Sander, Here is a cookie copied from Firefox cookie viewer when the Apache+Tomcat machine was accessed from another machine. Name: JSESSIONID Content: 10FA6EB4F5B24CBA716A7F5DAD1F4B3F Host: iobis.marine.rutgers.edu Path: /OBISDEV Send For: Any type of connecion Expires: at end of session The URL to access the Apache+Tomcat application is: http://iobis.marine.rutgers.edu/OBISBETA/OBIS.jsp Just a reminder of the mapping from httpd.conf ProxyPass /OBISBETA http://localhost:8082/OBISDEV ProxyPassReverse /OBISBETA localhost:8082/OBISDEV Thanks, -=bill Sander Temme wrote:
On Jan 24, 2007, at 11:00 AM, Wm.A.Stafford wrote:A bit more info has emerged, the admin believes the Apache version is 1.3.20.Running httpd -v will take away any shred of doubt.I'll see if there is any interest in moving to the latest Apache but at this point I think that is probably not an option because there are a lot of other users of this system and they would all have to buy in. So I will need to proceed with configuration of the existing version.Apache has made great strides since 1.3.20. For starters, any 1.3 version after that contains security fixes that you might want. As no other changes are made to that branch, an upgrade should not cause you any problems.The proxy module that came with Apache 1.3 did not have the ProxyReverseCookiePath directive that I talked about earlier. Seehttp://httpd.apache.org/docs/1.3/mod/mod_proxy.html for documentation on the 1.3 mod_proxy module.Before we make any more guesses about the nature of your problem, I would like to learn from you whether the Cookie path mismatch is actually causing your issue. Could you run the following test on your application:1) Clear your browser cache and cookie store 2) Connect to your application through the Apache proxy and log in 3) Go back to your cookie store, see if anything emerged and send us the contents of any JSESSIONID cookies. Feel free to obfuscate as you seefit, as long as we have enough information to work with (domain and pathare of paramount interest, as well as the complete URL you used to access your application in step 2. Thanks, S. --sctemme@xxxxxxxxxx http://www.temme.net/sander/ PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx