[FYI, we use Tomcat 4.0.4 on Linux with Apache 1.3 + mod_jk]

Our application keeps losing session randomly 
when browsing pages with IE 5.5 or IE 6.

It happens in frameset situations or 
when using javascript:window.open( ), 
despite the response.encodeURL(...)

Here is typically what happens:
* an index.jsp page gives birth to Frame A and Frame B.
* index.jsp got his sessionid from session cookie, so 
   response.encodeURL DOES NOT ADD ;jsessionid=xxxx
* For any reason (probably some bug...), the browser does 
   NOT forward the cookie to Frame A and/or Frame B
* The frame loses the session and creates a new one.

To check this behaviour, we tried the same with a 
systematic ;jsessionid encoding.
The result is that the session is NOT lost anymore, but 
isRequestedSessionIdFromURL() sometimes returns TRUE
in the frame page.
We observed also that the session is not destroyed in 
Tomcat, but the browser got a new session cookie 
from the new session and the client loses his session
in all frames consequently.



And my question is...

Is there a way to FORCE systematically the URL encoding in 
the response.encodeURL() method,
even if the sessionId comes from jsessionid cookie ?


Thanks for any help,

--Eric Amram


--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@;jakarta.apache.org>

Reply via email to