Thanks for the info on the doctype, I will look into that.

Version information:
Server version: Apache Tomcat/7.0.14
Server built:   May 9 2011 10:40:56
Server number:  7.0.14.0

For your issue #1, that's the entire reason I was asking.  Since its a session 
cookie I was curious as to why the max age isn't updated to reflect the current 
state of the session. 

-----Original Message-----
From: Konstantin Kolinko [mailto:knst.koli...@gmail.com] 
Sent: Wednesday, July 13, 2011 8:55 PM
To: Tomcat Users List
Subject: Re: Session cookie max age

2011/7/14 Josh Simmons <josh.simm...@colinx.com>:
> Our web.xml file minus listeners and servlet config.  I also removed some 
> taglib definitions.
>
> <?xml version="1.0" encoding="ISO-8859-1"?>
>
> <!DOCTYPE web-app
>    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
>    "http://java.sun.com/dtd/web-app_2_3.dtd";>

Eh...  remove the above. It isn't servlet 2.3 webapp, isn't it?

>
> <web-app xmlns="http://java.sun.com/xml/ns/javaee";
>  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
>  xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
>                      http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd";
>  version="3.0">

If you'll add the following line into conf/catalina.properties, Tomcat will 
validate your web.xml file according to the schema:

org.apache.catalina.STRICT_SERVLET_COMPLIANCE=true

[http://tomcat.apache.org/tomcat-7.0-doc/config/systemprops.html]


You are not saying what release of Tomcat 7.0.x you are using.


AFAIK,
1) Tomcat won't send Set-Cookie when session id is already known (either from 
this webapp or  from webapp on its parent path such as ROOT).

See code that calls
o.a.c.core.ApplicationSessionCookieConfig#createSessionCookie(..)


2) The Cookie header sent by the web browser does not include neither Path nor 
Expires/Max-Age values.


Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to