J2EE session across subdomains

New Here ,
Dec 14, 2015 Dec 14, 2015

Copy link to clipboard

Copied

I can't seem to get a J2EE session to persist across subdomains, even when setDomainCookies is true.

This appears to be true in both CF10 and CF11.  Is there a way to make this work?

It's very important for my project, and our security people want J2EE sessions.

Thanks for any assistance,

- Don

Views

211

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Guide ,
Dec 14, 2015 Dec 14, 2015

Copy link to clipboard

Copied

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Dec 14, 2015 Dec 14, 2015

Copy link to clipboard

Copied

Carl -

My bad: I replied to your email and it showed up here as a blank repsonse.  The solution you reference does not work.

I had seen that post and tried it.  Tried it again after your reply above.

I wind up with two jsessionid cookies, one with a subdomain, and one without.  Apparently, the operative one uses the subdomain, because when I switch to the other subdomain, I'm not logged in and another jsessionid cookie is created for that subdomain.

I've tried setting the domain-only cookie in both OnSessionStart and OnRequestStart in my application.cfc.  I've tried in it CF10 and CF11.

Can't make it work.  Any other ideas?  They'd be most welcome.

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Guide ,
Dec 14, 2015 Dec 14, 2015

Copy link to clipboard

Copied

LATEST

I don't have any further ideas - hopefully someone else will jump in here. I haven't worked with subdomain cookies.

I'll delete the empty post and my response to it to clean up the thread.

-Carl V. - Moderator

Likes

Translate

Translate

Report

Report
Community Guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines