session getting changed while switching between HTTPS and HT

[deepakgupta_721]

Hi,

I have Apache 2.2.9 with SSL and JBOSS 4.0.5, JDK 1.6, Struts 1.2 application. JSESSIONID is maintained by Cookie. Problem is My whole site is running on HTTP but one shibboleth login is on HTTPS. What happening is when I switch from HTTP to HTTPS and then in struts action i redirect the user back to HTTP, user Session ID get changed. Its happening with IE mozilla both. Pleas Help

Thanks and Regards,
Deepak.

[erasmomarciano]

Hi
Try to pass the SessionID created on HTTP side to the HTTPS side by url parameter.

Something like:
Location: https://yoursite/?JSESSIONID=hyhgatgedrafgtegshtgefarfgtrfajkloiu7uhygtfr4

HTH

[deepakgupta_721]

Hi,

Thanks for the reply but its not working one of the reason might be Session id are getting maintained by JSESSIONID Cookie instead of URL re-writing. Dow apache has any role to play in this. In development environment i have apache in front of one JBOSS but in production apache will act as a load balancer. Please help.

Thanks and Regards
Deepak

[jinson]

If you had resolved this issue, could you please update how you fixed it. I am also facing the same issue.

Thanks in Advance