Cross Context Sessions and Cookies

[mwringe]

In 2.1.1.CR6, a change was made that makes the cookie path equal the context path instead of '/'.

2.1.1.CR5:

 protected void configureSessionCookie(Cookie cookie) {
 cookie.setMaxAge(-1);
 cookie.setPath("/");
 ...

2.1.1.CR6:

 protected void configureSessionCookie(TomcatCookie cookie) {
 cookie.setMaxAge(-1);
 if (context.getSessionCookie().getPath() != null) {
 cookie.setPath(context.getSessionCookie().getPath());
 } else {
 String contextPath = context.getEncodedPath();
 if ("".equals(contextPath)) {
 contextPath = "/";
 }
 cookie.setPath(contextPath);
 }
 ...

This has the affect of making cross context cookies fail.
The server.xml file for the jbossweb.sar has crossContext="true" (set to true by default because portals require it) but this doesn't appear to be working with cookies.

I am missing some configuration option that needs to be set somewhere?

[jfclere]

ICould you tri with the parameter emptySessionPath=true in the Connector?

[mwringe]

Adding emptySessionPath=true to the connectors in the jbossweb.sar/server.xml file doesn't make a difference.

[mwringe]

It doesn't appear that jboss web implements the emptysessionpath attribute. Its not even mentioned in the org.apache.catalina.connector.Connector class.

A quick grep through the code only reveals it being mentioned in the mbean-descriptors.xml file for the connector, but its not actually implemented into the code anywhere.

[jfclere]

Oops sorry, the thing to do is the following.
Add

<SessionCookie path="/">

element inside a

<Context>

element, for example in context.xm of application.

[c.h.]

It's good decision!!!