Dear Rafael:
 
Thanks a lot.

I've solved the session share problem. I found the clue in your old message:
http://www.mail-archive.com/[email protected]/msg15659.html

Sometimes I can't post message to the mailing list, so I email you, and thank you.
 
I think it is someting different between the two ways to load the web application. If 
the first request is via https, it load as a secure instance first, otherwise, as a 
non-secure instance first.  What I need to do is to make sure it startup and load the 
app as a non-secure instance first. So I use the "load-on-startup" attribute.

<web-app application="mywebapp" name="myweb" root="/"  shared="true" 
load-on-startup="true" /> for non secure web-site.xml
<web-app application="mywebapp" name="myweb" root="/"  shared="true" 
load-on-startup="false" /> for secure web-site.xml


Thanks again!


                        Jishan

----- Original Message ----- 
From: "Rafael Alvarez" <[EMAIL PROTECTED]>
To: "Orion-Interest" <[EMAIL PROTECTED]>
Sent: Thursday, September 06, 2001 10:20 PM
Subject: Re[2]: Session share problem.


> Hello Jishan,
> There is an option (shared="true as stated in other posting) to share
> session between different instances of the SAME application. The
> keyword is SAME. If you use different applications for each of your
> normal site and your secure site then that solution won't work.
> 
> What you can do in that case is to "send" the sessionId() of the
> nonsecure site to the secure site, and viceversa. For example:
> To enter the secure site, use a link like :
> secure.jsp?nonsecureId=<Nonsecure Id>
> 
> To reenter the non-secure site:
> nonsecure.jsp;jsessionId=<Nonsecure Id>?secureId=<Secure Id>
> 
> To reenter the secure site:
> secure.jsp;jsessionId=<Secure Id>?nonsecureId=<Nonsecure Id>
> 
> 
> Wednesday, September 05, 2001, 9:34:33 PM, you wrote:
> 
> GM> i think there's a share="true" attribute that you have to put in the 
>web-site.xml file ??? check out the doco in www.orionserver.com
> 
> GM>   ----- Original Message ----- 
> GM>   From:  Li
> GM>   To: Orion-Interest 
> GM>   Sent: Wednesday, September 05, 2001 7:42 PM
> GM>   Subject: Session share problem.
> 
> 
> GM>   Hi,
> GM>      I have session share problem between ssl site and non-ssl site. My ssl site 
>name is secure.mysite.com and non-ssl site name is www.mysite.com. when I start my 
>server, and visit
> GM> www.mysite.com firstly, everything goes well. But when I visit secure.mysite.com 
>firstly after I starting my orion server, and then back to www.mysite.com  every 
>request on www.mysite.com create
> GM> a new session.  So my user login, shopping cart won't work!!!
> GM>      Is there any one can help me?
> GM>   Thanks!
> 
> GM>   Jishan Li.
> 
> 
> 
> -- 
> Best regards,
>  Rafael                            mailto:[EMAIL PROTECTED]
> 
> 
> 
> 
�������������������������������������������:������g�ʋ�~���&���ܢf�v����a�������_�j(��&

Reply via email to