DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7588>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7588

Session cannot be established if there are multiple session cookies

           Summary: Session cannot be established if there are multiple
                    session cookies
           Product: Tomcat 4
           Version: 4.0.4 Beta 2
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]
                CC: [EMAIL PROTECTED]


I ran into the problem using IE 6.0 and the following sequence of events:
* completed first session using http://foo.org.
* later, from the same browser window, I could not establish a new session 
using http://www.foo.org.

IE stores two JSESSIONID cookies in this case, for both 'foo.org' 
and 'www.foo.org'.  (The first session had been ended with a call to invalidate
(), but this call does not cause the session cookie to be deleted.)  Tomcat 
seems to look at the old session cookie only, causing the failure to establish 
a new session.  So a fix might be to have Tomcat check all session cookies?

The problem also occurs with Tomcat 4.0.3, but not with Tomcat 3.3a.

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to