On 3/23/06, Adam Churvis <[EMAIL PROTECTED]> wrote:
> ColdFusion Server is broken with respect to the CFLOGIN security framework
> working on a clustered system with failover.  The reason is that the
> authentication cookie contains the authentication information but not any
> authorization (roles) information.  The authorization information is stored
> locally only on the server on which CFLOGINUSER was called, but not in the
> Session scope, so this information never gets synidcated to the other
> machines.

Setting cflogin to use cookies appears to work fine with multiple non
clustered CF servers.

Cheers.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:236189
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to