Skip to main content
Known Participant
December 14, 2015
Question

J2EE session across subdomains

  • December 14, 2015
  • 2 replies
  • 409 views

I can't seem to get a J2EE session to persist across subdomains, even when setDomainCookies is true.

This appears to be true in both CF10 and CF11.  Is there a way to make this work?

It's very important for my project, and our security people want J2EE sessions.

Thanks for any assistance,

- Don

    This topic has been closed for replies.

    2 replies

    Carl Von Stetten
    Legend
    December 14, 2015

    I don't have any further ideas - hopefully someone else will jump in here. I haven't worked with subdomain cookies.

    I'll delete the empty post and my response to it to clean up the thread.

    -Carl V. - Moderator

    Carl Von Stetten
    Legend
    December 14, 2015
    doncxAuthor
    Known Participant
    December 14, 2015

    Carl -

    My bad: I replied to your email and it showed up here as a blank repsonse.  The solution you reference does not work.

    I had seen that post and tried it.  Tried it again after your reply above.

    I wind up with two jsessionid cookies, one with a subdomain, and one without.  Apparently, the operative one uses the subdomain, because when I switch to the other subdomain, I'm not logged in and another jsessionid cookie is created for that subdomain.

    I've tried setting the domain-only cookie in both OnSessionStart and OnRequestStart in my application.cfc.  I've tried in it CF10 and CF11.

    Can't make it work.  Any other ideas?  They'd be most welcome.