Return-Path: 
 <tomcat-user-return-130743-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 51771 invoked from network); 2 Aug 2005 15:34:02 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 2 Aug 2005 15:34:02 -0000
Received: (qmail 80587 invoked by uid 500); 2 Aug 2005 15:33:30 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 80537 invoked by uid 500); 2 Aug 2005 15:33:29 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 80443 invoked by uid 99); 2 Aug 2005 15:33:29 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Aug 2005 08:33:29 -0700
X-ASF-Spam-Status: No, hits=1.0 required=10.0
	tests=SPF_HELO_SOFTFAIL
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Received: from [212.18.25.230] (HELO mail.zooplus.de) (212.18.25.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Aug 2005 08:33:18 -0700
Received: from exchange2.home.zooplus.de (unknown [192.168.10.72])
	by mail.zooplus.de (Postfix) with ESMTP id 3CABC5768A
	for <tomcat-user@jakarta.apache.org>; Tue,  2 Aug 2005 17:33:24 +0200 (CEST)
Received: by exchange2.home.zooplus.de with Internet Mail Service
 (5.5.2657.72)
	id <MCNTSRRL>; Tue, 2 Aug 2005 17:33:24 +0200
Message-ID: 
 <10361639FF4CA04ABB30F54683E4FB85020B13F6@exchange2.home.zooplus.de>
From: Bernhard Slominski <bernhard.slominski@zooplus.com>
To: 'Tomcat Users List' <tomcat-user@jakarta.apache.org>
Subject: AW: Session ID's
Date: Tue, 2 Aug 2005 17:33:19 +0200 
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2657.72)
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

Some small addition:
URL Rewriting is only used when cookies are switched off.
>From the Servlet Spec:

SRV.7.1.3 URL Rewriting
URL rewriting is the lowest common denominator of session tracking. =
When a
client will not accept a cookie, URL rewriting may be used by the =
server as
the basis
for session tracking. URL rewriting involves adding data, a session ID, =
to
the URL
path that is interpreted by the container to associate the request with =
a
session.
The session ID must be encoded as a path parameter in the URL string. =
The
name of the parameter must be jsessionid. Here is an example of a URL
containing encoded path information:
http://www.myserver.com/catalog/index.html;jsessionid=3D1234

SRV.7.1.4 Session Integrity
Web containers must be able to support the HTTP session while servicing =
HTTP
requests from clients that do not support the use of cookies. To =
fulfill
this
requirement, Web containers commonly support the URL rewriting =
mechanism.

Bernhard

> -----Urspr=FCngliche Nachricht-----
> Von: Charles P. Killmer [mailto:charlesk@netgaintechnology.com]
> Gesendet: Dienstag, 2. August 2005 17:03
> An: Tomcat Users List
> Betreff: RE: Session ID's
>=20
>=20
> I was hoping there was a configuration setting that would tack the
> session id onto every hyperlink at runtime, much as PHP does.
>=20
> Charles
>=20
> -----Original Message-----
> From: Derrick Koes [mailto:Derrick_Koes@skillsoft.com]=20
> Sent: Tuesday, August 02, 2005 9:20 AM
> To: Tomcat Users List
> Subject: RE: Session ID's
>=20
> Use HttpServletResponse.encodeURL(String url)=20
>=20
> -----Original Message-----
> From: Charles P. Killmer [mailto:charlesk@netgaintechnology.com]
> Sent: Tuesday, August 02, 2005 10:04 AM
> To: Tomcat Users List
> Subject: Session ID's
>=20
> Is there a configuration setting such that every local URL will be
> encoded with a session id if one is present?  I have developed a site
> that uses cookies to hold the session id and am getting=20
> complaints from
> users that do not have cookies enabled.
> =20
> Thanks
> Charles
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>=20

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org