Unclosed Hibernate Connection

i just isntalled acegi yesterday, and now i have been noticing Hibernate log entries that say "Unclosed Connection". Anybody else seen this before? As a result of this (I assume), HTTP request begin to stall (freezing) during a query for the user account (its a hibernate DAO query).

I am using spring 1.1, hibernate 2.1.6, acegi 0.8.1.

Here is a snipet from my log where it shows a WARN log message that there was an unclosed session.

Code:

---

[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@f3d040: Username: com.ccg.domain.Account@3b5d6b[id=1,u....security.Group@1e668b2[id=1,name=Users,description=Intranet Application User,roles=[com.ccg.security.Role@1523624]]]]; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1aa38c7: RemoteIpAddress: 127.0.0.1; SessionId: 5E2D43C38FC1C20DC88CFE0C69121D19; Granted Authorities: ROLE_USER
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Authorization successful
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - RunAsManager did not change Authentication object
[DEBUG][net.sf.hibernate.impl.SessionImpl] - opened session
[DEBUG][net.sf.hibernate.transaction.JDBCTransaction] - begin
[DEBUG][net.sf.hibernate.transaction.JDBCTransaction] - current autocommit status:true
[DEBUG][net.sf.hibernate.transaction.JDBCTransaction] - disabling autocommit
[DEBUG][net.sf.hibernate.impl.SessionImpl] - flushing session
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushing entities and processing referenced collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Processing unreferenced collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Scheduling collection removes/(re)creates/updates
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushed: 0 insertions, 0 updates, 0 deletions to 0 objects
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushed: 0 (re)creations, 0 updates, 0 removals to 0 collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Dont need to execute flush
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - about to open: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - select this.id as id0_, this.name as name0_, this.code as code0_, this.clientRoot as clientRoot0_, this.drive as drive0_, this.rootLinuxPath as rootLinu6_0_, this.rootWindowsPath as rootWind7_0_ from client this where 1=1
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - preparing statement
[DEBUG][net.sf.hibernate.impl.SessionImpl] - running Session.finalize()
[WARN ][net.sf.hibernate.impl.SessionImpl] - finalizing unclosed session with closed connection
[DEBUG][net.sf.hibernate.loader.Loader] - processing result set
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: id0_
[DEBUG][net.sf.hibernate.loader.Loader] - result row: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Initializing object from ResultSet: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Hydrating entity: com.ccg.domain.Client#1
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'Best Buy' as column: name0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'BTBY' as column: code0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'BTBY - Best Buy' as column: clientRoot0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'I:' as column: drive0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning '/var/intranet_files' as column: rootLinu6_0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'INTRANET V6/CLIENTS' as column: rootWind7_0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning '2' as column: id0_
[DEBUG][net.sf.hibernate.loader.Loader] - result row: 2
[DEBUG][net.sf.hibernate.loader.Loader] - Initializing object from ResultSet: 2
[DEBUG][net.sf.hibernate.loader.Loader] - Hydrating entity: com.ccg.domain.Client#2

---

Here is a snipet of where an unclose session message appears

Code:

---

[DEBUG][net.sf.acegisecurity.context.HttpSessionContextIntegrationFilter] - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureContextImpl@e335ef: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@fa1477: Username: com.ccg.domain.Account@9530a5[id=1,u....security.Group@f28c1f[id=1,name=Users,description=Intranet Application User,roles=[com.ccg.security.Role@8629d1]]]]; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1aa38c7: RemoteIpAddress: 127.0.0.1; SessionId: 5E2D43C38FC1C20DC88CFE0C69121D19; Granted Authorities: ROLE_USER'
[DEBUG][net.sf.acegisecurity.providers.anonymous.AnonymousProcessingFilter] - ContextHolder not replaced with anonymous token, as ContextHolder already contained: 'net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@fa1477: Username: com.ccg.domain.Account@9530a5[id=1,u....security.Group@f28c1f[id=1,name=Users,description=Intranet Application User,roles=[com.ccg.security.Role@8629d1]]]]; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1aa38c7: RemoteIpAddress: 127.0.0.1; SessionId: 5E2D43C38FC1C20DC88CFE0C69121D19; Granted Authorities: ROLE_USER'
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Converted URL to lowercase, from: '/list_zones_ez.html'; to: '/list_zones_ez.html'
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/list_zones_ez.html'; pattern is /signon.html*; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/list_zones_ez.html'; pattern is /welcome.html; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/list_zones_ez.html'; pattern is /reference.html; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/list_zones_ez.html'; pattern is /styles/**; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/list_zones_ez.html'; pattern is /images/**; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/list_zones_ez.html'; pattern is /**; matched=true
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Secure object: FilterInvocation: URL: /list_zones_ez.html; ConfigAttributes: [ROLE_USER]
[DEBUG][net.sf.acegisecurity.providers.ProviderManager] - Authentication attempt using net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider
[DEBUG][net.sf.hibernate.impl.SessionImpl] - opened session
[DEBUG][net.sf.hibernate.impl.SessionImpl] - flushing session
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushing entities and processing referenced collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Processing unreferenced collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Scheduling collection removes/(re)creates/updates
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushed: 0 insertions, 0 updates, 0 deletions to 0 objects
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushed: 0 (re)creations, 0 updates, 0 removals to 0 collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Dont need to execute flush
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - about to open: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - select this.id as id0_, this.username as username0_, this.password as password0_, this.accountNonLocked as accountN4_0_, this.enabled as enabled0_ from account this where this.username=?
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - preparing statement
[DEBUG][net.sf.hibernate.type.NullableType] - binding 'jvargas' to parameter: 1
[DEBUG][net.sf.hibernate.loader.Loader] - processing result set
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: id0_
[DEBUG][net.sf.hibernate.loader.Loader] - result row: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Initializing object from ResultSet: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Hydrating entity: com.ccg.domain.Account#1
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'jvargas' as column: username0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'jvargas' as column: password0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'true' as column: accountN4_0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'true' as column: enabled0_
[DEBUG][net.sf.hibernate.loader.Loader] - done processing result set (1 rows)
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - done closing: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - closing statement
[DEBUG][net.sf.hibernate.loader.Loader] - total objects hydrated: 1
[DEBUG][net.sf.hibernate.impl.SessionImpl] - resolving associations for [com.ccg.domain.Account#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - creating collection wrapper:[com.ccg.domain.Account.groups#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - done materializing entity [com.ccg.domain.Account#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - initializing non-lazy collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - initializing collection [com.ccg.domain.Account.groups#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - checking second-level cache
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection not cached
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - about to open: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - select groups0_.accountId as accountId__, groups0_.groupId as groupId__, group1_.id as id0_, group1_.description as descript2_0_, group1_.name as name0_ from account_securityGroup groups0_ inner join securityGroup group1_ on groups0_.groupId=group1_.id where groups0_.accountId=?
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - preparing statement
[DEBUG][net.sf.hibernate.type.NullableType] - binding '1' to parameter: 1
[DEBUG][net.sf.hibernate.loader.Loader] - result set contains (possibly empty) collection: [com.ccg.domain.Account.groups#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - uninitialized collection: initializing
[DEBUG][net.sf.hibernate.loader.Loader] - processing result set
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: id0_
[DEBUG][net.sf.hibernate.loader.Loader] - result row: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Initializing object from ResultSet: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Hydrating entity: com.ccg.security.Group#1
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'Intranet Application User' as column: descript2_0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'Users' as column: name0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: accountId__
[DEBUG][net.sf.hibernate.loader.Loader] - found row of collection: [com.ccg.domain.Account.groups#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - reading row
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: groupId__
[DEBUG][net.sf.hibernate.impl.SessionImpl] - loading [com.ccg.security.Group#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - attempting to resolve [com.ccg.security.Group#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - resolved object in session cache [com.ccg.security.Group#1]
[DEBUG][net.sf.hibernate.loader.Loader] - done processing result set (1 rows)
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - done closing: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - closing statement
[DEBUG][net.sf.hibernate.loader.Loader] - total objects hydrated: 1
[DEBUG][net.sf.hibernate.impl.SessionImpl] - resolving associations for [com.ccg.security.Group#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - creating collection wrapper:[com.ccg.security.Group.accounts#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - creating collection wrapper:[com.ccg.security.Group.roles#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - done materializing entity [com.ccg.security.Group#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - 1 collections were found in result set
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection fully initialized: [com.ccg.domain.Account.groups#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - 1 collections initialized
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection initialized
[DEBUG][net.sf.hibernate.impl.SessionImpl] - initializing collection [com.ccg.security.Group.roles#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - checking second-level cache
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection not cached
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - about to open: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - select roles0_.groupId as groupId__, roles0_.roleId as roleId__, role1_.id as id0_, role1_.description as descript2_0_, role1_.value as value0_ from securityGroup_securityRole roles0_ inner join securityRole role1_ on roles0_.roleId=role1_.id where roles0_.groupId=?
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - preparing statement
[DEBUG][net.sf.hibernate.type.NullableType] - binding '1' to parameter: 1
[DEBUG][net.sf.hibernate.loader.Loader] - result set contains (possibly empty) collection: [com.ccg.security.Group.roles#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - uninitialized collection: initializing
[DEBUG][net.sf.hibernate.loader.Loader] - processing result set
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: id0_
[DEBUG][net.sf.hibernate.loader.Loader] - result row: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Initializing object from ResultSet: 1
[DEBUG][net.sf.hibernate.loader.Loader] - Hydrating entity: com.ccg.security.Role#1
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'User' as column: descript2_0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning 'ROLE_USER' as column: value0_
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: groupId__
[DEBUG][net.sf.hibernate.loader.Loader] - found row of collection: [com.ccg.security.Group.roles#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - reading row
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: roleId__
[DEBUG][net.sf.hibernate.impl.SessionImpl] - loading [com.ccg.security.Role#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - attempting to resolve [com.ccg.security.Role#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - resolved object in session cache [com.ccg.security.Role#1]
[DEBUG][net.sf.hibernate.loader.Loader] - done processing result set (1 rows)
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - done closing: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - closing statement
[DEBUG][net.sf.hibernate.loader.Loader] - total objects hydrated: 1
[DEBUG][net.sf.hibernate.impl.SessionImpl] - resolving associations for [com.ccg.security.Role#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - done materializing entity [com.ccg.security.Role#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - 1 collections were found in result set
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection fully initialized: [com.ccg.security.Group.roles#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - 1 collections initialized
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection initialized
[DEBUG][net.sf.hibernate.impl.SessionImpl] - initializing collection [com.ccg.security.Group.accounts#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - checking second-level cache
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection not cached
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - about to open: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - select accounts0_.groupId as groupId__, accounts0_.accountId as accountId__, account1_.id as id0_, account1_.username as username0_, account1_.password as password0_, account1_.accountNonLocked as accountN4_0_, account1_.enabled as enabled0_ from account_securityGroup accounts0_ inner join account account1_ on accounts0_.accountId=account1_.id where accounts0_.groupId=?
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - preparing statement
[DEBUG][net.sf.hibernate.type.NullableType] - binding '1' to parameter: 1
[DEBUG][net.sf.hibernate.loader.Loader] - result set contains (possibly empty) collection: [com.ccg.security.Group.accounts#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - uninitialized collection: initializing
[DEBUG][net.sf.hibernate.loader.Loader] - processing result set
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: id0_
[DEBUG][net.sf.hibernate.loader.Loader] - result row: 1
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: groupId__
[DEBUG][net.sf.hibernate.loader.Loader] - found row of collection: [com.ccg.security.Group.accounts#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - reading row
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: accountId__
[DEBUG][net.sf.hibernate.impl.SessionImpl] - loading [com.ccg.domain.Account#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - attempting to resolve [com.ccg.domain.Account#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - resolved object in session cache [com.ccg.domain.Account#1]
[DEBUG][net.sf.hibernate.loader.Loader] - done processing result set (1 rows)
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - done closing: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - closing statement
[DEBUG][net.sf.hibernate.loader.Loader] - total objects hydrated: 0
[DEBUG][net.sf.hibernate.impl.SessionImpl] - 1 collections were found in result set
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection fully initialized: [com.ccg.security.Group.accounts#1]
[DEBUG][net.sf.hibernate.impl.SessionImpl] - 1 collections initialized
[DEBUG][net.sf.hibernate.impl.SessionImpl] - collection initialized
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1c200d0: Username: com.ccg.domain.Account@1737301[id=1,....security.Group@3540ce[id=1,name=Users,description=Intranet Application User,roles=[com.ccg.security.Role@6a67ab]]]]; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@1aa38c7: RemoteIpAddress: 127.0.0.1; SessionId: 5E2D43C38FC1C20DC88CFE0C69121D19; Granted Authorities: ROLE_USER
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Authorization successful
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - RunAsManager did not change Authentication object
[DEBUG][net.sf.hibernate.impl.SessionImpl] - opened session
[DEBUG][net.sf.hibernate.transaction.JDBCTransaction] - begin
[DEBUG][net.sf.hibernate.transaction.JDBCTransaction] - current autocommit status:true
[DEBUG][net.sf.hibernate.transaction.JDBCTransaction] - disabling autocommit
[DEBUG][net.sf.hibernate.impl.SessionImpl] - flushing session
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushing entities and processing referenced collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - running Session.finalize()
[WARN ][net.sf.hibernate.impl.SessionImpl] - unclosed connection
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Processing unreferenced collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Scheduling collection removes/(re)creates/updates
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushed: 0 insertions, 0 updates, 0 deletions to 0 objects
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Flushed: 0 (re)creations, 0 updates, 0 removals to 0 collections
[DEBUG][net.sf.hibernate.impl.SessionImpl] - Dont need to execute flush
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - about to open: 0 open PreparedStatements, 0 open ResultSets
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - select this.id as id0_, this.type as type0_, this.name as name0_, this.classification as classifi4_0_, this.alias as alias0_, this.description as descript6_0_, this.designation as designat7_0_, this.expiration as expiration0_ from zone this where 1=1
[DEBUG][net.sf.hibernate.impl.BatcherImpl] - preparing statement
[DEBUG][net.sf.hibernate.loader.Loader] - processing result set
[DEBUG][net.sf.hibernate.type.NullableType] - returning '1' as column: id0_
[DEBUG][net.sf.hibernate.loader.Loader] - result row: 1

---

Whats going on here?

The hibernate unclosed connection warning appears at almost every query via hibernate, however, it seems to start when the first call to loadUserByName() which in turn is calling this method:

Code:

---

    public Account getAccountByName(String name) throws DataAccessException {
            Account account = null;
        try {
            account = (Account)getSession()
                    .createQuery("FROM Account a WHERE a.username = :name")
                    .setParameter("name", name)
                    .uniqueResult();

        } catch (net.sf.hibernate.HibernateException ex) {
            throw SessionFactoryUtils.convertHibernateAccessException(ex);
        }
        return account;
    }

---

I know this might seem like a hibernate question, but these problems never came up before I added Acegi. This method was actually being used by a mock security module we had in place for the time being.

Acegi Security doesn't do anything with Hibernate at all. It delegates all persistence-related interactions to the AuthenticationDao, which you usually write (or use JdbcDaoImpl or InMemoryDaoImpl). I personally use Hibernate in many applications quite successfully with Acegi Security, and I know many others do as well. For these reasons this sounds to me more like a Hibernate question.

I am curious whether you're using OpenSessionInViewFilter with Hibernate. If so, perhaps the fact the AuthenticationDao is accessing Hibernate from an Acegi Security filter (probably AuthenticationProcessingFilter or FilterSecurityInterceptor) is the issue. Is your OpenSessionInViewFilter being executed before these Acegi Security fitlers?

Quote:

---

Originally Posted by Ben Alex

Acegi Security doesn't do anything with Hibernate at all. It delegates all persistence-related interactions to the AuthenticationDao, which you usually write (or use JdbcDaoImpl or InMemoryDaoImpl). I personally use Hibernate in many applications quite successfully with Acegi Security, and I know many others do as well. For these reasons this sounds to me more like a Hibernate question.

I am curious whether you're using OpenSessionInViewFilter with Hibernate. If so, perhaps the fact the AuthenticationDao is accessing Hibernate from an Acegi Security filter (probably AuthenticationProcessingFilter or FilterSecurityInterceptor) is the issue. Is your OpenSessionInViewFilter being executed before these Acegi Security fitlers?

---

I checked our code, we are using the OpenSessionInViewFilter. It is, however, defined as a bean in applicationContext.xml. I replaced the bean def with a filter in web.xml and I am testing it out right now. I have not come across any unclosed session warnings yet, but i am having other strange errors that I have to work out. I'll keep at it for a while, im sure by removing the OpenSessionInView bean, some DAO's are no longer happy campers.

Thanks for the tip Ben, I appreciate your help.


edit: sorry, i meant we were using OpenSessionInViewInteceptor (thats why it was defined as a bean)

Looks like the unclosed session problem is fixed. My web.xml looks like so... is the ordering correct? Some requests are throwing the exception shown below. I read on the spring api docs that errors like this may appear after adding the OpenSessionInViewFilter, not sure how to fix it.

edit: in addition to the errors shown below, i am also getting exceptions telling me that i am in read only mode and that i need to set my flush mode to AUTO. I can't find anywhere in the API docs that allows me to set flush modes on the OpenSessionInViewFilter. Where do i configure this property if its not a property of the filter object?

Code:

---

        <!-- Keep the hibernate sessions open in the view -->
        <filter>
                <filter-name>Hibernate View Session Filter</filter-name>
                <filter-class>
                        org.springframework.orm.hibernate.support.OpenSessionInViewFilter
                </filter-class>
        </filter>       
        <filter-mapping>
                <filter-name>Hibernate View Session Filter</filter-name>
                <url-pattern>/*</url-pattern>
        </filter-mapping>

<!--
        - Loads the root application context of this web app at startup,
        - by default from "/WEB-INF/applicationContext.xml".
                &#91;We're using maven to filter-copy to WEB-INF/classes/applicationContext.xml&#93;
        - Use WebApplicationContextUtils.getWebApplicationContext&#40;servletContext&#41;
        - to access it anywhere in the web application, outside of the framework.
        -
        - The root context is the parent of all servlet-specific contexts.
        - This means that its beans are automatically available in these child contexts,
        - both for getBean&#40;name&#41; calls and &#40;external&#41; bean references.
        -->
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
       
       
<!--
        Acegi Security System for Spring
        *** ORDERING OF THESE FILTERS IS CRITICAL, DO NOT CHANGE ***
        -->

        <filter>
                <filter-name>Acegi Http Session Context Integration Filter</filter-name>
                <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
                <init-param>
                        <param-name>targetClass</param-name>
                        <param-value>net.sf.acegisecurity.context.HttpSessionContextIntegrationFilter</param-value>
                </init-param>
        </filter>       
        <filter-mapping>
                <filter-name>Acegi Http Session Context Integration Filter</filter-name>
                <url-pattern>/*</url-pattern>
        </filter-mapping>

        <filter>
                <filter-name>Acegi Authentication Processing Filter</filter-name>
                <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
                <init-param>
                        <param-name>targetClass</param-name>
                        <param-value>net.sf.acegisecurity.ui.webapp.AuthenticationProcessingFilter</param-value>
                </init-param>
        </filter>       
        <filter-mapping>
                <filter-name>Acegi Authentication Processing Filter</filter-name>
                <url-pattern>/*</url-pattern>
        </filter-mapping>       
       
        <filter>
                <filter-name>Acegi Anonymous Processing Filter</filter-name>
                <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
                <init-param>
                        <param-name>targetClass</param-name>
                        <param-value>net.sf.acegisecurity.providers.anonymous.AnonymousProcessingFilter</param-value>
                </init-param>
        </filter>
        <filter-mapping>
                <filter-name>Acegi Anonymous Processing Filter</filter-name>
                <url-pattern>/*</url-pattern>
        </filter-mapping>       
       
        <filter>
                <filter-name>Acegi HTTP Request Security Filter</filter-name>
                <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
                <init-param>
                        <param-name>targetClass</param-name>
                        <param-value>net.sf.acegisecurity.intercept.web.SecurityEnforcementFilter</param-value>
                </init-param>
        </filter>
        <filter-mapping>
                <filter-name>Acegi HTTP Request Security Filter</filter-name>
                <url-pattern>/*</url-pattern>
        </filter-mapping>

---

Code:

---

[DEBUG][org.springframework.orm.hibernate.support.OpenSessionInViewFilter] - Using session factory 'sessionFactory' for OpenSessionInViewFilter
[DEBUG][org.springframework.orm.hibernate.support.OpenSessionInViewFilter] - Opening single Hibernate session in OpenSessionInViewFilter
[DEBUG][net.sf.acegisecurity.context.HttpSessionContextIntegrationFilter] - Obtained from ACEGI_SECURITY_CONTEXT a valid Context and set to ContextHolder: 'net.sf.acegisecurity.context.security.SecureContextImpl@12b7e11: Authentication: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1ecb28e: Username: com.ccg.domain.Account@1c47573[id=1,....security.Group@1140071[id=1,name=Users,description=Intranet Application User,roles=[com.ccg.security.Role@1048104]]]]; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@15426ec: RemoteIpAddress: 127.0.0.1; SessionId: 90D0406D39095818FA10DF9395ED662F; Granted Authorities: ROLE_USER'
[DEBUG][net.sf.acegisecurity.providers.anonymous.AnonymousProcessingFilter] - ContextHolder not replaced with anonymous token, as ContextHolder already contained: 'net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1ecb28e: Username: com.ccg.domain.Account@1c47573[id=1,....security.Group@1140071[id=1,name=Users,description=Intranet Application User,roles=[com.ccg.security.Role@1048104]]]]; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@15426ec: RemoteIpAddress: 127.0.0.1; SessionId: 90D0406D39095818FA10DF9395ED662F; Granted Authorities: ROLE_USER'
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Converted URL to lowercase, from: '/credit_summary_list_companies.html?view=listcompanies'; to: '/credit_summary_list_companies.html?view=listcompanies'
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/credit_summary_list_companies.html?view=listcompanies'; pattern is /signon.html*; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/credit_summary_list_companies.html?view=listcompanies'; pattern is /welcome.html; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/credit_summary_list_companies.html?view=listcompanies'; pattern is /reference.html; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/credit_summary_list_companies.html?view=listcompanies'; pattern is /styles/**; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/credit_summary_list_companies.html?view=listcompanies'; pattern is /images/**; matched=false
[DEBUG][net.sf.acegisecurity.intercept.web.PathBasedFilterInvocationDefinitionMap] - Candidate is: '/credit_summary_list_companies.html?view=listcompanies'; pattern is /**; matched=true
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Secure object: FilterInvocation: URL: /credit_summary_list_companies.html?view=listCompanies; ConfigAttributes: [ROLE_USER]
[DEBUG][net.sf.acegisecurity.providers.ProviderManager] - Authentication attempt using net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider
[DEBUG][net.sf.acegisecurity.providers.dao.cache.EhCacheBasedUserCache] - Cache hit: true; username: jvargas
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@26592: Username: com.ccg.domain.Account@1c47573[id=1,....security.Group@1140071[id=1,name=Users,description=Intranet Application User,roles=[com.ccg.security.Role@1048104]]]]; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.ui.WebAuthenticationDetails@15426ec: RemoteIpAddress: 127.0.0.1; SessionId: 90D0406D39095818FA10DF9395ED662F; Granted Authorities: ROLE_USER
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - Authorization successful
[DEBUG][net.sf.acegisecurity.intercept.AbstractSecurityInterceptor] - RunAsManager did not change Authentication object
[INFO ][org.springframework.web.servlet.mvc.multiaction.MultiActionController] - Trying to find handler for exception class [org.springframework.orm.hibernate.HibernateSystemException]
[INFO ][org.springframework.web.servlet.mvc.multiaction.MultiActionController] - Trying to find handler for exception superclass [org.springframework.orm.hibernate.HibernateSystemException]
[INFO ][org.springframework.web.servlet.mvc.multiaction.MultiActionController] - Trying to find handler for exception superclass [org.springframework.dao.UncategorizedDataAccessException]
[INFO ][org.springframework.web.servlet.mvc.multiaction.MultiActionController] - Trying to find handler for exception superclass [org.springframework.dao.DataAccessException]
[INFO ][org.springframework.web.servlet.mvc.multiaction.MultiActionController] - Trying to find handler for exception superclass [org.springframework.core.NestedRuntimeException]
[INFO ][org.springframework.web.servlet.mvc.multiaction.MultiActionController] - Trying to find handler for exception superclass [java.lang.RuntimeException]
[INFO ][org.springframework.web.servlet.mvc.multiaction.MultiActionController] - Trying to find handler for exception superclass [java.lang.Exception]
[ERROR][org.springframework.web.servlet.FrameworkServlet] - Could not complete request
org.springframework.orm.hibernate.HibernateSystemException: a different object with the same identifier value was already associated with the session: 265, of class: com.ccg.period.TaxPeriod; nested exception is net.sf.hibernate.NonUniqueObjectException: a different object with the same identifier value was already associated with the session: 265, of class: com.ccg.period.TaxPeriod
net.sf.hibernate.NonUniqueObjectException: a different object with the same identifier value was already associated with the session: 265, of class: com.ccg.period.TaxPeriod
        at net.sf.hibernate.impl.SessionImpl.checkUniqueness(SessionImpl.java:1677)
        at net.sf.hibernate.impl.SessionImpl.doUpdateMutable(SessionImpl.java:1443)
        at net.sf.hibernate.impl.SessionImpl.doUpdate(SessionImpl.java:1470)
        at net.sf.hibernate.impl.SessionImpl.saveOrUpdate(SessionImpl.java:1393)
        at net.sf.hibernate.engine.Cascades$4.cascade(Cascades.java:114)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:436)
        at net.sf.hibernate.engine.Cascades.cascadeCollection(Cascades.java:526)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:452)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:503)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:482)
        at net.sf.hibernate.impl.SessionImpl.doUpdate(SessionImpl.java:1475)
        at net.sf.hibernate.impl.SessionImpl.saveOrUpdate(SessionImpl.java:1393)
        at net.sf.hibernate.engine.Cascades$4.cascade(Cascades.java:114)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:436)
        at net.sf.hibernate.engine.Cascades.cascadeCollection(Cascades.java:526)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:452)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:503)
        at net.sf.hibernate.engine.Cascades.cascade(Cascades.java:482)
        at net.sf.hibernate.impl.SessionImpl.preFlushEntities(SessionImpl.java:2673)
        at net.sf.hibernate.impl.SessionImpl.flushEverything(SessionImpl.java:2250)
        at net.sf.hibernate.impl.SessionImpl.autoFlushIfRequired(SessionImpl.java:1805)
        at net.sf.hibernate.impl.SessionImpl.getQueries(SessionImpl.java:1568)
        at net.sf.hibernate.impl.SessionImpl.find(SessionImpl.java:1533)
        at net.sf.hibernate.impl.QueryImpl.list(QueryImpl.java:39)
        at net.sf.hibernate.impl.AbstractQueryImpl.uniqueResult(AbstractQueryImpl.java:550)
        at com.ccg.dao.hibernate.HibernateClientDAO.getTotalCreditByCompany(HibernateClientDAO.java:950)
        at com.ccg.credit.service.CreditServiceImpl.getTotalCreditByCompany(CreditServiceImpl.java:48)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:296)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:155)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:122)
        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:56)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:144)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:174)
        at $Proxy22.getTotalCreditByCompany(Unknown Source)
        at com.ccg.credit.web.CreditSummaryController.listCompanies(CreditSummaryController.java:150)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.springframework.web.servlet.mvc.multiaction.MultiActionController.invokeNamedMethod(MultiActionController.java:352)
        at org.springframework.web.servlet.mvc.multiaction.MultiActionController.handleRequestInternal(MultiActionController.java:305)
        at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:123)
        at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:44)
        at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:584)
        at org.springframework.web.servlet.FrameworkServlet.serviceWrapper(FrameworkServlet.java:368)
        at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:319)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
        at net.sf.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:84)
        at net.sf.acegisecurity.intercept.web.SecurityEnforcementFilter.doFilter(SecurityEnforcementFilter.java:182)
        at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:125)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
        at net.sf.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:153)
        at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:125)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
        at net.sf.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:374)
        at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:125)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
        at net.sf.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:225)
        at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:125)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
        at org.springframework.orm.hibernate.support.OpenSessionInViewFilter.doFilterInternal(OpenSessionInViewFilter.java:171)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
        at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705)
        at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
        at java.lang.Thread.run(Thread.java:534)
[DEBUG][org.springframework.orm.hibernate.support.OpenSessionInViewFilter] - Closing single Hibernate session in OpenSessionInViewFilter

---