> I am working in a uni and we have multiple sites (on the same > server) requiring authentication. We simmply cannot afford to > purchase a cert for each site (domain and separate IP), so my > solution was to created a single site with a cert which has > the other sites available as virtual directories, > Authentication would be performed via ssl and then the user > would be redirected (using cflocation) back to the insecure > site along with the session (cfif, cftoken) appended to the > URL, however when I do this I cannot see the session > variables established during authentication even though the > cfid and cftoken are the same .... > > Any ideas how I can acheive this ?
Your university might have a certificate server. This would let you get your certs for free. You can also get wildcard certs, which can be applied to multiple hosts within a domain. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ Fig Leaf Software provides the highest caliber vendor-authorized instruction at our training centers in Washington DC, Atlanta, Chicago, Baltimore, Northern Virginia, or on-site at your location. Visit http://training.figleaf.com/ for more information! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:312860 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

