Session-cookie problems with several virtual hosts

2004-11-10 Thread Martin Morawetz
We have 3 different virtual hosts, which are subdomains
of our main domain.
We need access to the session from all virtual hosts.
We use cookie-sessions, at the moment url-rewriting isn't a
possible alternative.
The problem is, that the browser doesn't send the cookie back
to a subdomain, if the cookie was sent from one of the two
others.
Till now we solved the problem by specifying the domain globally
in the resin.conf . Yes we used Resin as Servlet-Engine and Resin 
supports a config-tag cookie-domain which solved our problem
perfectly. As far as i know Tomcat doesn't support something
like that.

As I don't have access to the session-cookie,
i thought in creating a cookie with the current session-id and the
proper domain set for every virtual host, but that seems to me
a little bit awkward.
Is it possible to specify a general cookie-domain globally for a virtual 
host?

Is there a way to manipulate the session-cookie (set the domain)?
What is supposed as best practise to get access to one session from
different subdomains?
Any help/comment is greatly appreciated.
--
Regards
Martin

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Session-cookie problems with several virtual hosts

2004-11-10 Thread Shapira, Yoav

Hi,

We need access to the session from all virtual hosts.
We use cookie-sessions, at the moment url-rewriting isn't a
possible alternative.

Too bad, as that's the only portable alternative.

Till now we solved the problem by specifying the domain globally
in the resin.conf . Yes we used Resin as Servlet-Engine and Resin
supports a config-tag cookie-domain which solved our problem
perfectly. As far as i know Tomcat doesn't support something
like that.

When you use container-specific, non-Servlet-Specification features, you
can expect trouble when trying to move across containers ;)

As I don't have access to the session-cookie,
i thought in creating a cookie with the current session-id and the
proper domain set for every virtual host, but that seems to me
a little bit awkward.

It might be awkward, but if you can't use url-rewriting this might also
be the next best option.

Is it possible to specify a general cookie-domain globally for a
virtual
host?

Not currently.

Is there a way to manipulate the session-cookie (set the domain)?

Not currently.

What is supposed as best practise to get access to one session from
different subdomains?

Use url-rewriting.  To enable it, set cookies=false on your Context
declarations.

Any help/comment is greatly appreciated.

Portability is tough to achieve, but great once achieved.  Shortcuts and
container-specific goodies end up costing more in the long term, as this
example shows.

Yoav



This e-mail, including any attachments, is a confidential business 
communication, and may contain information that is confidential, proprietary 
and/or privileged.  This e-mail is intended only for the individual(s) to whom 
it is addressed, and may not be saved, copied, printed, disclosed or used by 
anyone else.  If you are not the(an) intended recipient, please immediately 
delete this e-mail from your computer system and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]