What about using mod_session?
Use it to turn off cookie tracking and then insert session id's into the
resource URL/list of environment variables? You could then log the session id
out of the environment variables or read it directly as a GET request parameter
in Tomcat depending on how you are
Session tracking without cookies is a huge engineering mess.
I don't quite understand what your choice of server platform
has to do with it. Have you taken a look at the HttpSessionObject?
Is that what you mean with the bug you mention? (I've used cookies
solely, I don't know much about HttpSessio
My site *has* to track sessions whilst allowing users to disable cookies.
In development so far i've been using tomcat with apache (using mod_jk).
This isn't going to work for the real thing (bug #1388) As far as i can
see and if i understand right, i have 3 options:
1) Use Tomcat standalone
2