General discussion

Locked

JSP Session Tracking - Orion/IE5.5/Win2K

By sgrosso ·
I am having a session tracking problem. I am unable to set a session attribute using session.setAttribute(), and retreive it using session.getAttribute().

My environment consists of Orion Application Server running on Windows 2000 Server (with the latest security updates). The browser I am using is IE 5.5 with the latest security updates.

Holding everything else constant, if I make any one of the following changes, my application works:
* Use IE 5.5 *without* the security patches
* UseWindows 2000 Professional as the host OS
* Use response.encodeURL() to do URL encoding rather than cookies (I would much rather use cookies though)

This problem was first noticed when I updated my IE with the latest security patches recently released by Microsoft.

Any help is appreciated. Thanks.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

JSP Session Tracking - Orion/IE5.5/Win2K

by okujava In reply to JSP Session Tracking - Or ...

As far as I know, the security patch installs a new mechanism (and I doubt, there is a bug within it) for cookie management. I had the same problem on my PC with win98 and ie6.0. see if you can change the settings for cookie management, so that all cookies are accepted (tools>internet options>privacy). I suggest to set the settings to "prompt cookies" and see if session cookies are accepted (advanced options). furthermore, you have a setting "accept all session cookies". try it out.

sure it's a great problem to explain that to the users. the best way, to avoid this is use encodeURL() - this is the safest way.

cheers

Collapse -

JSP Session Tracking - Orion/IE5.5/Win2K

by sgrosso In reply to JSP Session Tracking - Or ...

My browser is already configured to accept all cookies.

Here is the key: I have tested this using two different servers hosting my application --- a Win2K Pro server, and a server running Win2K Server. I can point my browser (on a seperate machine) to the Win2K Pro server and it works. If I point it to the server running Win2K Server, the session tracking (via cookies) does not work. This problem does not occur if I remove the IE 5.5 security patches.

This is a corporate intranet that was built to do session tracking via cookies, so changing every link to do URL rewriting is a very last resort.

Collapse -

JSP Session Tracking - Orion/IE5.5/Win2K

by sgrosso In reply to JSP Session Tracking - Or ...

Point value changed by question poster.

Collapse -

JSP Session Tracking - Orion/IE5.5/Win2K

by maxwell edison In reply to JSP Session Tracking - Or ...

Look at this link for a possible soultion:

http://jakarta.apache.org/taglibs/doc/session-doc/

(REMOVE SPACES from the pasted URL)

Maxwell

Collapse -

JSP Session Tracking - Orion/IE5.5/Win2K

by sgrosso In reply to JSP Session Tracking - Or ...

That page contains general information about the Session Tag Library. Sorry, but that does not help.

Back to Web Development Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums