Markus, >> Some part of your logic is missing: you do not have a case where it is >> known that you MUST create a session. Therefore, you never create a >> session. Your code tries and tries again (redirecting continuously) but >> never creates a session because you are not handling the case where you >> want to create one. You must create a session at some point: you're just >> not doing it. > > Hm, I don't understand your point. Take a look: > > From http://www.dlite.de/42/TestServlet.java > if (redirectToURLWithSID(request)) { > request.getSession(true); > String url = request.getRequestURI(); > url = response.encodeRedirectURL(url); > response.sendRedirect(url);
Sorry, I must have missed that the first time around: I'm an idiot. Does your log file indicate that the URL is being re-written properly with the session id attached? -chris
signature.asc
Description: OpenPGP digital signature