You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jetspeed-dev@portals.apache.org by "Ate Douma (JIRA)" <je...@portals.apache.org> on 2005/05/24 04:14:56 UTC

[jira] Closed: (JS2-253) url rewriting as fallback for session tracking not working

     [ http://issues.apache.org/jira/browse/JS2-253?page=all ]
     
Ate Douma closed JS2-253:
-------------------------

     Resolution: Fixed
    Fix Version: 2.0-M3

Fixed (for now).
All of the dev team should be aware of non encoded (link) URLs as that will break support for url rewriting based session.

> url rewriting as fallback for session tracking not working
> ----------------------------------------------------------
>
>          Key: JS2-253
>          URL: http://issues.apache.org/jira/browse/JS2-253
>      Project: Jetspeed 2
>         Type: Bug
>   Components: Container, Security
>     Versions: 2.0-dev/cvs, 2.0-M1, 2.0-M2
>  Environment: Tomcat 5.0.28, WinXP Pro, JDK 1.4.2_06
>     Reporter: Thorsten Berger
>     Assignee: Ate Douma
>      Fix For: 2.0-M3

>
> I'm unable to use url rewriting as fallback for session tracking when cookies are disabled.
> The "jsessionid" variable is correctly created after login and contained in the URL until LoginServlet posts "j_username" and "j_password" to the "j_security_check" resource, where it disappears.
> Output of LoginServlet:
> <html><body onLoad='document.forms["login"].submit();'><form id='login' method='POST' action='j_security_check;jsessionid=7F0028911F22D12A1950ACF3A7346AC4'><input type='hidden' name='j_username' value='admin'><input type='hidden' name='j_password' value='test'></form></body></html>

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org