Thanks for your reply Scott.  So it sounds like there is no way to change
the cookie's path then, is that correct?

On Wed, Sep 16, 2009 at 7:29 PM, Scott Battaglia
<[email protected]>wrote:

> We actually do that on purpose because the cookie should be scoped as
> minimally as possible so we have it set on the first request (because
> Servlet 2.4 doesn't have the ContextPath on the ServletContext) in order to
> do autoconfiguration (we also didn't just want to assume everyone deployed
> to /cas).  Once Servlet 2.5 is more popular (and maybe its popular enough?)
> we can access the servlet context from within the Spring Application Context
> and set it in the config via that, this way people can change it there if
> they really wanted to.  Our goal is to make sure its always set to the
> proper context path.
>
> Cheers,
> Scott
>
>
> On Wed, Sep 16, 2009 at 6:57 PM, Ryan Andreasen 
> <[email protected]>wrote:
>
>>
>> I noticed in the spring-configuration folder that there is a
>> ticketGrantingTicketCookieGenerator.xml file.  It looks like this file is
>> used to set properties of the TGT cookie such as name, cookie age, path,
>> and
>> domain.
>>
>> I have been playing around with changing the domain & path.  By changing
>> the
>> values in that file for the domain, CAS honors it and sure enough creates
>> the TGT for the domain specified.  However, if I change the path in the
>> ticketGrantingTicketCookieGenerator.xml, CAS still creates the cookie with
>> a
>> path of "/cas", not what I specified in the xml file.  I am using CAS
>> 3.3.1.
>> Is this desired, or a bug?  It looks like there is a class
>> "InitialFlowSetupAction" that sets the path also/instead, but I don't
>> really
>> see what it is doing.
>>
>> Any comments are GREATLY appreciated.
>>
>> Thanks!
>> --
>> View this message in context:
>> http://www.nabble.com/Changing-TGT-Cookie-Path-tp25482399p25482399.html
>> Sent from the CAS Users mailing list archive at Nabble.com.
>>
>>
>> --
>> You are currently subscribed to [email protected] as:
>> [email protected]
>> To unsubscribe, change settings or access archives, see
>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>>
>
> --
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to