &gt; 18:01:47,318 DEBUG HttpSessionEventPublisher:66 - Publishing event:
  &gt; org.springframework.security.web.session.HttpSessionCreatedEvent[source=org.apache.catalina.session.StandardSessionFacade@65447c32]
  &gt; 18:01:47,318 DEBUG ConcurrentSessionControlStrategy:98 - Started new
  &gt; session: 3694308C7FCA68AC5FFD1E442464FE50 18:01:47,318 DEBUG
  &gt; SessionRegistryImpl:107 - Registering session
  &gt; 3694308C7FCA68AC5FFD1E442464FE50, for principal
  &gt; com.clb.genomic.lyon.model.User@1b2c4d8f 18:01:47,319 DEBUG
  &gt; UsernamePasswordAuthenticationFilter:317 - Authentication success.
  &gt; Updating SecurityContextHolder to contain:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@7eb37c04:
  &gt; Principal: com.clb.genomic.lyon.model.User@1b2c4d8f; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId:
  &gt; E644740185BC8E28272BD4F80751D445; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN 18:01:47,319 DEBUG
  &gt; SavedRequestAwareAuthenticationSuccessHandler:107 - Using default Url:
  &gt; /Loginsucess 18:01:47,319 DEBUG DefaultRedirectStrategy:36 -
  &gt; Redirecting to '/Lyric/Loginsucess' 18:01:47,319 DEBUG
  &gt; HttpSessionSecurityContextRepository:292 - SecurityContext stored to
  &gt; HttpSession:
  &gt; 'org.springframework.security.core.context.SecurityContextImpl@7eb37c04:
  &gt; Authentication:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@7eb37c04:
  &gt; Principal: com.clb.genomic.lyon.model.User@1b2c4d8f; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId:
  &gt; E644740185BC8E28272BD4F80751D445; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' 18:01:47,320 DEBUG
  &gt; SecurityContextPersistenceFilter:97 - SecurityContextHolder now
  &gt; cleared, as request processing completed 18:01:47,324 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 1 of 11 in additional
  &gt; filter chain; firing Filter: 'SecurityContextPersistenceFilter'
  &gt; 18:01:47,324 DEBUG HttpSessionSecurityContextRepository:158 - Obtained
  &gt; a valid SecurityContext from SPRING_SECURITY_CONTEXT:
  &gt; 'org.springframework.security.core.context.SecurityContextImpl@7eb37c04:
  &gt; Authentication:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@7eb37c04:
  &gt; Principal: com.clb.genomic.lyon.model.User@1b2c4d8f; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId:
  &gt; E644740185BC8E28272BD4F80751D445; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' 18:01:47,324 DEBUG FilterChainProxy:337 -
  &gt; /Loginsucess at position 2 of 11 in additional filter chain; firing
  &gt; Filter: 'ConcurrentSessionFilter' 18:01:47,324 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 3 of 11 in additional
  &gt; filter chain; firing Filter: 'LogoutFilter' 18:01:47,325 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 4 of 11 in additional
  &gt; filter chain; firing Filter: 'UsernamePasswordAuthenticationFilter'
  &gt; 18:01:47,325 DEBUG FilterChainProxy:337 - /Loginsucess at position 5
  &gt; of 11 in additional filter chain; firing Filter:
  &gt; 'BasicAuthenticationFilter' 18:01:47,325 DEBUG FilterChainProxy:337 -
  &gt; /Loginsucess at position 6 of 11 in additional filter chain; firing
  &gt; Filter: 'RequestCacheAwareFilter' 18:01:47,325 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 7 of 11 in additional
  &gt; filter chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
  &gt; 18:01:47,325 DEBUG FilterChainProxy:337 - /Loginsucess at position 8
  &gt; of 11 in additional filter chain; firing Filter:
  &gt; 'AnonymousAuthenticationFilter' 18:01:47,325 DEBUG
  &gt; AnonymousAuthenticationFilter:107 - SecurityContextHolder not
  &gt; populated with anonymous token, as it already contained:
  &gt; 'org.springframework.security.authentication.UsernamePasswordAuthenticationToken@7eb37c04:
  &gt; Principal: com.clb.genomic.lyon.model.User@1b2c4d8f; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId:
  &gt; E644740185BC8E28272BD4F80751D445; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' 18:01:47,326 DEBUG FilterChainProxy:337 -
  &gt; /Loginsucess at position 9 of 11 in additional filter chain; firing
  &gt; Filter: 'SessionManagementFilter' 18:01:47,326 DEBUG
  &gt; FilterChainProxy:337 - /Loginsucess at position 10 of 11 in additional
  &gt; filter chain; firing Filter: 'ExceptionTranslationFilter' 18:01:47,326
  &gt; DEBUG FilterChainProxy:337 - /Loginsucess at position 11 of 11 in
  &gt; additional filter chain; firing Filter: 'FilterSecurityInterceptor'
  &gt; 18:01:47,326 DEBUG AntPathRequestMatcher:116 - Checking match of
  &gt; request : '/loginsucess'; against '/loginsucess*' 18:01:47,326 DEBUG
  &gt; FilterSecurityInterceptor:194 - Secure object: FilterInvocation: URL:
  &gt; /Loginsucess; Attributes: [isAuthenticated()] 18:01:47,326 DEBUG
  &gt; FilterSecurityInterceptor:310 - Previously Authenticated:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@7eb37c04:
  &gt; Principal: com.clb.genomic.lyon.model.User@1b2c4d8f; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId:
  &gt; E644740185BC8E28272BD4F80751D445; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN 18:01:47,327 DEBUG AffirmativeBased:65 -
  &gt; Voter:
  &gt; org.springframework.security.web.access.expression.WebExpressionVoter@6479b43f,
  &gt; returned: 1 18:01:47,327 DEBUG FilterSecurityInterceptor:215 -
  &gt; Authorization successful 18:01:47,327 DEBUG
  &gt; FilterSecurityInterceptor:227 - RunAsManager did not change
  &gt; Authentication object 18:01:47,327 DEBUG FilterChainProxy:323 -
  &gt; /Loginsucess reached end of additional filter chain; proceeding with
  &gt; original chain 18:01:47,427 DEBUG ExceptionTranslationFilter:115 -
  &gt; Chain processed normally 18:01:47,427 DEBUG
  &gt; SecurityContextPersistenceFilter:97 - SecurityContextHolder now
  &gt; cleared, as request processing completed 18:01:56,039 DEBUG
  &gt; FilterChainProxy:337 - /j_spring_security_logout at position 1 of 11
  &gt; in additional filter chain; firing Filter:
  &gt; 'SecurityContextPersistenceFilter' 18:01:56,040 DEBUG
  &gt; HttpSessionSecurityContextRepository:158 - Obtained a valid
  &gt; SecurityContext from SPRING_SECURITY_CONTEXT:
  &gt; 'org.springframework.security.core.context.SecurityContextImpl@7eb37c04:
  &gt; Authentication:
  &gt; org.springframework.security.authentication.UsernamePasswordAuthenticationToken@7eb37c04:
  &gt; Principal: com.clb.genomic.lyon.model.User@1b2c4d8f; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId:
  &gt; E644740185BC8E28272BD4F80751D445; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' 18:01:56,040 DEBUG FilterChainProxy:337 -
  &gt; /j_spring_security_logout at position 2 of 11 in additional filter
  &gt; chain; firing Filter: 'ConcurrentSessionFilter' 18:01:56,040 DEBUG
  &gt; FilterChainProxy:337 - /j_spring_security_logout at position 3 of 11
  &gt; in additional filter chain; firing Filter: 'LogoutFilter' 18:01:56,040
  &gt; DEBUG LogoutFilter:93 - Logging out user
  &gt; 'org.springframework.security.authentication.UsernamePasswordAuthenticationToken@7eb37c04:
  &gt; Principal: com.clb.genomic.lyon.model.User@1b2c4d8f; Credentials:
  &gt; [PROTECTED]; Authenticated: true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@ffff4c9c:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId:
  &gt; E644740185BC8E28272BD4F80751D445; Granted Authorities: ROLE_ADMIN_NGS,
  &gt; ROLE_GUEST_CGH, ROLE_ADMIN' and transferring to logout destination
  &gt; 18:01:56,040 DEBUG SecurityContextLogoutHandler:62 - Invalidating
  &gt; session: 3694308C7FCA68AC5FFD1E442464FE50 18:01:56,040 DEBUG
  &gt; HttpSessionEventPublisher:83 - Publishing event:
  &gt; org.springframework.security.web.session.HttpSessionDestroyedEvent[source=org.apache.catalina.session.StandardSessionFacade@65447c32]
  &gt; 18:01:56,041 DEBUG SessionRegistryImpl:156 - Removing session
  &gt; 3694308C7FCA68AC5FFD1E442464FE50 from principal's set of registered
  &gt; sessions 18:01:56,041 DEBUG SessionRegistryImpl:164 - Removing
  &gt; principal com.clb.genomic.lyon.model.User@1b2c4d8f from registry
  &gt; 18:01:56,041 DEBUG SimpleUrlLogoutSuccessHandler:107 - Using default
  &gt; Url: /Login 18:01:56,041 DEBUG DefaultRedirectStrategy:36 -
  &gt; Redirecting to '/Lyric/Login' 18:01:56,041 DEBUG
  &gt; HttpSessionSecurityContextRepository:269 - SecurityContext is empty or
  &gt; contents are anonymous - context will not be stored in HttpSession.
  &gt; 18:01:56,042 DEBUG SecurityContextPersistenceFilter:97 -
  &gt; SecurityContextHolder now cleared, as request processing completed
  &gt; 18:01:56,045 DEBUG FilterChainProxy:337 - /Login at position 1 of 11
  &gt; in additional filter chain; firing Filter:
  &gt; 'SecurityContextPersistenceFilter' 18:01:56,045 DEBUG
  &gt; HttpSessionSecurityContextRepository:127 - No HttpSession currently
  &gt; exists 18:01:56,045 DEBUG HttpSessionSecurityContextRepository:85 - No
  &gt; SecurityContext was available from the HttpSession: null. A new one
  &gt; will be created. 18:01:56,046 DEBUG FilterChainProxy:337 - /Login at
  &gt; position 2 of 11 in additional filter chain; firing Filter:
  &gt; 'ConcurrentSessionFilter' 18:01:56,046 DEBUG FilterChainProxy:337 -
  &gt; /Login at position 3 of 11 in additional filter chain; firing Filter:
  &gt; 'LogoutFilter' 18:01:56,046 DEBUG FilterChainProxy:337 - /Login at
  &gt; position 4 of 11 in additional filter chain; firing Filter:
  &gt; 'UsernamePasswordAuthenticationFilter' 18:01:56,046 DEBUG
  &gt; FilterChainProxy:337 - /Login at position 5 of 11 in additional filter
  &gt; chain; firing Filter: 'BasicAuthenticationFilter' 18:01:56,046 DEBUG
  &gt; FilterChainProxy:337 - /Login at position 6 of 11 in additional filter
  &gt; chain; firing Filter: 'RequestCacheAwareFilter' 18:01:56,046 DEBUG
  &gt; FilterChainProxy:337 - /Login at position 7 of 11 in additional filter
  &gt; chain; firing Filter: 'SecurityContextHolderAwareRequestFilter'
  &gt; 18:01:56,046 DEBUG FilterChainProxy:337 - /Login at position 8 of 11
  &gt; in additional filter chain; firing Filter:
  &gt; 'AnonymousAuthenticationFilter' 18:01:56,047 DEBUG
  &gt; AnonymousAuthenticationFilter:102 - Populated SecurityContextHolder
  &gt; with anonymous token:
  &gt; 'org.springframework.security.authentication.AnonymousAuthenticationToken@90554a14:
  &gt; Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated:
  &gt; true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@3bcc:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId: null; Granted Authorities:
  &gt; ROLE_ANONYMOUS' 18:01:56,047 DEBUG FilterChainProxy:337 - /Login at
  &gt; position 9 of 11 in additional filter chain; firing Filter:
  &gt; 'SessionManagementFilter' 18:01:56,047 DEBUG FilterChainProxy:337 -
  &gt; /Login at position 10 of 11 in additional filter chain; firing Filter:
  &gt; 'ExceptionTranslationFilter' 18:01:56,047 DEBUG FilterChainProxy:337 -
  &gt; /Login at position 11 of 11 in additional filter chain; firing Filter:
  &gt; 'FilterSecurityInterceptor' 18:01:56,047 DEBUG
  &gt; AntPathRequestMatcher:116 - Checking match of request : '/login';
  &gt; against '/loginsucess*' 18:01:56,047 DEBUG AntPathRequestMatcher:116 -
  &gt; Checking match of request : '/login'; against '/login' 18:01:56,048
  &gt; DEBUG FilterSecurityInterceptor:194 - Secure object: FilterInvocation:
  &gt; URL: /Login; Attributes: [hasRole('ROLE_ANONYMOUS')] 18:01:56,048
  &gt; DEBUG FilterSecurityInterceptor:310 - Previously Authenticated:
  &gt; org.springframework.security.authentication.AnonymousAuthenticationToken@90554a14:
  &gt; Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated:
  &gt; true; Details:
  &gt; org.springframework.security.web.authentication.WebAuthenticationDetails@3bcc:
  &gt; RemoteIpAddress: 192.168.154.20; SessionId: null; Granted Authorities:
  &gt; ROLE_ANONYMOUS 18:01:56,048 DEBUG AffirmativeBased:65 - Voter:
  &gt; org.springframework.security.web.access.expression.WebExpressionVoter@6479b43f,
  &gt; returned: 1 18:01:56,048 DEBUG FilterSecurityInterceptor:215 -
  &gt; Authorization successful 18:01:56,049 DEBUG
  &gt; FilterSecurityInterceptor:227 - RunAsManager did not change
  &gt; Authentication object 18:01:56,049 DEBUG FilterChainProxy:323 - /Login
  &gt; reached end of additional filter chain; proceeding with original chain
  &gt; 18:01:56,145 DEBUG HttpSessionEventPublisher:66 - Publishing event:
  &gt; org.springframework.security.web.session.HttpSessionCreatedEvent[source=org.apache.catalina.session.StandardSessionFacade@2fa28842]
  &gt; 18:01:56,152 DEBUG HttpSessionSecurityContextRepository:269 -
  &gt; SecurityContext is empty or contents are anonymous - context will not
  &gt; be stored in HttpSession. 18:01:56,152 DEBUG
  &gt; ExceptionTranslationFilter:115 - Chain processed normally 18:01:56,152
  &gt; DEBUG SecurityContextPersistenceFilter:97 - SecurityContextHolder now
  &gt; cleared, as request processing completed
  </code></pre>