Sravan-

I would say that if "Use J2EE Session Variables" is turned on in the CFAdmin
and the remote system is to using CFID/CFTOKEN pairs instead, that would
definitely result in the behavior you're seeing.

-Cameron

On Thu, Jun 18, 2009 at 11:31 AM, Mike Staver <sta...@fimble.com> wrote:

> I've had issues with CF 7 & 8 before in cases where I had the J2EE
> sessions turned on or off in the CF Administrator. With them turned off
> while using Application.cfc, no sessions were "sticking".  Every page
> request seemed to generate a new session.  That doesn't sound like the
> issue here, but you might try turning that setting on or off and see if
> that affects behavior any.  I would suggest playing around with or at the
> very least making note of these settings:
>
> - Use J2EE session variables
> - Enable Application Variables
> - Enable Session Variables
>
> >
> > Tried the same (appending CFID and CFTOKEN in the form POST) but still
> CF8
> > generating a new CFID and CFTOKEN as soon we get a request from third
> > party.
> >
> >
> >
> > i don't understand why CF8 creating a new session when infact it see a
> > valid CFID and CFTOKEN in the URL as well.
> >
> >
> >
> > thanks
> >
> > Sravan
> >
> >
> >
> >
> >
> > From: sdruc...@figleaf.com
> > To: discussion@acfug.org
> > Subject: Re: [ACFUG Discuss] single sign-on issue CF 8
> > Date: Wed, 17 Jun 2009 21:04:47 -0400
> > CC: discussion@acfug.org
> >
> >
> > Try passing the cfid and cftoken back from the third party server to cf
> > over the URL.
> >
> > Regards,
> > Steve Drucker
> > Founder
> > Fig Leaf Software
> > http://www.figleaf.com
> > http://training.figleaf.com
> >
> >
> >
> > On Jun 17, 2009, at 9:00 PM, sravan kumar <erk...@hotmail.com> wrote:
> >
> >
> >
> >
> > Hi,
> >
> > We are converting our applications from CF5 to CF8.0. Yes, we are still
> in
> > CF5.0 for various reasons :-)
> >
> > We have a application in CF5 in production that integrates with a third
> > party application. When a user clicks a link on our application, we will
> > post an action page to third party site with session info (like encrypted
> > cookie, cfid and cftoken etc). Third party makes an internal request from
> > their app to our site to get some xml data using the session identifiers
> > provided using a https GET request. This works fine. however when they
> > make an internal request to our site using https POST method, our CF8
> > server is generating a new session for some reason.
> >
> > does anybody have seen this behaviour? This app works great in CF5.0
> > though.
> >
> > Any insight is greatly appreciated.
> >
> > thanks
> > Sravan
> >
> >
> >
> >
> >
> >
> > Lauren found her dream laptop. Find the PC that’s right for you.
> > -------------------------------------------------------------
> > To unsubscribe from this list, manage your profile @
> > http://www.acfug.org?fa=login.edituserform
> >
> > For more info, see http://www.acfug.org/mailinglists
> > Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> > List hosted by FusionLink
> > -------------------------------------------------------------
> > _________________________________________________________________
> > Bing™  brings you maps, menus, and reviews organized in one place.   Try
> > it now.
> >
> http://www.bing.com/search?q=restaurants&form=MLOGEN&publ=WLHMTAG&crea=TEXT_MLOGEN_Core_tagline_local_1x1
> >
> >
> > -------------------------------------------------------------
> >
> > To unsubscribe from this list, manage your profile @
> >
> > http://www.acfug.org?fa=login.edituserform
> >
> >
> >
> > For more info, see http://www.acfug.org/mailinglists
> >
> > Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> >
> > List hosted by http://www.fusionlink.com
> >
> > -------------------------------------------------------------
> >
> >
> >
>
>
>
> -------------------------------------------------------------
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?falogin.edituserform
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by http://www.fusionlink.com
> -------------------------------------------------------------
>
>
>
>


-- 
Cameron Childress
Sumo Consulting Inc
http://www.sumoc.com
---
cell:  678.637.5072
aim:   cameroncf
email: camer...@gmail.com

Reply via email to