Re: Domain Names for Session Cookies

2004-04-17 Thread John Gibson
Thanks. I tried using URL rewriting that redirects www.foobar.com -> foobar.com and it works pretty well as long as people don't try to submit requests commands to www.foobar.com. However the problem with the cookies is that they are NOT generated in a hierarchical fashion. If a session cook

Re: Domain Names for Session Cookies

2004-04-17 Thread Tim Funk
no. But the web client (browser) should be sending cookies in the most specific to least specific order so this should not be an issue. An alternative is to use URL rewriting. -Tim John Gibson wrote: I'm running Tomcat 4.0.6 with Apache 2.0.46 on RedHat Advanced Server and I'm running into a p

Domain Names for Session Cookies

2004-04-16 Thread John Gibson
I'm running Tomcat 4.0.6 with Apache 2.0.46 on RedHat Advanced Server and I'm running into a problem with the domain for session cookies. I have a host setup as foobar.com with an alias of www.foobar.com. When a client visits foobar.com I create a cookie-based session for the user. Everything b