Hi Chris,
>
> Wow, does that really work? That's a tremendously cool hack, if so!
>
It seems to, although it's not yet been tested in anger and there is
scope for dependancy issues if you navigate from one domain directly
to the another expecting a continous session experience.
What I mean is that you need to have one request for a resource on
each domain to ensure that that session id is tied to the tracking id.
 Although I can think of several simple ways to overcome this,
although in my case I don't need to due to the structure business
domain / use cases that the web app models.

> TC should not be respecting the JSESSIONID passed-in if it is invalid.
> Perhaps I'm misunderstanding you, though. Do you have a registry of
> session ids cross-linked in the session of each web application?
>
If I understand you correctly, yes.  I use the session ids as a
convenient session unique ids in my own registry of user login
sessions and a tracking id which happens to be a JSESSIONID.

Cheers
Simon

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to