Hi Neil,

cookies are bound to the server name, so you can't use cookies (the default
method with Tomcat) to track sessions. If you are not doing form-based realm
authentication, you can use URL rewriting to track the session by setting:

cookies="false"

for the contexts you are serving (you could also do it for the default
context).

I think this is what you are asking.

Thanks,
Adi

On Sat, Apr 13, 2002 at 11:48:40PM -0500, Neil Aggarwal wrote:
> Hello:
> 
> I am using Apache 1.3 and Tomcat 4.0.3.
> 
> For an application we are building, we are using a shared SSL certificate
> so the hostname has to be different for http and https.  For example,
> public pages are loaded from http://www.futurescope.com/fscope/myPage.jsp
> and private pages are loaded from
> http://www.JAMMConsulting.com/fscope/privatePage.jsp
> 
> Unforutnately, when we switch from http to https or vice versa, we lose
> track of the session.  Is there a way to keep the session is this
> instance?
> 
> Thanks,
>       Neil.
> 
> --
> Neil Aggarwal
> JAMM Consulting, Inc.    (972) 612-6056, http://www.JAMMConsulting.com
> Custom Internet Development    Websites, Ecommerce, Java, databases
> 
> 
> --
> To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> For additional commands: <mailto:[EMAIL PROTECTED]>
> Troubles with the list: <mailto:[EMAIL PROTECTED]>
> 

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to