Adi:

I tried this, but the problem is that the session id is not encoded
into URLs that are not on the same hostname.

        Neil.

--
Neil Aggarwal
JAMM Consulting, Inc.    (972) 612-6056, http://www.JAMMConsulting.com
Custom Internet Development    Websites, Ecommerce, Java, databases


> -----Original Message-----
> From: Aditya [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, April 13, 2002 11:46 PM
> To: Tomcat Users List
> Subject: Re: Session Tacking across hostnames?
>
>
> Hi Neil,
>
> cookies are bound to the server name, so you can't use cookies
> (the default
> method with Tomcat) to track sessions. If you are not doing
> form-based realm
> authentication, you can use URL rewriting to track the session by setting:
>
> cookies="false"
>
> for the contexts you are serving (you could also do it for the default
> context).
>
> I think this is what you are asking.
>
> Thanks,
> Adi
>
> On Sat, Apr 13, 2002 at 11:48:40PM -0500, Neil Aggarwal wrote:
> > Hello:
> >
> > I am using Apache 1.3 and Tomcat 4.0.3.
> >
> > For an application we are building, we are using a shared SSL
> certificate
> > so the hostname has to be different for http and https.  For example,
> > public pages are loaded from
http://www.futurescope.com/fscope/myPage.jsp
> and private pages are loaded from
> http://www.JAMMConsulting.com/fscope/privatePage.jsp
>
> Unforutnately, when we switch from http to https or vice versa, we lose
> track of the session.  Is there a way to keep the session is this
> instance?
>
> Thanks,
>       Neil.
>
> --
> Neil Aggarwal
> JAMM Consulting, Inc.    (972) 612-6056, http://www.JAMMConsulting.com
> Custom Internet Development    Websites, Ecommerce, Java, databases
>
>
> --
> To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> For additional commands: <mailto:[EMAIL PROTECTED]>
> Troubles with the list: <mailto:[EMAIL PROTECTED]>
>

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>


--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to