Brane F. Grac(nar wrote: > Hello :) > > We needed subdomain session cookie support for our java webapp; currently > there is no way to configure cookie domain attribute in tomcat <= 6.0.18. > > This patch adds this functionality. Cookie domain can be specified as Manager > property (default null == turned off) in conf/context.xml or on per webapp > context property (conf/<engine_name>/<vhost>/appname.xml or > META-INF/context.xml).
Please create a bugzilla entry for this and attach the patch there so it doesn't get lost. To keep this consistent with httpOnly, this should be configured at the Context level rather than the manager. It would also be a good idea to include an update to the documentation in your patch. Mark > > --- snip --- > <Context override="true"> > <Manager cookieDomain=".example.org" /> > </Context> > --- snip --- > > Webapp will then issue session cookies in the following form: > > JSESSIONID=D29B85A0D5E3AADA7DAA2B8DE660B0B3; Domain=.example.org; Path=/ > > Browser will send this cookie to sites www.example.org, subsite.example.org, > etc... > > This functionality is already implemented in Resin and Jetty. > > How to use/apply: > svn co http://svn.apache.org/repos/asf/tomcat/tc6.0.x/tags/TOMCAT_6_0_18 > cd TOMCAT_6_0_18 > patch -p0 < /path/to/tomcat-6.0.18-subdomain-session-cookie.patch > ant download > ant > > Best regards, Brane > > > ------------------------------------------------------------------------ > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
