RE: Session vars not being retained. Any ideas why?
Mike, are you passing along the CFID/CFTOKEN attribute (or URLToken for short) in your links? Peter Tilbrook ColdFusion Applications Developer ColdGen Internet Solutions 4/73 Tharwa Road Queanbeyan, NSW, 2620 AUSTRALIA Telephone: +61-2-6284-2727 Mobile: +61-0439-401-823 E-mail: [EMAIL PROTECTED] World Wide Web: http:/www.coldgen.com/ == Analust - word meaning a Analyst (like myself) seeking work as an analyst/programmer. -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 4:32 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Here's another thought. ... when I first talked to my sysadmin he said he didn't have session vars enabled in the CF administrator. Then when I asked again a short while later to confirm, he said they were definitely enabled. (I got him to tell me the settings he had and they were the installation defaults). If he's actually turned them on between times, should he restart the CF Server too or does the administrator enable them immediately when you click "update changes"? ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com
Re: Session vars not being retained. Any ideas why?
Mike Kear wrote: > Can someone else have a look at these pages for me too please make sure it's > nothing to do with my browser settings? Took a look and the auth structure was present in all three pages. Tested in both IE 6 and Mozilla 1.5b. I've had an interestingly similiar on a intranet box we install recently running IIS and CF MX 6.1. When using the name of the box provided via WINS IE _always_ lost the session variables. If I use the IP it's fine. I'm currently assuming that IE forgets about the session vars due to a mismatch between IIS's domain name (there isn't one) and the WINS name. Not sure if it's related though, but is bluegrass.org the server you're having the problems on? -- Oliver Tupman Key Systems Geotechnical ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm
Re: Session vars not being retained. Any ideas why?
This is a bug in 6.0 that was fixed it 6.1. If you set domain cookies, CF set's a new cfif and cftoken cookie every request. -- mailto:[EMAIL PROTECTED] Monday, September 1, 2003, 10:21:02 AM, you wrote: MK> My site is forgetting the session variables between pages, and I'm not sure MK> why. It retains the login info when I use the CFID/CFTOKEN in the URL, but MK> if not, the new page comes up and I'm logged out again. (sigh!) MK> So far, I've explored the possibility that I've got the wrong (I've pasted it below for you to see) or that my browser has cookies MK> turned off (it doesn't). I've checked that the logout routine isn't getting MK> I'm definitely getting logged in from the login routine, because on the MK> action page following the login form, I've put a session scope, and the login info is shown there. But when I go to any MK> other page on the site, the session scope doesn't include the login info. MK> Is there anywhere else I ought to look? MK> Here's my site: MK> sessionmanagement="yes" MK> sessiontimeout="#createTimeSpan(0,0,20,0)#" MK> setclientcookies="yes" MK> setdomaincookies="yes" > MK> (We're using CFMX6.0 on a Win2000 SP3 system.) MK> Cheers, MK> Michael Kear MK> Windsor, NSW, Australia MK> AFP Webworks. MK> ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com
RE: Session vars not being retained. Any ideas why?
Mike, Sessions are defintly not sticking. If you simply reload page 1, you get a new CFID each time. However, if you pass the token that is shown, like this: http://bluegrass.org.au/1.cfm?CFID=275755&CFTOKEN=84747459, and then reload the page, the session does stick. So the problem is apparently that the session is not planting the cookie that track the session between requests. So, you could just append the #urlToken# to all of your anchors and it should work. This would also negate the need to have cookies enabled in the browser. Why it is not planing the cookies I do not know... Brook At 04:31 AM 9/2/2003 +1000, you wrote: >Here's another thought. ... when I first talked to my sysadmin he said he >didn't have session vars enabled in the CF administrator. Then when I asked >again a short while later to confirm, he said they were definitely enabled. >(I got him to tell me the settings he had and they were the installation >defaults). > >If he's actually turned them on between times, should he restart the CF >Server too or does the administrator enable them immediately when you click >"update changes"? > > > >Cheers, >Michael Kear >Windsor, NSW, Australia >AFP Webworks. > > > > >-Original Message- >From: Mike Kear [mailto:[EMAIL PROTECTED] >Sent: Tuesday, 2 September 2003 4:06 AM >To: CF-Talk >Subject: RE: Session vars not being retained. Any ideas why? > >Well I still have the problem with session vars not being carried across >from one page to another. > >I verified that the server has session vars turned on and the timeouts are >still the installation defaults. > >I have set up 3 pages, containing nothing but links to each other, and a >cfdump of the session struct. > >The pages are: http://bluegrass.org.au/1.cfm and 2.cfm and 3.cfm. > >On the first page, 1.cfm I have also put the following code to simulate >setting the session vars when someone logs in: > > > > > > >When you look at 1.cfm, you can see the auth struct in the session CFDUMP >right underneath it. Yet when you go to 2.cfm right after it, the auth >struct is gone. > >Can someone else have a look at these pages for me too please make sure it's >nothing to do with my browser settings? > > > >Cheers, >Michael Kear >Windsor, NSW, Australia >AFP Webworks. > > > > > > >-Original Message- >From: Mike Kear [mailto:[EMAIL PROTECTED] >Sent: Monday, September 01, 2003 9:55 AM >To: CF-Talk >Subject: RE: Session vars not being retained. Any ideas why? > > >AH! I think we've found the problem. I checked with the sysadmin and he >had session vars turned off in the CFMX administration console. That would >kind of put the kybosh on any session-based authentication wouldn't it. > >Now I'll have another go at it and see where we go from here. > >Thanks for your offer Andy, but I'll work on the site again now and if it's >still not working I might take you up on it. > > > >Cheers, >Michael Kear >Windsor, NSW, Australia >AFP Webworks. > > >(sheesh! Never occurred to me that we might have session vars turned off in >the administrator!!) > > > > > > ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com
RE: Session vars not being retained. Any ideas why?
Here's another thought. ... when I first talked to my sysadmin he said he didn't have session vars enabled in the CF administrator. Then when I asked again a short while later to confirm, he said they were definitely enabled. (I got him to tell me the settings he had and they were the installation defaults). If he's actually turned them on between times, should he restart the CF Server too or does the administrator enable them immediately when you click "update changes"? Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 4:06 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Well I still have the problem with session vars not being carried across from one page to another. I verified that the server has session vars turned on and the timeouts are still the installation defaults. I have set up 3 pages, containing nothing but links to each other, and a cfdump of the session struct. The pages are: http://bluegrass.org.au/1.cfm and 2.cfm and 3.cfm. On the first page, 1.cfm I have also put the following code to simulate setting the session vars when someone logs in: When you look at 1.cfm, you can see the auth struct in the session CFDUMP right underneath it. Yet when you go to 2.cfm right after it, the auth struct is gone. Can someone else have a look at these pages for me too please make sure it's nothing to do with my browser settings? Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: Monday, September 01, 2003 9:55 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? AH! I think we've found the problem. I checked with the sysadmin and he had session vars turned off in the CFMX administration console. That would kind of put the kybosh on any session-based authentication wouldn't it. Now I'll have another go at it and see where we go from here. Thanks for your offer Andy, but I'll work on the site again now and if it's still not working I might take you up on it. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. (sheesh! Never occurred to me that we might have session vars turned off in the administrator!!) ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm
RE: Session vars not being retained. Any ideas why?
Well I still have the problem with session vars not being carried across from one page to another. I verified that the server has session vars turned on and the timeouts are still the installation defaults. I have set up 3 pages, containing nothing but links to each other, and a cfdump of the session struct. The pages are: http://bluegrass.org.au/1.cfm and 2.cfm and 3.cfm. On the first page, 1.cfm I have also put the following code to simulate setting the session vars when someone logs in: When you look at 1.cfm, you can see the auth struct in the session CFDUMP right underneath it. Yet when you go to 2.cfm right after it, the auth struct is gone. Can someone else have a look at these pages for me too please make sure it's nothing to do with my browser settings? Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: Monday, September 01, 2003 9:55 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? AH! I think we've found the problem. I checked with the sysadmin and he had session vars turned off in the CFMX administration console. That would kind of put the kybosh on any session-based authentication wouldn't it. Now I'll have another go at it and see where we go from here. Thanks for your offer Andy, but I'll work on the site again now and if it's still not working I might take you up on it. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. (sheesh! Never occurred to me that we might have session vars turned off in the administrator!!) -Original Message- From: Andy Ousterhout [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:49 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Is your site available to me? Could it be made available to me? Perhaps it is something with your browser. Andy ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Get the mailserver that powers this list at http://www.coolfusion.com
RE: Session vars not being retained. Any ideas why?
np -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: Monday, September 01, 2003 9:55 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? AH! I think we've found the problem. I checked with the sysadmin and he had session vars turned off in the CFMX administration console. That would kind of put the kybosh on any session-based authentication wouldn't it. Now I'll have another go at it and see where we go from here. Thanks for your offer Andy, but I'll work on the site again now and if it's still not working I might take you up on it. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. (sheesh! Never occurred to me that we might have session vars turned off in the administrator!!) -Original Message- From: Andy Ousterhout [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:49 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Is your site available to me? Could it be made available to me? Perhaps it is something with your browser. Andy ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com
RE: Session vars not being retained. Any ideas why?
AH! I think we've found the problem. I checked with the sysadmin and he had session vars turned off in the CFMX administration console. That would kind of put the kybosh on any session-based authentication wouldn't it. Now I'll have another go at it and see where we go from here. Thanks for your offer Andy, but I'll work on the site again now and if it's still not working I might take you up on it. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. (sheesh! Never occurred to me that we might have session vars turned off in the administrator!!) -Original Message- From: Andy Ousterhout [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:49 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Is your site available to me? Could it be made available to me? Perhaps it is something with your browser. Andy ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm
RE: Session vars not being retained. Any ideas why?
Is your site available to me? Could it be made available to me? Perhaps it is something with your browser. Andy -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: Monday, September 01, 2003 9:46 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? I'm sorry Adrian, thanks for your help, but I don't understand. What does "link the id and token to your browser" mean exactly? It doesn't mention this at all in Ben and Nate's CFWACK book. As I read their discussion of session vars, the placing of any cookies and retaining of session identity is handled automatically by CFMX, and only fails if the user is so paranoid she's denied all cookies from the site. Is that not the correct interpretation? And when you say "client vars will do this", what do you mean - that they'll keep track of user sessions without cookies or id and token? Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Adrian Lynch [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:37 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? For session vars to work you need to link the id and token to your browser, client vars will do this. -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:33 To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Craig, you think enabling client variables would make it remember session variables??? Heck I'll try anything - this is driving me up the wall - but I'm not sure why that would help. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Craig Dudley [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:24 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Try adding clientmanagement="Yes" And possibly the following deleteing as applicable clientstorage="cookie/dsn/registry" -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:21 To: CF-Talk Subject: Session vars not being retained. Any ideas why? My site is forgetting the session variables between pages, and I'm not sure why. It retains the login info when I use the CFID/CFTOKEN in the URL, but if not, the new page comes up and I'm logged out again. (sigh!) So far, I've explored the possibility that I've got the (We're using CFMX6.0 on a Win2000 SP3 system.) Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Get the mailserver that powers this list at http://www.coolfusion.com
RE: Session vars not being retained. Any ideas why?
I'm sorry Adrian, thanks for your help, but I don't understand. What does "link the id and token to your browser" mean exactly? It doesn't mention this at all in Ben and Nate's CFWACK book. As I read their discussion of session vars, the placing of any cookies and retaining of session identity is handled automatically by CFMX, and only fails if the user is so paranoid she's denied all cookies from the site. Is that not the correct interpretation? And when you say "client vars will do this", what do you mean - that they'll keep track of user sessions without cookies or id and token? Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Adrian Lynch [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:37 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? For session vars to work you need to link the id and token to your browser, client vars will do this. -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:33 To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Craig, you think enabling client variables would make it remember session variables??? Heck I'll try anything - this is driving me up the wall - but I'm not sure why that would help. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Craig Dudley [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:24 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Try adding clientmanagement="Yes" And possibly the following deleteing as applicable clientstorage="cookie/dsn/registry" -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:21 To: CF-Talk Subject: Session vars not being retained. Any ideas why? My site is forgetting the session variables between pages, and I'm not sure why. It retains the login info when I use the CFID/CFTOKEN in the URL, but if not, the new page comes up and I'm logged out again. (sigh!) So far, I've explored the possibility that I've got the (We're using CFMX6.0 on a Win2000 SP3 system.) Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com
RE: Session vars not being retained. Any ideas why?
For session vars to work you need to link the id and token to your browser, client vars will do this. -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:33 To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Craig, you think enabling client variables would make it remember session variables??? Heck I'll try anything - this is driving me up the wall - but I'm not sure why that would help. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Craig Dudley [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:24 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Try adding clientmanagement="Yes" And possibly the following deleteing as applicable clientstorage="cookie/dsn/registry" -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:21 To: CF-Talk Subject: Session vars not being retained. Any ideas why? My site is forgetting the session variables between pages, and I'm not sure why. It retains the login info when I use the CFID/CFTOKEN in the URL, but if not, the new page comes up and I'm logged out again. (sigh!) So far, I've explored the possibility that I've got the (We're using CFMX6.0 on a Win2000 SP3 system.) Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Get the mailserver that powers this list at http://www.coolfusion.com
RE: Session vars not being retained. Any ideas why?
Craig, you think enabling client variables would make it remember session variables??? Heck I'll try anything - this is driving me up the wall - but I'm not sure why that would help. Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. -Original Message- From: Craig Dudley [mailto:[EMAIL PROTECTED] Sent: Tuesday, 2 September 2003 12:24 AM To: CF-Talk Subject: RE: Session vars not being retained. Any ideas why? Try adding clientmanagement="Yes" And possibly the following deleteing as applicable clientstorage="cookie/dsn/registry" -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:21 To: CF-Talk Subject: Session vars not being retained. Any ideas why? My site is forgetting the session variables between pages, and I'm not sure why. It retains the login info when I use the CFID/CFTOKEN in the URL, but if not, the new page comes up and I'm logged out again. (sigh!) So far, I've explored the possibility that I've got the (We're using CFMX6.0 on a Win2000 SP3 system.) Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm
RE: Session vars not being retained. Any ideas why?
Try adding clientmanagement="Yes" And possibly the following deleteing as applicable clientstorage="cookie/dsn/registry" -Original Message- From: Mike Kear [mailto:[EMAIL PROTECTED] Sent: 01 September 2003 15:21 To: CF-Talk Subject: Session vars not being retained. Any ideas why? My site is forgetting the session variables between pages, and I'm not sure why. It retains the login info when I use the CFID/CFTOKEN in the URL, but if not, the new page comes up and I'm logged out again. (sigh!) So far, I've explored the possibility that I've got the (We're using CFMX6.0 on a Win2000 SP3 system.) Cheers, Michael Kear Windsor, NSW, Australia AFP Webworks. ~| Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Get the mailserver that powers this list at http://www.coolfusion.com