Re: JSessionID in URL on first request

2007-09-06 Thread Paul Benedict
Turn off automatic session creation, if you want. It's a JSP directive. I
think it's: % page session=false %

You don't need sessions until you actually want to track user state. If you
need to track user hits, you could turn on mod_tracking if you're using
HTTPD.

Paul

On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:

 On the very first request to our website any html:rewrite tags or
 bean:include tags the URL gets rewritten with the JsessionID in it
 making the link invalid which then gives a page not found error.

 I understand why its doing this as its not sure yet whether cookies are
 enabled (cookies are enabled on my browser for certain) but I need to
 know if there is anyway to get around it (other than hitting refresh
 which fixes the problem). So far the only way we've found to get around
 it is to not use those struts tags but surely there is a better way?

 Jennie



 This e-mail (and any attachments) is confidential and may contain
 personal views which are not the views of the BBC unless specifically
 stated.
 If you have received it in error, please delete it from your system.
 Do not use, copy or disclose the information in any way nor act in
 reliance on it and notify the sender immediately. Please note that the
 BBC monitors e-mails sent or received.
 Further communication will signify your consent to this.



RE: JSessionID in URL on first request

2007-09-06 Thread Jennie Moeller
On the website we have a user login and need to track the session of
each user. I assume if we put this in the page its going to void this.
Any other ideas?

Thanks!
Jennie

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Paul Benedict
Sent: 06 September 2007 15:13
To: Struts Users Mailing List
Subject: Re: JSessionID in URL on first request

Turn off automatic session creation, if you want. It's a JSP directive.
I think it's: % page session=false %

You don't need sessions until you actually want to track user state. If
you need to track user hits, you could turn on mod_tracking if you're
using HTTPD.

Paul

On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:

 On the very first request to our website any html:rewrite tags or 
 bean:include tags the URL gets rewritten with the JsessionID in it 
 making the link invalid which then gives a page not found error.

 I understand why its doing this as its not sure yet whether cookies 
 are enabled (cookies are enabled on my browser for certain) but I need

 to know if there is anyway to get around it (other than hitting 
 refresh which fixes the problem). So far the only way we've found to 
 get around it is to not use those struts tags but surely there is a
better way?

 Jennie



 This e-mail (and any attachments) is confidential and may contain 
 personal views which are not the views of the BBC unless specifically 
 stated.
 If you have received it in error, please delete it from your system.
 Do not use, copy or disclose the information in any way nor act in 
 reliance on it and notify the sender immediately. Please note that the

 BBC monitors e-mails sent or received.
 Further communication will signify your consent to this.



This e-mail (and any attachments) is confidential and may contain
personal views which are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. 
Do not use, copy or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the
BBC monitors e-mails sent or received. 
Further communication will signify your consent to this.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: JSessionID in URL on first request

2007-09-06 Thread Paul Benedict
Jennie, I wasn't clear. My apologies. You don't typically need a session
UNTIL a user logs in. So unless you want to track or store state for
anonymous users, you could defer the session creation until sign in. Does
that make sense?

Paul

On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:

 On the website we have a user login and need to track the session of
 each user. I assume if we put this in the page its going to void this.
 Any other ideas?

 Thanks!
 Jennie

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 On Behalf Of Paul Benedict
 Sent: 06 September 2007 15:13
 To: Struts Users Mailing List
 Subject: Re: JSessionID in URL on first request

 Turn off automatic session creation, if you want. It's a JSP directive.
 I think it's: % page session=false %

 You don't need sessions until you actually want to track user state. If
 you need to track user hits, you could turn on mod_tracking if you're
 using HTTPD.

 Paul

 On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:
 
  On the very first request to our website any html:rewrite tags or
  bean:include tags the URL gets rewritten with the JsessionID in it
  making the link invalid which then gives a page not found error.
 
  I understand why its doing this as its not sure yet whether cookies
  are enabled (cookies are enabled on my browser for certain) but I need

  to know if there is anyway to get around it (other than hitting
  refresh which fixes the problem). So far the only way we've found to
  get around it is to not use those struts tags but surely there is a
 better way?
 
  Jennie
 
 
 
  This e-mail (and any attachments) is confidential and may contain
  personal views which are not the views of the BBC unless specifically
  stated.
  If you have received it in error, please delete it from your system.
  Do not use, copy or disclose the information in any way nor act in
  reliance on it and notify the sender immediately. Please note that the

  BBC monitors e-mails sent or received.
  Further communication will signify your consent to this.
 


 This e-mail (and any attachments) is confidential and may contain
 personal views which are not the views of the BBC unless specifically
 stated.
 If you have received it in error, please delete it from your system.
 Do not use, copy or disclose the information in any way nor act in
 reliance on it and notify the sender immediately. Please note that the
 BBC monitors e-mails sent or received.
 Further communication will signify your consent to this.

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




RE: JSessionID in URL on first request

2007-09-06 Thread Jennie Moeller
So just to clarify adding that to our page (it's the header.jsp that
will appear on every page)...won't adversely affect anything regarding
the session tracking we do when a user logs in?

The header.jsp includes data that will be personalized once a user logs
in.

Jennie 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Paul Benedict
Sent: 06 September 2007 15:54
To: Struts Users Mailing List
Subject: Re: JSessionID in URL on first request

Jennie, I wasn't clear. My apologies. You don't typically need a session
UNTIL a user logs in. So unless you want to track or store state for
anonymous users, you could defer the session creation until sign in.
Does that make sense?

Paul

On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:

 On the website we have a user login and need to track the session of 
 each user. I assume if we put this in the page its going to void this.
 Any other ideas?

 Thanks!
 Jennie

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 On Behalf Of Paul Benedict
 Sent: 06 September 2007 15:13
 To: Struts Users Mailing List
 Subject: Re: JSessionID in URL on first request

 Turn off automatic session creation, if you want. It's a JSP
directive.
 I think it's: % page session=false %

 You don't need sessions until you actually want to track user state. 
 If you need to track user hits, you could turn on mod_tracking if 
 you're using HTTPD.

 Paul

 On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:
 
  On the very first request to our website any html:rewrite tags or 
  bean:include tags the URL gets rewritten with the JsessionID in it 
  making the link invalid which then gives a page not found error.
 
  I understand why its doing this as its not sure yet whether cookies 
  are enabled (cookies are enabled on my browser for certain) but I 
  need

  to know if there is anyway to get around it (other than hitting 
  refresh which fixes the problem). So far the only way we've found to

  get around it is to not use those struts tags but surely there is a
 better way?
 
  Jennie
 
 
 
  This e-mail (and any attachments) is confidential and may contain 
  personal views which are not the views of the BBC unless 
  specifically stated.
  If you have received it in error, please delete it from your system.
  Do not use, copy or disclose the information in any way nor act in 
  reliance on it and notify the sender immediately. Please note that 
  the

  BBC monitors e-mails sent or received.
  Further communication will signify your consent to this.
 


 This e-mail (and any attachments) is confidential and may contain 
 personal views which are not the views of the BBC unless specifically 
 stated.
 If you have received it in error, please delete it from your system.
 Do not use, copy or disclose the information in any way nor act in 
 reliance on it and notify the sender immediately. Please note that the

 BBC monitors e-mails sent or received.
 Further communication will signify your consent to this.

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail (and any attachments) is confidential and may contain
personal views which are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. 
Do not use, copy or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the
BBC monitors e-mails sent or received. 
Further communication will signify your consent to this.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: JSessionID in URL on first request

2007-09-06 Thread Paul Benedict
The directive just tells the container (e.g., Tomcat) not to automatically
create a session. See what happens if you defer the session creation until
the user accesses the log in page.

Paul

On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:

 So just to clarify adding that to our page (it's the header.jsp that
 will appear on every page)...won't adversely affect anything regarding
 the session tracking we do when a user logs in?

 The header.jsp includes data that will be personalized once a user logs
 in.

 Jennie

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 On Behalf Of Paul Benedict
 Sent: 06 September 2007 15:54
 To: Struts Users Mailing List
 Subject: Re: JSessionID in URL on first request

 Jennie, I wasn't clear. My apologies. You don't typically need a session
 UNTIL a user logs in. So unless you want to track or store state for
 anonymous users, you could defer the session creation until sign in.
 Does that make sense?

 Paul

 On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:
 
  On the website we have a user login and need to track the session of
  each user. I assume if we put this in the page its going to void this.
  Any other ideas?
 
  Thanks!
  Jennie
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
  On Behalf Of Paul Benedict
  Sent: 06 September 2007 15:13
  To: Struts Users Mailing List
  Subject: Re: JSessionID in URL on first request
 
  Turn off automatic session creation, if you want. It's a JSP
 directive.
  I think it's: % page session=false %
 
  You don't need sessions until you actually want to track user state.
  If you need to track user hits, you could turn on mod_tracking if
  you're using HTTPD.
 
  Paul
 
  On 9/6/07, Jennie Moeller [EMAIL PROTECTED] wrote:
  
   On the very first request to our website any html:rewrite tags or
   bean:include tags the URL gets rewritten with the JsessionID in it
   making the link invalid which then gives a page not found error.
  
   I understand why its doing this as its not sure yet whether cookies
   are enabled (cookies are enabled on my browser for certain) but I
   need
 
   to know if there is anyway to get around it (other than hitting
   refresh which fixes the problem). So far the only way we've found to

   get around it is to not use those struts tags but surely there is a
  better way?
  
   Jennie
  
  
  
   This e-mail (and any attachments) is confidential and may contain
   personal views which are not the views of the BBC unless
   specifically stated.
   If you have received it in error, please delete it from your system.
   Do not use, copy or disclose the information in any way nor act in
   reliance on it and notify the sender immediately. Please note that
   the
 
   BBC monitors e-mails sent or received.
   Further communication will signify your consent to this.
  
 
 
  This e-mail (and any attachments) is confidential and may contain
  personal views which are not the views of the BBC unless specifically
  stated.
  If you have received it in error, please delete it from your system.
  Do not use, copy or disclose the information in any way nor act in
  reliance on it and notify the sender immediately. Please note that the

  BBC monitors e-mails sent or received.
  Further communication will signify your consent to this.
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 


 This e-mail (and any attachments) is confidential and may contain
 personal views which are not the views of the BBC unless specifically
 stated.
 If you have received it in error, please delete it from your system.
 Do not use, copy or disclose the information in any way nor act in
 reliance on it and notify the sender immediately. Please note that the
 BBC monitors e-mails sent or received.
 Further communication will signify your consent to this.

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




Re: jsessionid appended to URL and page not found`

2007-02-08 Thread Joe Germuska

The solution Christopher and Dave discuss above can be handled with this in
the Apache httpd.conf file:

RewriteRule ^(.*);jsessionid=.*$ $1

This strips the session ID from anything that the HTTPD server is handling,
although it should still get passed through the proxy.  To be honest, our
apps depend on cookies for other reasons so if URL rewrite sessions didn't
work, we might never notice.

The fact that your proxy config is not correctly brokering some URLs over to
the servlet container would depend on how your proxy config is set up; I'm
not  very experienced in actally setting this up, but my diagnosis is
correct, then the Struts mailing list is not the best place for the question
anyway...

Joe


On 2/7/07, Christopher Schultz [EMAIL PROTECTED] wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dave,

Dave Newton wrote:
 --- Vinod Kumar [EMAIL PROTECTED] wrote:
 So I have apache+tomcat integrated. What
 confirguration settings, do I need to make this work
 in this scenario.

 IIRC when we had this problem we used one of the
 rewrite mods to nudge Apache to know that the
 ;jsessionid etc. was special.

 There's probably a better solution these days :)

For me, this strategy is only necessary when I want Apache httpd to
serve static content that has an encoded jsessiond in the URL. Anything
that gets passed-through to the app server (Tomcat in my case) is
handled correctly.

Use of mod_rewrite is only necessary when Apache httpd incorrectly
includes the ;jsessionid as part of the filename, and therefore fails
to locate some-static.html;jsessionid=ABCDEF in the filesystem.
mod_rewrite can be used to remove the jsessionid, allowing Apache httpd
to correctly locate the static resource on the disk.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFyoWQ9CaO5/Lv0PARArqsAKDEW+7/4JQmg1QkbK8XiqL1elywvQCfVxa5
dteBRDBaFEmOqbktSGxrti0=
=vchZ
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
Joe Germuska
[EMAIL PROTECTED] * http://blog.germuska.com

The truth is that we learned from João forever to be out of tune.
-- Caetano Veloso


Re: jsessionid appended to URL and page not found`

2007-02-07 Thread Joe Germuska

What is handling the basic HTTP service for your application?  If it is not
a servlet container, but rather an HTTP server which proxies certain
requests to a servlet container, then there is probably just a configuration
problem.

The scenario you describe is standard.  A Servlet Container (or maybe it's
the JSP engine) is supposed to encode the session ID in URLs unless it knows
that the client accepts cookies, which it can only know if the client
already presented a cookie with a session ID in it (as on reload or later
clicks through the application.)

If you don't have an HTTP proxy in the middle, then what servlet container
are you using?  I do local development with Tomcat and have for years with
it being the HTTP server, and have never had this problem.

joe

On 2/7/07, Vinod Kumar [EMAIL PROTECTED] wrote:


Hi All,
I have a link to a struts web application in one of
existing website like start.jsp?cntry_cd=US

start.jsp is in struts application and contains the
following line
jsp:forward page=/setup.do /

setup action does some pre-setup stuff and forwards to
home page. The home page displays well with all
navigation links. But, when I click on any of the
navigation links (which are actions and their URL
looks like status.do;jsession=jfdkfdkfdk ..jsessionid
appened only initially ) , I get error message that
page cannot be found.

If before clicking on any of the links, I do refresh
on the home page and then click on any links, then it
works fine.

My question is, why it cannot find actions, when
jsessionid is appended to URL. What can i do to fix
this issue.

Thanks for your help.

Vinod






Don't pick lemons.
See all the new 2007 cars at Yahoo! Autos.
http://autos.yahoo.com/new_cars.html

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
Joe Germuska
[EMAIL PROTECTED] * http://blog.germuska.com

The truth is that we learned from João forever to be out of tune.
-- Caetano Veloso


Re: jsessionid appended to URL and page not found`

2007-02-07 Thread Vinod Kumar
Hi Joe,
 Thanks for your reply. Basic Http Service is handled
by apache web server and servlet requests are handled
by Tomcat. So I have apache+tomcat integrated. What
confirguration settings, do I need to make this work
in this scenario.

Thanks
Vinod
 
--- Joe Germuska [EMAIL PROTECTED] wrote:

 What is handling the basic HTTP service for your
 application?  If it is not
 a servlet container, but rather an HTTP server which
 proxies certain
 requests to a servlet container, then there is
 probably just a configuration
 problem.
 
 The scenario you describe is standard.  A Servlet
 Container (or maybe it's
 the JSP engine) is supposed to encode the session ID
 in URLs unless it knows
 that the client accepts cookies, which it can only
 know if the client
 already presented a cookie with a session ID in it
 (as on reload or later
 clicks through the application.)
 
 If you don't have an HTTP proxy in the middle, then
 what servlet container
 are you using?  I do local development with Tomcat
 and have for years with
 it being the HTTP server, and have never had this
 problem.
 
 joe
 
 On 2/7/07, Vinod Kumar [EMAIL PROTECTED] wrote:
 
  Hi All,
  I have a link to a struts web application in one
 of
  existing website like start.jsp?cntry_cd=US
 
  start.jsp is in struts application and contains
 the
  following line
  jsp:forward page=/setup.do /
 
  setup action does some pre-setup stuff and
 forwards to
  home page. The home page displays well with all
  navigation links. But, when I click on any of the
  navigation links (which are actions and their URL
  looks like status.do;jsession=jfdkfdkfdk
 ..jsessionid
  appened only initially ) , I get error message
 that
  page cannot be found.
 
  If before clicking on any of the links, I do
 refresh
  on the home page and then click on any links, then
 it
  works fine.
 
  My question is, why it cannot find actions, when
  jsessionid is appended to URL. What can i do to
 fix
  this issue.
 
  Thanks for your help.
 
  Vinod
 
 
 
 
 
 


  Don't pick lemons.
  See all the new 2007 cars at Yahoo! Autos.
  http://autos.yahoo.com/new_cars.html
 
 

-
  To unsubscribe, e-mail:
 [EMAIL PROTECTED]
  For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 
 
 
 -- 
 Joe Germuska
 [EMAIL PROTECTED] * http://blog.germuska.com
 
 The truth is that we learned from João forever to
 be out of tune.
 -- Caetano Veloso
 



 

Now that's room service!  Choose from over 150,000 hotels
in 45,000 destinations on Yahoo! Travel to find your fit.
http://farechase.yahoo.com/promo-generic-14795097

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: jsessionid appended to URL and page not found`

2007-02-07 Thread Dave Newton
--- Vinod Kumar [EMAIL PROTECTED] wrote:
 So I have apache+tomcat integrated. What 
 confirguration settings, do I need to make this work
 in this scenario.

IIRC when we had this problem we used one of the
rewrite mods to nudge Apache to know that the
;jsessionid etc. was special.

There's probably a better solution these days :)

d.



 

Don't pick lemons.
See all the new 2007 cars at Yahoo! Autos.
http://autos.yahoo.com/new_cars.html 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: jsessionid appended to URL and page not found`

2007-02-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dave,

Dave Newton wrote:
 --- Vinod Kumar [EMAIL PROTECTED] wrote:
 So I have apache+tomcat integrated. What 
 confirguration settings, do I need to make this work
 in this scenario.
 
 IIRC when we had this problem we used one of the
 rewrite mods to nudge Apache to know that the
 ;jsessionid etc. was special.
 
 There's probably a better solution these days :)

For me, this strategy is only necessary when I want Apache httpd to
serve static content that has an encoded jsessiond in the URL. Anything
that gets passed-through to the app server (Tomcat in my case) is
handled correctly.

Use of mod_rewrite is only necessary when Apache httpd incorrectly
includes the ;jsessionid as part of the filename, and therefore fails
to locate some-static.html;jsessionid=ABCDEF in the filesystem.
mod_rewrite can be used to remove the jsessionid, allowing Apache httpd
to correctly locate the static resource on the disk.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFyoWQ9CaO5/Lv0PARArqsAKDEW+7/4JQmg1QkbK8XiqL1elywvQCfVxa5
dteBRDBaFEmOqbktSGxrti0=
=vchZ
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: jsessionid problem fix for weblogic servers

2006-05-02 Thread Gary Feidt
Does version of WebLogic does this work for?

Gary

 [EMAIL PROTECTED] 5/2/2006 10:55:41 AM 
I had a problem with jsessionid trashing all my images and urls until
I
refreshed my browser. Ted Husted points out this phenomenon on page 66
of SIA. 

The symptom is that ;jsessionid=~long id string here is appended to
urls which confuses the weblogic app server.

The fix for weblogic is to add the following to the weblogic.xml file

  session-descriptor
session-param
  param-nameURLRewritingEnabled/param-name
  param-valuefalse/param-value
/session-param
  /session-descriptor

I'm sending out this solution because it has been a repeated subject
on
this list. Should I put it in the wiki?

J.

J. Braun
Polaroid Corp.
Waltham MA USA
+1 (781) 386 6871
[EMAIL PROTECTED] 

java, sql, xml, jsp, eeuts


-- 
This transmission is intended only for use by the addressee(s) named
herein and may contain information that is proprietary, confidential
and/or legally privileged. If you are not the intended recipient, you
are hereby notified that any disclosure, copying, distribution, or use
of the information contained herein (including any reliance thereon) is
STRICTLY PROHIBITED. If you received this transmission in error, please
immediately contact the sender and destroy the material in its entirety,
whether in electronic or hard copy format. Thank you.



-
To unsubscribe, e-mail: [EMAIL PROTECTED] 
For additional commands, e-mail: [EMAIL PROTECTED]
___

Confidentiality Statement:
This email/fax, including attachments, may include confidential
and/or proprietary information and may be used only by the
person or entity to which it is addressed. If the reader of 
this email/fax is not the intended recipient or his or her 
agent, the reader is hereby notified that any dissemination, 
distribution or copying of this email/fax is prohibited. If you 
have received this email/fax in error, please notify the sender 
by replying to this message and deleting this email or 
destroying this facsimile immediately.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: jsessionid problem fix for weblogic servers

2006-05-02 Thread Braun, James F
It worked for us on 8.1 sp2 and sp5. I don't know about others. 

http:/forums.bea.com/bea/message.jspa?messageID=600017610start=0
is the link to where my coworker found the info

J. 

-Original Message-
From: Gary Feidt [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 02, 2006 1:18 PM
To: user@struts.apache.org
Subject: Re: jsessionid problem fix for weblogic servers

Does version of WebLogic does this work for?

Gary

 [EMAIL PROTECTED] 5/2/2006 10:55:41 AM 
I had a problem with jsessionid trashing all my images and urls until I
refreshed my browser. Ted Husted points out this phenomenon on page 66
of SIA. 

The symptom is that ;jsessionid=~long id string here is appended to
urls which confuses the weblogic app server.

The fix for weblogic is to add the following to the weblogic.xml file

  session-descriptor
session-param
  param-nameURLRewritingEnabled/param-name
  param-valuefalse/param-value
/session-param
  /session-descriptor

I'm sending out this solution because it has been a repeated subject on
this list. Should I put it in the wiki?

J.

J. Braun
Polaroid Corp.
Waltham MA USA
+1 (781) 386 6871
[EMAIL PROTECTED] 

java, sql, xml, jsp, eeuts


--
This transmission is intended only for use by the addressee(s) named
herein and may contain information that is proprietary, confidential
and/or legally privileged. If you are not the intended recipient, you
are hereby notified that any disclosure, copying, distribution, or use
of the information contained herein (including any reliance thereon) is
STRICTLY PROHIBITED. If you received this transmission in error, please
immediately contact the sender and destroy the material in its entirety,
whether in electronic or hard copy format. Thank you.



-
To unsubscribe, e-mail: [EMAIL PROTECTED] 
For additional commands, e-mail: [EMAIL PROTECTED]
___

Confidentiality Statement:
This email/fax, including attachments, may include confidential
and/or proprietary information and may be used only by the
person or entity to which it is addressed. If the reader of 
this email/fax is not the intended recipient or his or her 
agent, the reader is hereby notified that any dissemination, 
distribution or copying of this email/fax is prohibited. If you 
have received this email/fax in error, please notify the sender 
by replying to this message and deleting this email or 
destroying this facsimile immediately.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-- 
This transmission is intended only for use by the addressee(s) named herein and 
may contain information that is proprietary, confidential and/or legally 
privileged. If you are not the intended recipient, you are hereby notified that 
any disclosure, copying, distribution, or use of the information contained 
herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received 
this transmission in error, please immediately contact the sender and destroy 
the material in its entirety, whether in electronic or hard copy format. Thank 
you.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: jsessionid problem fix for weblogic servers

2006-05-02 Thread Ed Griebel

I don't have a copy of SIA, so I'm not sure what it says, but as I
understand URL rewriting, it is always used on the struts URLs on the
first page returned after a session is initiated, and for links in
subsequent pages when the browser doesn't return a cookie with the
session ID. By turning this off, sessions will not be maintained with
browsers whose cookies are turned off or not supported.

I'm sure you've tried a lot of things already, but using
hardcoded/hand-generated links instead of html:rewrite or
html:link tags would probably work (maybe with the path embedded as
config-params in web.xml), or if your app server is fronted by Apache
you could use mod_rewrite to strip the jsessionid= from URLs. Or,
maybe if you put the images in the WAR but not under /do/* (or
whatevers configured as the struts servlet prefix in servlet-mapping)
the links would not be rewritten. The first idea is the one that I'm
using on a project now.

-ed

On 5/2/06, Braun, James F [EMAIL PROTECTED] wrote:

I had a problem with jsessionid trashing all my images and urls until I
refreshed my browser. Ted Husted points out this phenomenon on page 66
of SIA.

The symptom is that ;jsessionid=~long id string here is appended to
urls which confuses the weblogic app server.

The fix for weblogic is to add the following to the weblogic.xml file

  session-descriptor
session-param
  param-nameURLRewritingEnabled/param-name
  param-valuefalse/param-value
/session-param
  /session-descriptor

I'm sending out this solution because it has been a repeated subject on
this list. Should I put it in the wiki?

J.

J. Braun
Polaroid Corp.
Waltham MA USA
+1 (781) 386 6871
[EMAIL PROTECTED]

java, sql, xml, jsp, eeuts


--
This transmission is intended only for use by the addressee(s) named herein and 
may contain information that is proprietary, confidential and/or legally 
privileged. If you are not the intended recipient, you are hereby notified that 
any disclosure, copying, distribution, or use of the information contained 
herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received 
this transmission in error, please immediately contact the sender and destroy 
the material in its entirety, whether in electronic or hard copy format. Thank 
you.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: jsessionid

2006-01-14 Thread Martin Gainty

Rafael-

I believe disabling the session *should* disable the jsessionid (assuming 
you've disabled this in QueryString as well as disabled this in serializing 
to cookies..)

In either case I think Frank may shed some light ..

Saludos!
Martin-
- Original Message - 
From: Rafael Taboada [EMAIL PROTECTED]

To: Struts List user@struts.apache.org
Sent: Friday, January 13, 2006 10:37 PM
Subject: jsessionid


Hi folks...

Why does jsessionid appears in my application when I login???... Where can I
disable this??

Thanks in advance

--
Rafael Taboada
Software Engineer

Cell : +511-97753290

No creo en el destino pues no me gusta tener la idea de controlar mi vida

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: jsessionid

2006-01-14 Thread Pieter Pareit
Rafael,

This is standard in a Java web application.  This is used to set a cookie,
to activate the session.  Next time the user clicks on a page the session
cookie is send in the header so the server know which session belong to that
user.

Pieter




On 1/14/06, Martin Gainty [EMAIL PROTECTED] wrote:

 Rafael-

 I believe disabling the session *should* disable the jsessionid (assuming
 you've disabled this in QueryString as well as disabled this in
 serializing
 to cookies..)
 In either case I think Frank may shed some light ..

 Saludos!
 Martin-
 - Original Message -
 From: Rafael Taboada [EMAIL PROTECTED]
 To: Struts List user@struts.apache.org
 Sent: Friday, January 13, 2006 10:37 PM
 Subject: jsessionid


 Hi folks...

 Why does jsessionid appears in my application when I login???... Where can
 I
 disable this??

 Thanks in advance

 --
 Rafael Taboada
 Software Engineer

 Cell : +511-97753290

 No creo en el destino pues no me gusta tener la idea de controlar mi
 vida

 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]