RE: Session Tacking across hostnames?

2002-04-15 Thread Neil Aggarwal
-Original Message- From: Joel Rees [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 14, 2002 10:35 PM To: Tomcat Users List Cc: [EMAIL PROTECTED] Subject: Re: Session Tacking across hostnames? Neil Aggarwal wrote: For an application we are building, we are using a shared SSL

RE: Session Tacking across hostnames?

2002-04-15 Thread Pekník Jan
I think this would help : when you switch from HTTP to HTTPS, add JSESSIONID to that url by calling response.encodeURL(url) -Jan -Original Message- From: Neil Aggarwal [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 14, 2002 6:49 AM To: Tomcat-User Subject: Session Tacking

RE: Session Tacking across hostnames?

2002-04-15 Thread Neil Aggarwal
-Original Message- From: Pekník Jan [mailto:[EMAIL PROTECTED]] Sent: Monday, April 15, 2002 8:53 AM To: 'Tomcat Users List' Subject: RE: Session Tacking across hostnames? I think this would help : when you switch from HTTP to HTTPS, add JSESSIONID to that url by calling response.encodeURL

Re: Session Tacking across hostnames?

2002-04-15 Thread David Cassidy
Consulting, Inc.(972) 612-6056, http://www.JAMMConsulting.com Custom Internet DevelopmentWebsites, Ecommerce, Java, databases -Original Message- From: Pekník Jan [mailto:[EMAIL PROTECTED]] Sent: Monday, April 15, 2002 8:53 AM To: 'Tomcat Users List' Subject: RE: Session Tacking across

RE: Session Tacking across hostnames?

2002-04-15 Thread Neil Aggarwal
Cassidy [mailto:[EMAIL PROTECTED]] Sent: Monday, April 15, 2002 10:10 AM To: Tomcat Users List Subject: Re: Session Tacking across hostnames? How about this ... don't use encodeIURL just emulate it ... ie do the ;jsessionid= sessionID yourself . David Neil Aggarwal wrote: Jan

RE: Session Tacking across hostnames?

2002-04-15 Thread Syski, Leszek
-Original Message- From: Neil Aggarwal [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 14, 2002 1:09 AM To: Tomcat Users List; Aditya Subject: RE: Session Tacking across hostnames? Adi: I tried this, but the problem is that the session id is not encoded into URLs

Re: Session Tacking across hostnames?

2002-04-15 Thread David Cassidy
, 2002 10:10 AM To: Tomcat Users List Subject: Re: Session Tacking across hostnames? How about this ... don't use encodeIURL just emulate it ... ie do the ;jsessionid= sessionID yourself . David Neil Aggarwal wrote: Jan: I am using repsonse.encodeURL, but it does not add the session id when

Re: Session Tacking across hostnames?

2002-04-15 Thread Joel Rees
Internet DevelopmentWebsites, Ecommerce, Java, databases -Original Message- From: Joel Rees [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 14, 2002 10:35 PM To: Tomcat Users List Cc: [EMAIL PROTECTED] Subject: Re: Session Tacking across hostnames? Neil Aggarwal wrote

Re: Session Tacking across hostnames?

2002-04-14 Thread Joel Rees
Neil Aggarwal wrote: For an application we are building, we are using a shared SSL certificate so the hostname has to be different for http and https. For example, public pages are loaded from http://www.futurescope.com/fscope/myPage.jsp and private pages are loaded from

Session Tacking across hostnames?

2002-04-13 Thread Neil Aggarwal
Hello: I am using Apache 1.3 and Tomcat 4.0.3. For an application we are building, we are using a shared SSL certificate so the hostname has to be different for http and https. For example, public pages are loaded from http://www.futurescope.com/fscope/myPage.jsp and private pages are loaded

Re: Session Tacking across hostnames?

2002-04-13 Thread Aditya
Hi Neil, cookies are bound to the server name, so you can't use cookies (the default method with Tomcat) to track sessions. If you are not doing form-based realm authentication, you can use URL rewriting to track the session by setting: cookies=false for the contexts you are serving (you could

RE: Session Tacking across hostnames?

2002-04-13 Thread Neil Aggarwal
-Original Message- From: Aditya [mailto:[EMAIL PROTECTED]] Sent: Saturday, April 13, 2002 11:46 PM To: Tomcat Users List Subject: Re: Session Tacking across hostnames? Hi Neil, cookies are bound to the server name, so you can't use cookies (the default method with Tomcat) to track