Markus,

>> Some part of your logic is missing: you do not have a case where it is
>> known that you MUST create a session. Therefore, you never create a
>> session. Your code tries and tries again (redirecting continuously) but
>> never creates a session because you are not handling the case where you
>> want to create one. You must create a session at some point: you're just
>> not doing it.     
> 
> Hm, I don't understand your point. Take a look:
> 
> From http://www.dlite.de/42/TestServlet.java
> if (redirectToURLWithSID(request)) {
>     request.getSession(true);
>     String url = request.getRequestURI();
>     url = response.encodeRedirectURL(url);
>     response.sendRedirect(url);

Sorry, I must have missed that the first time around: I'm an idiot.

Does your log file indicate that the URL is being re-written properly
with the session id attached?

-chris

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to