[
https://issues.apache.org/jira/browse/CONNECTORS-97?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12902880#action_12902880
]
Karl Wright commented on CONNECTORS-97:
---------------------------------------
It turns out that our version of httpclient does not allow this to be
configured. The code in question can be found in the validate() methods in
commons-httpclient-3x/src/java/org/apache/httpclient/cookie/:
CookieSpecBase.java
and
RFC2965Spec.java
Thus, fixing this problem will require adding a configuration parameter to our
httpclient version, as well as changing the web connector to set this
configuration parameter appropriately.
> Web connector session authentication fails for some sites due to cookies
> httpclient says are illegal, but browsers accept
> -------------------------------------------------------------------------------------------------------------------------
>
> Key: CONNECTORS-97
> URL: https://issues.apache.org/jira/browse/CONNECTORS-97
> Project: Apache Connectors Framework
> Issue Type: Bug
> Components: Web connector
> Reporter: Karl Wright
>
> While trying to set up session authentication for the site
> http://www.ppdm.org, I ran into authentication problems that resulted from
> httpclient rejecting cookies:
> Cookie rejected:
> "ppdm_forum_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D".
> Illegal path attribute "/forums". Path of origin: "/ba/login/login"
> Cookie rejected: "ppdm_forum_sid=338b5f5f0887ab4c2499948fc05daac8". Illegal
> path attribute "/forums". Path of origin: "/ba/login/login"
> Cookie rejected:
> "ppdm_forum_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A32%3A%2266a33ac80119bdcf7a1129f78de857a1%22%3Bs%3A6%3A%22userid%22%3Bs%3A4%3A%221346%22%3B%7D".
> Illegal path attribute "/forums". Path of origin: "/ba/login/login"
> Cookie rejected: "ppdm_forum_sid=3c36d20f96423b2de2d215a33b304e18". Illegal
> path attribute "/forums". Path of origin: "/ba/login/login"
> And yet, FireFox and IE have no trouble with these. I suspect that there
> must be a configuration setting for httpclient that will fix this problem -
> and if there isn't, we need to add one and set it appropriately in the web
> connector code.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
