Lea,
The first cookie setting
> Set-Cookie: JSESSIONID=4nf928fbt0q02;Path=/customerCtx
means that the cookie will only be used in requests whose URL is rooted at
http://www.domain2.co.uk/customerCtx
yet your subsequent request are to other URLs at this domain, so the browser is
correctly not supplying the cookie.
If you intend the cookie to apply to all resources at http://www.domain2.co.uk
you need to omit the Path part of the setting of the session cookie. I'm not
sure if you have inserted that manually, or if Jetty has done it for you.
HTH
Chris Haynes
----- Original Message -----
From: "Lea Thurman" <lea.thurman@...>
To: <jetty-discuss@...>
Sent: Monday, January 24, 2005 11:40 PM
Subject: [jetty-discuss] Re: Apache to Jetty Sessions Information Lost
> Greg Wilkins <gregw <at> mortbay.com> writes:
>
> >
> > Lea,
> >
> > can you capture some headers so we can see what is going on.
> > If the browser does not specify a domain, then the cookie should
> > be returned to whatever domain the client thought it was contacting
> > on the first request - translations or forwarding should not be an issue???
> >
> > regards
>
> Hi Greg,
>
> I have managed to get a copy of the headers but I am not sure what to look
for.
> Anyway here goes:
>
> 1. Navigation to http://www.domain2.co.uk/
> Reguest
> GET / HTTP/1.1
> Host: http://www.domain2.co.uk
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5)
> Gecko/20041107 Firefox/1.0
> Accept:
> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,
> text/plain;q=0.8,image/png,*/*;q=0.5
> Accept-Language: en-us,en;q=0.5
> Accept-Encoding: gzip,deflate
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
> Keep-Alive: 300
> Connection: keep-alive
>
> Response
> HTTP/1.1 200 OK
> Date: Mon, 24 Jan 2005 23:28:38 GMT
> Server: Jetty/4.2.6 (Linux 2.4.27-ctx-11 i386)
> Set-Cookie: JSESSIONID=4nf928fbt0q02;Path=/customerCtx
> Set-Cookie2: JSESSIONID=4nf928fbt0q02;Version=1;Path=/customerCtx;Discard
> Content-Language: en-US
> Content-Type: text/html; charset=ISO-8859-1
> Via: 1.1 http://www.onesoon-logistics.co.uk
> X-Cache: MISS from http://www.domain2.co.uk
> Keep-Alive: timeout=15, max=100
> Connection: Keep-Alive
> Transfer-Encoding: chunked
>
> 2. Selected the login.jsp URL (after successful login redirects to main.jsp)
> Request
> POST /login.jsp HTTP/1.1
> Host: http://www.domain2.co.uk
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5)
> Gecko/20041107 Firefox/1.0
> Accept:
> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,
> text/plain;q=0.8,image/png,*/*;q=0.5
> Accept-Language: en-us,en;q=0.5
> Accept-Encoding: gzip,deflate
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
> Keep-Alive: 300
> Connection: keep-alive
> Referer: http://www.domain2.co.uk/
>
> Response
> HTTP/1.1 302 Moved Temporarily
> Date: Mon, 24 Jan 2005 23:28:46 GMT
> Server: Jetty/4.2.6 (Linux 2.4.27-ctx-11 i386)
> Set-Cookie: JSESSIONID=1rbdeubv05qc5;Path=/customerCtx
> Set-Cookie2: JSESSIONID=1rbdeubv05qc5;Version=1;Path=/customerCtx;Discard
> Content-Language: en-US
> Content-Type: application/octet-stream
> Location: http://www.domain2.co.uk/main.jsp;jsessionid=1rbdeubv05qc5
> Via: 1.1 http://www.domain2.co.uk
> X-Cache: MISS from http://www.domain2.co.uk
> Keep-Alive: timeout=15, max=100
> Connection: Keep-Alive
> Transfer-Encoding: chunked
>
> 3. Select Search URL once logged in
> Request
> GET /event-search.jsp HTTP/1.1
> Host: http://www.domain2.co.uk
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5)
> Gecko/20041107 Firefox/1.0
> Accept:
> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,
> text/plain;q=0.8,image/png,*/*;q=0.5
> Accept-Language: en-us,en;q=0.5
> Accept-Encoding: gzip,deflate
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
> Keep-Alive: 300
> Connection: keep-alive
> Referer: http://www.domain2.co.uk/main.jsp;jsessionid=1rbdeubv05qc5
>
> Response
> HTTP/1.1 403 Forbidden
> Date: Mon, 24 Jan 2005 23:28:48 GMT
> Server: Jetty/4.2.6 (Linux 2.4.27-ctx-11 i386)
> Set-Cookie: JSESSIONID=scxg7fggs74l;Path=/allders
> Set-Cookie2: JSESSIONID=scxg7fggs74l;Version=1;Path=/customerCtx;Discard
> Content-Type: text/html; charset=ISO-8859-1
> Content-Language: en-US
> Set-Cookie: JSESSIONID=5cb5a9j7orcea;Path=/allders
> Set-Cookie2: JSESSIONID=5cb5a9j7orcea;Version=1;Path=/customerCtx;Discard
> Via: 1.1 http://www.onesoon-logistics.co.uk
> X-Cache: MISS from http://www.domain2.co.uk
> Keep-Alive: timeout=15, max=100
> Connection: Keep-Alive
> Transfer-Encoding: chunked
>
> This last response is given forbidden by the application since the session
> information has been lost.
>
> There seems to be an awful lot of different sessions id's in the sequence and
> two cookies.
>
> I am in the process of trying to simplify the test by removing the
redirection.
>
> Again thanks for your help.
>
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> Tool for open source databases. Create drag-&-drop reports. Save time
> by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> _______________________________________________
> jetty-discuss mailing list
> jetty-discuss@...
> https://lists.sourceforge.net/lists/listinfo/jetty-discuss
>
>
|