I have reviewed the mailing list and I have found that the normal behaviour in tomcat is

You enter in http and then change to https (session is shared)
You enter in https and then in http (you have two different sessions)


I would like to have different sessions for different schemas, that is, If you connect to http and then to https then TWO DIFFERENT sessions are created.
But I have not found how to do this.


My fear is that on different application servers the behaviour is different.


Ismael

John Sidney-Woollett wrote:

Ismael Blesa Part said:


I have set two connectors http and https. I have my webapp that is
served by these two connectors.



[snip]



However, If I connect first to https and then I change to http, I will
have two sessions, one for https and the other one to http.



I believe that this is normal.

If you ensure that the session is created using a non secure page first
(you can always redirect from a non-secure to a secure page after creating
the session), then the problem will go away.

John Sidney-Woollett

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to