RE: SSL--Session Expiry

2001-03-21 Thread Grewal, Gary 



Try 
encodeRedirectURL() because rules are different for encoding for redirect to own 
web-page. Also try % response.sendRedirect(..) % directly instead of 
using jsp:forward 

=== Gary 
Grewal 

  -Original Message-From: Seshagiri Dev Kurmana 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, March 21, 2001 
  4:30 AMTo: [EMAIL PROTECTED]Subject: 
  SSL--Session ExpiryImportance: High
  Hi all,My environment is WinNT, Tomcat3.2, 
  jsse1.0.2.Everything is working fine with cookie enabled browsers.But when I 
  disable cookies in the browsers the session id is changingand 
  consequently the original session is becoming null.
  I tried to do some jugglery with 
  response.sendRedirect(myUrl),jsp:forward page="%=myUrl%"/ 
  after encoding the url.
  But I'm unable to find a solution.
  
  Any help would be greatly 
  appreciated.thanks,
  Seshagiri

Re: SSL--Session Expiry

2001-03-21 Thread Kief Morris 

Seshagiri Dev Kurmana typed the following on 03:59 PM 3/21/2001 +0530
 My environment is WinNT, Tomcat3.2, jsse1.0.2.Everything is working fine with cookie 
enabled browsers.But when I disable cookies in the browsers the session id is 
changing  and consequently the original session is becoming null.
I tried to do some jugglery with response.sendRedirect(myUrl),jsp:forward 
page="%=myUrl%"/ after encoding the url.
But I'm unable to find a solution.

First of all: *Please* do not use HTML in your emails to this list.

Second: Does the encoded URL in the HTML output of your JSP page
contain the session ID? Are you sending a user from a http session to
an https session with this link? If so, I believe later releases of Tomcat 
(3.2.1 perhaps) fix this so sessions are maintained across http  https.

Kief