We actually do that on purpose because the cookie should be scoped as
minimally as possible so we have it set on the first request (because
Servlet 2.4 doesn't have the ContextPath on the ServletContext) in order to
do autoconfiguration (we also didn't just want to assume everyone deployed
to /cas).  Once Servlet 2.5 is more popular (and maybe its popular enough?)
we can access the servlet context from within the Spring Application Context
and set it in the config via that, this way people can change it there if
they really wanted to.  Our goal is to make sure its always set to the
proper context path.

Cheers,
Scott


On Wed, Sep 16, 2009 at 6:57 PM, Ryan Andreasen <[email protected]>wrote:

>
> I noticed in the spring-configuration folder that there is a
> ticketGrantingTicketCookieGenerator.xml file.  It looks like this file is
> used to set properties of the TGT cookie such as name, cookie age, path,
> and
> domain.
>
> I have been playing around with changing the domain & path.  By changing
> the
> values in that file for the domain, CAS honors it and sure enough creates
> the TGT for the domain specified.  However, if I change the path in the
> ticketGrantingTicketCookieGenerator.xml, CAS still creates the cookie with
> a
> path of "/cas", not what I specified in the xml file.  I am using CAS
> 3.3.1.
> Is this desired, or a bug?  It looks like there is a class
> "InitialFlowSetupAction" that sets the path also/instead, but I don't
> really
> see what it is doing.
>
> Any comments are GREATLY appreciated.
>
> Thanks!
> --
> View this message in context:
> http://www.nabble.com/Changing-TGT-Cookie-Path-tp25482399p25482399.html
> Sent from the CAS Users mailing list archive at Nabble.com.
>
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to