Re: Session Tacking across hostnames?

2002-04-15 Thread Joel Rees
12-6056, http://www.JAMMConsulting.com > Custom Internet DevelopmentWebsites, Ecommerce, Java, databases > > > > -Original Message- > > From: Joel Rees [mailto:[EMAIL PROTECTED]] > > Sent: Sunday, April 14, 2002 10:35 PM > > To: Tomcat Users List >

Re: Session Tacking across hostnames?

2002-04-15 Thread David Cassidy
gt;From: David Cassidy [mailto:[EMAIL PROTECTED]] >>Sent: Monday, April 15, 2002 10:10 AM >>To: Tomcat Users List >>Subject: Re: Session Tacking across hostnames? >> >> >>How about this ... >> >>don't use encodeIURL just emulate it ... >> &

RE: Session Tacking across hostnames?

2002-04-15 Thread Syski, Leszek
-Original Message- From: Neil Aggarwal [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 14, 2002 1:09 AM To: Tomcat Users List; Aditya Subject: RE: Session Tacking across hostnames? Adi: I tried this, but the problem is that the session id is not encoded into URLs that are not on the

RE: Session Tacking across hostnames?

2002-04-15 Thread Neil Aggarwal
David Cassidy [mailto:[EMAIL PROTECTED]] > Sent: Monday, April 15, 2002 10:10 AM > To: Tomcat Users List > Subject: Re: Session Tacking across hostnames? > > > How about this ... > > don't use encodeIURL just emulate it ... > > ie do the ;jsessionid=< sess

Re: Session Tacking across hostnames?

2002-04-15 Thread David Cassidy
Monday, April 15, 2002 8:53 AM >>To: 'Tomcat Users List' >>Subject: RE: Session Tacking across hostnames? >> >> >>I think this would help : >> >>when you switch from HTTP to HTTPS, add JSESSIONID to that url by calling >>response.encodeURL(url

RE: Session Tacking across hostnames?

2002-04-15 Thread Neil Aggarwal
> -Original Message- > From: Pekník Jan [mailto:[EMAIL PROTECTED]] > Sent: Monday, April 15, 2002 8:53 AM > To: 'Tomcat Users List' > Subject: RE: Session Tacking across hostnames? > > > I think this would help : > > when you switch from HTTP to HTTP

RE: Session Tacking across hostnames?

2002-04-15 Thread Pekník Jan
I think this would help : when you switch from HTTP to HTTPS, add JSESSIONID to that url by calling response.encodeURL(url) -Jan -Original Message- From: Neil Aggarwal [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 14, 2002 6:49 AM To: Tomcat-User Subject: Session Tacking acros

RE: Session Tacking across hostnames?

2002-04-15 Thread Neil Aggarwal
> -Original Message- > From: Joel Rees [mailto:[EMAIL PROTECTED]] > Sent: Sunday, April 14, 2002 10:35 PM > To: Tomcat Users List > Cc: [EMAIL PROTECTED] > Subject: Re: Session Tacking across hostnames? > > > Neil Aggarwal wrote: > > > For an application we are

Re: Session Tacking across hostnames?

2002-04-14 Thread Joel Rees
Neil Aggarwal wrote: > For an application we are building, we are using a shared SSL certificate > so the hostname has to be different for http and https. For example, > public pages are loaded from http://www.futurescope.com/fscope/myPage.jsp > and private pages are loaded from > http://www.JAM

RE: Session Tacking across hostnames?

2002-04-13 Thread Neil Aggarwal
> -Original Message- > From: Aditya [mailto:[EMAIL PROTECTED]] > Sent: Saturday, April 13, 2002 11:46 PM > To: Tomcat Users List > Subject: Re: Session Tacking across hostnames? > > > Hi Neil, > > cookies are bound to the server name, so you can't use cookies

Re: Session Tacking across hostnames?

2002-04-13 Thread Aditya
Hi Neil, cookies are bound to the server name, so you can't use cookies (the default method with Tomcat) to track sessions. If you are not doing form-based realm authentication, you can use URL rewriting to track the session by setting: cookies="false" for the contexts you are serving (you coul