You are right Scott. This is how it behaves in IE 6x versions. I am not sure if this behavior has changed in IE 7x versions.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Battaglia Sent: Friday, July 07, 2006 5:34 PM To: Yale CAS mailing list Subject: Re: CAS ask me for authentication everytime In IE, I believe if you open a new window (by doing File->New Window) that shares the session information. However, I believe opening a new window via "Start->Internet Explorer" may not share the session information. I believe that's what I saw in my testing but its been awhile so I may be remembering it wrong :-) Huertas Fernández wrote: > > Clinton, I have been a couple of days without visiting the Acegi > forum, because I wasn't getting any help and it seemed to be related > with CAS rather than with Acegi. > > I'm using IE version 6.0.2900.2180 and Firefox 1.5.0.4. > > I had noticed that using Firefox I could open different tabs (or even > new browsers) and I was already authenticated. However, I only have > one CAS application (client), and the browsers were sharing the same > session ID, so Acegi didn't redirect me to CAS authentication because, > from the application's point of view, all the browsers are the same > client. I couldn't try it with different applications, but I guess the > browsers would share the same session cookie (until you close all) > because that seems to be the behaviour for Firefox. > > IE bug? I don't know, but maybe it is just a design decision (share > the session cookies between browser instances or not) and they have > changed its point of view in IE 7 (BTW, did you try with differents > tabs or different browsers?) I don't think the behaviour about session > cookies when you have several browser instances is specified in any > RFC or something like that... > > Best regards, > > Jose Luis. > > ------------------------------------------------------------------------ > > *De:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > *En nombre de *Clinton Sandy > *Enviado el:* jueves, 06 de julio de 2006 21:49 > *Para:* [email protected] > *Asunto:* CAS ask me for authentication everytime > > Jose, > > I left a message for you in the Acegi forum but I guess you haven't been > back there since you weren't getting any help. I'd like to know what > browser > you are using. I have two server installations using version 2.0.12 > and version 3.0.4. > When I use IE 6.2800.1106 and IE 6.0.2900.2180 the sso fails. But when > I use > Firefox 1.5.0.4 <http://1.5.0.4> and IE 7.0 beta 3 it works fine. In > the cases where this fails, > it seems that the browser is not setting the cookie. > > I'm wondering if anyone else is seeing this behaviour? The important > point is the same server configuration is providing different results > for different browsers. Jose seems to have gotten past this problem > by changing his server configuration but aren't we overlooking > a possible bug in IE? > > Any comments and suggestions are greatly appreciated. > > Thanks, > Clinton > > ------------------------------------------------------------------------------------------------------------------- > Este correo electrónico y, en su caso, cualquier fichero anexo al > mismo, contiene información de carácter confidencial exclusivamente > dirigida a su destinatario o destinatarios. Queda prohibida su > divulgación, copia o distribución a terceros sin la previa > autorización escrita de Indra. En el caso de haber recibido este > correo electrónico por error, se ruega notificar inmediatamente esta > circunstancia mediante reenvío a la dirección electrónica del > remitente. POR FAVOR, ANTES DE IMPRIMIR ESTE CORREO ELECTRÓNICO > CONSIDERE SU APORTACIÓN A LA CONSERVACIÓN DEL MEDIO AMBIENTE POR LA > REDUCCIÓN DE CONSUMO DE PAPEL. > > The information in this e-mail and in any attachments is confidential > and solely for the attention and use of the named addressee(s). You > are hereby notified that any dissemination, distribution or copy of > this communication is prohibited without the prior written consent of > Indra. If you have received this communication in error, please, > notify the sender by reply e-mail. PLEASE CONSIDER YOUR ENVIRONMENTAL > RESPONSIBILITY BEFORE PRINTING THIS E-MAIL. > ------------------------------------------------------------------------ > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
