Re: mod_perl not sending cookies

2003-03-13 Thread Richard Clarke
Are you using Apache::Cookie?

If so,

 #same as $cookie-bake
 $r-err_headers_out-add(Set-Cookie = $cookie-as_string);

Are you doing this?

Richard.


- Original Message - 
From: Andrew Fritz [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 13, 2003 8:24 PM
Subject: mod_perl not sending cookies


 I'm using Apache:AuthCookie. I have set up a basic test site. It appears 
 that AuthCookie never send the cookie even though the call to:
 $r-err_headers_out-add(Set-Cookie = $cookie);
 is there. If I modify the call to include a simple cookie:
 $r-err_headers_out-add(Set-Cookie = 'a=b');
 it works.
 
 The value of $cookie is:
 jza70AuthHandler_JZA70=\Thisisatest\; expires=Tue, 11 Mar 2003 
 06:33:50 GMT; path=/thisisatest; domain=jza70
 
 The expires field is from a log of a few days ago, but was valid (about 
 24 hours in the future) when it was sent.
 
 Any thoughts are apreciated.
 
 Andrew Fritz
 
 
 
 


RE: mod_perl not sending cookies

2003-03-13 Thread Tom Murphy

Usually when I have this problem the path and/or domain is incorrect.  Try
it without either.

Tom

 -Original Message-
 From: Andrew Fritz [mailto:[EMAIL PROTECTED]
 Sent: Thursday, March 13, 2003 12:25 PM
 To: [EMAIL PROTECTED]
 Subject: mod_perl not sending cookies
 
 
 I'm using Apache:AuthCookie. I have set up a basic test site. 
 It appears 
 that AuthCookie never send the cookie even though the call to:
 $r-err_headers_out-add(Set-Cookie = $cookie);
 is there. If I modify the call to include a simple cookie:
 $r-err_headers_out-add(Set-Cookie = 'a=b');
 it works.
 
 The value of $cookie is:
 jza70AuthHandler_JZA70=\Thisisatest\; expires=Tue, 11 Mar 2003 
 06:33:50 GMT; path=/thisisatest; domain=jza70
 
 The expires field is from a log of a few days ago, but was 
 valid (about 
 24 hours in the future) when it was sent.
 
 Any thoughts are apreciated.
 
 Andrew Fritz
 
 


RE: mod_perl not sending cookies

2003-03-13 Thread Tom Murphy

Andrew,

Ya need to remember to CC the group as well.

Copied from an oldish Netscape spec:

--

domain=DOMAIN_NAME 
When searching the cookie list for valid cookies, a comparison of the domain
attributes of the cookie is made with the Internet domain name of the host
from which the URL will be fetched. If there is a tail match, then the
cookie will go through path matching to see if it should be sent. Tail
matching means that domain attribute is matched against the tail of the
fully qualified domain name of the host. A domain attribute of acme.com
would match host names anvil.acme.com as well as
shipping.crate.acme.com. 
Only hosts within the specified domain can set a cookie for a domain and
domains must have at least two (2) or three (3) periods in them to prevent
domains of the form: .com, .edu, and va.us. Any domain that fails
within one of the seven special top level domains listed below only require
two periods. Any other domain requires at least three. The seven special top
level domains are: COM, EDU, NET, ORG, GOV, MIL, and INT. 

The default value of domain is the host name of the server which generated
the cookie response. 


path=PATH 
The path attribute is used to specify the subset of URLs in a domain for
which the cookie is valid. If a cookie has already passed domain matching,
then the pathname component of the URL is compared with the path attribute,
and if there is a match, the cookie is considered valid and is sent along
with the URL request. The path /foo would match /foobar and
/foo/bar.html. The path / is the most general path. 
If the path is not specified, it as assumed to be the same path as the
document being described by the header which contains the cookie. 



 -Original Message-
 From: Andrew Fritz [mailto:[EMAIL PROTECTED]
 Sent: Thursday, March 13, 2003 7:07 PM
 To: Tom Murphy
 Subject: Re: mod_perl not sending cookies
 
 
 Bingo! That did it. I removed the path and domain and it works.
 
 No, the dumb questions: any idea what they should be set to 
 to make it 
 work. I'm testing with my hosts file modified to point to a local 
 virtual host (jza70) instead of going to a real DNS accessable domain 
 name (jza70.com). Is that the issue or am I missunderstanding 
 what the 
 domain field is specifying. I thought it specified the owner of the 
 cookie. I'm not sure about the path field.
 
 Andrew
 
 Tom Murphy wrote:
 
 Usually when I have this problem the path and/or domain is 
 incorrect.  Try
 it without either.
 
 Tom
 
   
 
 -Original Message-
 From: Andrew Fritz [mailto:[EMAIL PROTECTED]
 Sent: Thursday, March 13, 2003 12:25 PM
 To: [EMAIL PROTECTED]
 Subject: mod_perl not sending cookies
 
 
 I'm using Apache:AuthCookie. I have set up a basic test site. 
 It appears 
 that AuthCookie never send the cookie even though the call to:
 $r-err_headers_out-add(Set-Cookie = $cookie);
 is there. If I modify the call to include a simple cookie:
 $r-err_headers_out-add(Set-Cookie = 'a=b');
 it works.
 
 The value of $cookie is:
 jza70AuthHandler_JZA70=\Thisisatest\; expires=Tue, 11 Mar 2003 
 06:33:50 GMT; path=/thisisatest; domain=jza70
 
 The expires field is from a log of a few days ago, but was 
 valid (about 
 24 hours in the future) when it was sent.
 
 Any thoughts are apreciated.
 
 Andrew Fritz