[
https://jira.duraspace.org/browse/DS-959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=22570#comment-22570
]
Tim Donohue commented on DS-959:
--------------------------------
Hi all, I've been testing this issue a bit this morning in Chrome + Tomcat
7.0.20 (default settings). I'm seeing the same general behavior as described
by Kevin & others above. However, here's something interesting I've discovered.
In 'dspace.cfg', if you set:
xmlui.user.loginredirect=/
Then, things will "mostly" work. If you login to DSpace XMLUI, your session is
kept. You can click links to browse back to the homepage & anywhere else, and
your session is still retained properly.
HOWEVER, if you manually change your URL to the DSpace homepage *without* a
trailing slash, then your session is immediately lost (as if you have logged
out) and cannot be retrieved again.
For example, if your DSpace is at: http://localhost:8080/xmlui then after
login, all these paths will work fine:
http://localhost:8080/xmlui/
http://localhost:8080/xmlui/community-list
http://localhost:8080/xmlui/handle/*/*
etc..
But, if you ever manually change your URL to "http://localhost:8080/xmlui"; (no
trailing slash), then your session will be forever lost.
So, this makes me suspect that if there was a way to auto-redirect root paths
like "/xmlui" to "/xmlui/" within Cocoon or similar, then it's possible we
could fix the issue once and for all (without even requiring special
configuration of Tomcat's sessionCookiePathUsesTrailingSlash config). Again,
this is just an idea (no proof yet).
> XMLUI login failure when using Tomcat 7.0.16
> --------------------------------------------
>
> Key: DS-959
> URL: https://jira.duraspace.org/browse/DS-959
> Project: DSpace
> Issue Type: Bug
> Components: XMLUI
> Affects Versions: 1.7.2
> Environment: Based on discussion on 'dspace-tech', seems to affect
> the following browsers:
> * IE
> * Chrome
> * Safari
> * Opera
> Reporter: Stuart Lewis
> Priority: Major
> Fix For: 1.8.0
>
>
> See: http://dspace.2283337.n4.nabble.com/Login-and-IE8-td3671944.html
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://jira.duraspace.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Dspace-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-devel
