Re: Sessions Across Domains / SSL

2005-04-27 Thread Bert Dawson
Passing cfid and cftoken in the URL to a separate domain on the same
server will allow you to share sessions across domains, but only if
the server is set NOT to use J2EE sessions (cfadmin > server settings
> memory variables).
If you *are* using J2EE sessions then passing the jsessionid in the
URL won't work across domains: i'm not sure what JRun uses to
determine that a particular sessionid is not valid for a domain, but
you will get assigned a new session.

The only way i've found to share a session accross domains is to pass
the sessionid to the new domain (either in URL or form), then on the
new domain write the cookie manually using cfheader (eg ) (Using
cfcookie didn't work cos it urlencodes the $'s...). Once you have
written the cookie on the new domain then all subsequent requests on
the new domain will use the session attached to that cookie.

I don't know if this will work in your case, but its the only way i've
found to  use J2EE sessions and share them accross more than one
domain (eg www.myenglishdomain.com and www.myfrenchdomain.fr)
If anyone has a simpler way to do this then i'd like to know...

Cheers
Bert


On 4/26/05, Brad Roberts <[EMAIL PROTECTED]> wrote:
> I'm using a shared SSL from HostMySite.  When I send a visitor to an SSL
> page, they lose their session and are prompted to login again.
> 
> In the past, I've appended the urlToken and session vars were maintained.  I
> do know that HostMySite has upgraded to CFMX 7.  Shouldn't this work if I
> pass the cfid/cftoken?
> 
> Thanks,
> 
> Brad Roberts
> 
> 

~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:204645
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Sessions Across Domains / SSL

2005-04-26 Thread Brad Roberts
I'm using a shared SSL from HostMySite.  When I send a visitor to an SSL
page, they lose their session and are prompted to login again.

In the past, I've appended the urlToken and session vars were maintained.  I
do know that HostMySite has upgraded to CFMX 7.  Shouldn't this work if I
pass the cfid/cftoken?

Thanks, 

Brad Roberts


~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:204576
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54