Re: Re[2]: Session share problem.
Dear Rafael: Thanks a lot. I've solved the session share problem. I found the clue in your old message: http://www.mail-archive.com/orion-interest@orionserver.com/msg15659.html Sometimes I can't post message to the mailing list, so I email you, and thank you. I think it is someting different between the two ways to load the web application. If the first request is via https, it load as a secure instance first, otherwise, as a non-secure instance first. What I need to do is to make sure it startup and load the app as a non-secure instance first. So I use the "load-on-startup" attribute. for non secure web-site.xml for secure web-site.xml Thanks again! Jishan - Original Message - From: "Rafael Alvarez" <[EMAIL PROTECTED]> To: "Orion-Interest" <[EMAIL PROTECTED]> Sent: Thursday, September 06, 2001 10:20 PM Subject: Re[2]: Session share problem. > Hello Jishan, > There is an option (shared="true as stated in other posting) to share > session between different instances of the SAME application. The > keyword is SAME. If you use different applications for each of your > normal site and your secure site then that solution won't work. > > What you can do in that case is to "send" the sessionId() of the > nonsecure site to the secure site, and viceversa. For example: > To enter the secure site, use a link like : > secure.jsp?nonsecureId= > > To reenter the non-secure site: > nonsecure.jsp;jsessionId=?secureId= > > To reenter the secure site: > secure.jsp;jsessionId=?nonsecureId= > > > Wednesday, September 05, 2001, 9:34:33 PM, you wrote: > > GM> i think there's a share="true" attribute that you have to put in the >web-site.xml file ??? check out the doco in www.orionserver.com > > GM> - Original Message - > GM> From: Li > GM> To: Orion-Interest > GM> Sent: Wednesday, September 05, 2001 7:42 PM > GM> Subject: Session share problem. > > > GM> Hi, > GM> I have session share problem between ssl site and non-ssl site. My ssl site >name is secure.mysite.com and non-ssl site name is www.mysite.com. when I start my >server, and visit > GM> www.mysite.com firstly, everything goes well. But when I visit secure.mysite.com >firstly after I starting my orion server, and then back to www.mysite.com every >request on www.mysite.com create > GM> a new session. So my user login, shopping cart won't work!!! > GM> Is there any one can help me? > GM> Thanks! > > GM> Jishan Li. > > > > -- > Best regards, > Rafaelmailto:[EMAIL PROTECTED] > > > > ÿÿü:¢æÿügÊ«~·ÿ&¡¢Ü¢fv·¬±«a¶Úÿÿù_òj(ýÊ&
Re: Session share problem.
My problem is that if the first request to the webapp is https://... , session share is not proper. If the first request is http://.. everything goes well! What is the problem? - Original Message - From: "Al-Akhras, Khaled" <[EMAIL PROTECTED]> To: "Orion-Interest" <[EMAIL PROTECTED]> Sent: Friday, September 07, 2001 5:12 AM Subject: Re: Session share problem. > In order to share a web-app between a HTTP and HTTPS site at the same > context path, do the following. I just tried this on my machine and it > works fine. > I am using Orion1.5.2 on Windows2000. > > config/server.xml > - > > "http://www.orionserver.com/dtds/application-server.dtd";> > deployment-directory="../application-deployments"> > ... > > > ... > > > config/default-web-site.xml > --- > > "http://www.orionserver.com/dtds/web-site.dtd";> > > shared="true"/> > ... > > > config/secure-web-site.xml > --- > > "http://www.orionserver.com/dtds/web-site.dtd";> > > keystore-password="myPassword" /> > shared="true" /> > ... > > > > and delete the file > D:\orion\application-deployments\default\defaultWebApp\persistence\state.ser > before restarting orion. > > Good Luck. > > > ÿÿü:¢æÿügÊ«~·ÿ&¡¢Ü¢fv·¬±«a¶Úÿÿù_òj(ýÊ&
Re: Re[2]: Session share problem.
Thanks, Greg
& Rafael.
I post this message
yesterday but it was lost, I think. Try again today, hope to get some
help.
Yes. I have share="true",
the secure and non-secure site is within a SAME
application.
My configs
like followings..
1) when I
start the orionserver,
d:\orion>java -jar orion.jarOrion/1.4.5
initialized
2) Then I
typed https://secure.mysite.com in my
web browser, to request my webapp. The webapp ran.
3) And then I
came back to http://www.mysite.com and tried
to put some products to the shopping cart,
the shopping
cart was alway empty. I placed this in my cart detail
page,
<%
System.out.println("session is new - " + session.isNew());
%>
The console
was always printing session is new - true . It seems
that the server creates a new session for EACH http
request.
4) but if I
restart the orionserver now.
5) And I
visit http://www.mysite.com first, this
time. shopping cart works. and session share between www.mysite.com and secure.mysite.com
works fine.
Does the
server start the app in different way according to the protocol of the first
request
could you
provide more help? Thank you!
Jishan
Li.
default-web-site.xmlhttp://www.orionserver.com/dtds/web-site.dtd"> shared="true"
/>
=secure-web-site.xml=http://www.orionserver.com/dtds/web-site.dtd">secure="true"
> shared="true"/>
=server.xml=http://www.orionserver.com/dtds/application-server.dtd"> application-directory="../applications" deployment-directory="../application-deployments">
=/EWB-INF/orion-web.xml=http://www.orionserver.com/dtds/orion-web.dtd"> deployment-version="1.3.8" jsp-cache-directory="./persistence" temporary-directory="./temp" servlet-webdir="/servlet/">
Session share problem.
Hi, I have session share problem between ssl site and non-ssl site. My ssl site name is secure.mysite.com and non-ssl site name is www.mysite.com. when I start my server, and visit www.mysite.com firstly, everything goes well. But when I visit secure.mysite.com firstly after I starting my orion server, and then back to www.mysite.com every request on www.mysite.com create a new session. So my user login, shopping cart won't work!!! Is there any one can help me? Thanks! Jishan Li.
