Thanks, Greg & Rafael.
 
I post this message yesterday.... but it was lost, I think.  Try again today, hope to get some help.
 
Yes. I have share="true", the secure and non-secure site is within a SAME application.
 
My configs like followings..
 
1) when I start the orionserver,
 
d:\orion>java -jar orion.jar
Orion/1.4.5 initialized
 
2) Then I typed https://secure.mysite.com in my web browser, to request my webapp. The webapp ran.
3) And then I came back to http://www.mysite.com and tried to put some products to the shopping cart, 
the shopping cart was alway empty. I placed this in my cart detail page,
<%
   System.out.println("session is new - " + session.isNew());
%>
The console was always printing session is new - true . It seems that the server creates a new session for EACH http request.
 
4) but if I restart the orionserver now.
5) And I visit http://www.mysite.com first, this time. shopping cart works. and session share between www.mysite.com and secure.mysite.com works fine.
 
Does the server start the app in different way according to the protocol of the first request????
 
could you provide more help?  Thank you!
 
Jishan Li.
 
 
================================
default-web-site.xml
================================
<?xml version="1.0"?>
<!DOCTYPE web-site PUBLIC "Orion Web-site" "
http://www.orionserver.com/dtds/web-site.dtd">
<web-site host="[ALL]" port="80" display-name="Default Orion WebSite">
 <default-web-app application="default" name="defaultWebApp" />
 <web-app application="myweb" name="myWeb" root="/shared="true" />
 <access-log path="../log/default-web-access.log" />
</web-site>
 
=============================
secure-web-site.xml
=============================
<?xml version="1.0"?>
<!DOCTYPE web-site PUBLIC "Orion Web-site" "
http://www.orionserver.com/dtds/web-site.dtd">
<web-site host="[ALL]"  display-name="Default Orion WebSite" secure="true" >
 <default-web-app application="default" name="defaultWebApp" />
 <web-app application="myweb" name="myWeb" root="/"  shared="true"/>
 <access-log path="../log/default-web-access.log" />
 <ssl-config keystore="../my/keystore" keystore-password="123456" />
</web-site>
 
=============================
server.xml
=============================
<?xml version="1.0"?>
<!DOCTYPE application-server PUBLIC "Orion Application Server Config" "
http://www.orionserver.com/dtds/application-server.dtd">
<application-server
 application-directory="../applications"
 deployment-directory="../application-deployments"
>
 <rmi-config path="./rmi.xml" />
 <jms-config path="./jms.xml" />
 <principals path="./principals.xml" />
 <log>
  <file path="../log/server.log" />
 </log>
 <global-application name="default" path="application.xml" />
 <global-web-app-config path="global-web-application.xml" />
 <web-site path="./default-web-site.xml" />
 <web-site path="./secure-web-site.xml" />
 <application name="myweb" path="../applications/myweb.ear" />
</application-server>
 
=============================
/EWB-INF/orion-web.xml
=============================
<?xml version="1.0"?>
<!DOCTYPE orion-web-app PUBLIC "-//Evermind//DTD Orion Web Application 2.3//EN" "
http://www.orionserver.com/dtds/orion-web.dtd">
<orion-web-app
 deployment-version="1.3.8"
 jsp-cache-directory="./persistence"
 temporary-directory="./temp"
 servlet-webdir="/servlet/"
>
 <session-tracking cookie-domain=".mysite.com"/>
 <ejb-ref-mapping  location="ejb/applicationservice" name="ejb/applicationservice" />
</orion-web-app>

Reply via email to