Just an update on this issue..
after trying out various solutions finally i was able to solve the issue by using JSessionId alone and ignoring CFID and CFTOKEN completely. For some reason it was not working if i use a session as a combination of CFID, CFTOKEN and optional JSessionID(with or without enabling JessionID in app settings). thanks to you all. ~Sravan From: char...@carehart.org To: discussion@acfug.org Subject: RE: [ACFUG Discuss] single sign-on issue CF 8 Date: Fri, 19 Jun 2009 18:23:59 -0400 I saw your later note saying you’re sending those session keys as URL parms. Since you say things are failing on posts, how about getting the posting app to try sending them as cookies instead? Maybe some aspect of the http spec (or the web server) is not letting query strings in on form posts. Just a guess. Also, you ask “why causes CF to think it’s a new session”. As I said before, you can do a CFLOG of the incoming session keys in the URL, form, and/or cookie scope to see if they’re coming in as you’d expect (for the cookie scope, note that CF will generate values for that in the request if it thinks none of the keys were set, so you should also log the cgi.http_cookie, as that represents the real cookie value (if any) passed into the request. Hope that helps. If you remain stumped, I’m available to provide remote assistance. If I don’t solve the problem, you won’t have to pay. :-) More at carehart.org/consulting/. /charlie From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of sravan kumar Sent: Friday, June 19, 2009 5:25 PM To: discussion@acfug.org Subject: RE: [ACFUG Discuss] single sign-on issue CF 8 I didn't have this problem when user is in my application. User is able to navigate between pages without any problem. Third party website is able to make a GET request without any problems. If bombs out only when they make a POST request. i wonder what causes CF8.0 to think that it is a new session. \ thanks sravan ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink ------------------------------------------------------------- _________________________________________________________________ Windows Live™ SkyDrive™: Store, access, and share your photos. See how. http://windowslive.com/Online/SkyDrive?ocid=TXT_TAGLM_WL_CS_SD_photos_072009 ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -------------------------------------------------------------
