Re: Sharing session across http and https connections

2005-11-29 Thread Chris Birch
Thanks for pointing out the gotcha Nick. The sites are both running on the same server, so I'll follow Tim's suggestion. Many Thanks for your responses, Chris. On 29 Nov 2005, at 17:24, Duan, Nick wrote: You can't do this if both sites are on different machines since tomcat user ID (defined

RE: Sharing session across http and https connections

2005-11-29 Thread Duan, Nick
You can't do this if both sites are on different machines since tomcat user ID (defined as a cookie by default), is tied to an url. If both sites are on different machines, you may have to use url-rewritting for session tracking instead of using the default cookies. ND -Original Message-

Re: Sharing session across http and https connections

2005-11-29 Thread Tim Funk
While in https - you'd need to reset the cookie (JSESSIONID) and not have the secure flag set. -Tim Chris Birch wrote: Hi, I'm sure this has been solved and documented already but I can't find any information, if anyone can help me or point me in the right direction, I'd be very grateful.