Skip to main content
Known Participant
Dec 14, 2015 6:15 PM UTC
Question

J2EE session across subdomains

I can't seem to get a J2EE session to persist across subdomains, even when setDomainCookies is true.

This appears to be true in both CF10 and CF11.  Is there a way to make this work?

It's very important for my project, and our security people want J2EE sessions.

Thanks for any assistance,

- Don

    This topic is closed to new replies. Start a new post to keep the conversation going.

    3 replies

    Carl Von Stetten
    Legend
    Dec 14, 2015 9:20 PM UTC

    I don't have any further ideas - hopefully someone else will jump in here. I haven't worked with subdomain cookies.

    I'll delete the empty post and my response to it to clean up the thread.

    -Carl V. - Moderator

    Translate
    Carl Von Stetten
    Legend
    Dec 14, 2015 6:42 PM UTC
    doncxAuthor
    Known Participant
    Dec 14, 2015 8:03 PM UTC

    Carl -

    My bad: I replied to your email and it showed up here as a blank repsonse.  The solution you reference does not work.

    I had seen that post and tried it.  Tried it again after your reply above.

    I wind up with two jsessionid cookies, one with a subdomain, and one without.  Apparently, the operative one uses the subdomain, because when I switch to the other subdomain, I'm not logged in and another jsessionid cookie is created for that subdomain.

    I've tried setting the domain-only cookie in both OnSessionStart and OnRequestStart in my application.cfc.  I've tried in it CF10 and CF11.

    Can't make it work.  Any other ideas?  They'd be most welcome.

    Translate