Hi all,

thanks for resoonses;

- the problem occurs for the login page, but, Im not using a special
authentication system anymore, only a web apps authentication.
- Im using Jkmount /context/* , JKmount /context, in order to enable the
tomcat welcome page.
- I think the cause for the problem is the use for the expire module for
images:

    ExpiresByType image/gif "access plus 1 month"
    ExpiresByType image/jpg "access plus 1 month"
    ExpiresByType image/png "access plus 1 month"


Best regards!




Christopher Schultz-2 wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> André and Adam,
> 
> On 8/19/2009 3:53 PM, André Warnier wrote:
>> I'll just venture another explanation :
>> - considering that it seems that at least 50% of the posters here who
>> use Apache httpd in front of Tomcat, end up proxying everything to
>> Tomcat anyway..
> 
> This may or may not be true. I have seen a lot of configurations (mine
> included) where the pass-throughs look like this:
> 
> JkMount /context/*.jsp worker
> JkMount /context/j_security_check worker
> 
> Instead of:
> 
> JkMount /context worker
> JkMount /context/* worker
> 
>> - considering this problem happens on the login page, which users get -
>> presumably - when they are not logged in yet..
>> - isn't the problem then that the images in question are in a server
>> area that (also) requires authentication, and since the user at that
>> point is not (yet) authenticated, he doesn't get the images ?
>> (probably getting instead other copies of the login pages for those
>> links)
> 
> Possibly. If the images are protected, you will certainly have this
> problem. The OP said that a RELOAD fixed the images, though, so I think
> the problem was that Apache httpd /was/ configured to serve images, and
> the ;jsessionid parameter was present because, at the login screen, the
> server doesn't yet know if the client will send cookies.
> 
>> - which would explain that when the user is authenticated and presses
>> the "reload" key, then he gets the images.
> 
> The OP didn't say anything about post authentication. My bet is on
> JkStripSession.
> 
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAkqMXi4ACgkQ9CaO5/Lv0PDsFwCcDnFIN+iCcC470CvH2a/cYtqU
> 9xgAn25FYoHdqyjq6OdEDCF63P6euPo4
> =qDH7
> -----END PGP SIGNATURE-----
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> 

-- 
View this message in context: 
http://www.nabble.com/mod_jk-and--jsessionid-issue-tp25006051p25149042.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to