Return-Path: 
 <users-return-242315-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
X-Original-To: apmail-tomcat-users-archive@www.apache.org
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 9F66910E76
	for <apmail-tomcat-users-archive@www.apache.org>;
 Fri, 14 Jun 2013 07:18:27 +0000 (UTC)
Received: (qmail 72016 invoked by uid 500); 14 Jun 2013 07:18:23 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 71435 invoked by uid 500); 14 Jun 2013 07:18:12 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 71426 invoked by uid 99); 14 Jun 2013 07:18:10 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Jun 2013 07:18:10 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=5.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of aw@ice-sa.com designates
 212.85.38.228 as permitted sender)
Received: from [212.85.38.228] (HELO tor.combios.es) (212.85.38.228)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Jun 2013 07:18:04 +0000
Received: from [192.168.245.216]
 (HSI-KBW-37-49-53-194.hsi14.kabel-badenwuerttemberg.de [37.49.53.194])
	(Authenticated sender: andre.warnier@ice-sa.com)
	by tor.combios.es (Postfix) with ESMTPA id 93F483C075E
	for <users@tomcat.apache.org>; Fri, 14 Jun 2013 09:18:08 +0200 (CEST)
Message-ID: <51BAC395.4050604@ice-sa.com>
Date: Fri, 14 Jun 2013 09:17:41 +0200
From: =?ISO-8859-1?Q?Andr=E9_Warnier?= <aw@ice-sa.com>
Reply-To: Tomcat Users List <users@tomcat.apache.org>
User-Agent: Thunderbird 2.0.0.23 (Windows/20090812)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: lost session in Tomcat 7.040 and IE8
References: <51BA9B86.5050105@arn.net>
In-Reply-To: <51BA9B86.5050105@arn.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org

Carl Dreher wrote:
> I have Tomcat 7.0.26 running on Window7 Pro.  I also have Tomcat 7.0.40 
> running on a Windows 7 Home Premium.  Both have the same website.  
> (Obviously, I'm doing some testing.)
> 
> In the website, a user logs on and the user ID is kept in the session.   
> In one of the JSP pages I have some JavaScript attached to an html button
> <input type="button" name="" value="blah blah blah" 
> onclick="window.location='/MySite/MyAction.do'">
> (I'm using Struts.)  Now, here is were it gets strange...
> 
> During testing, I found that IE8 and IE9 both run fine against Tomcat 
> 7.0.26.  By that I mean, after the user logs on, the user ID is kept in 
> the session.  After navigating around the site, if the user then clicks 
> on the above button, the Struts Action class "MyAction.do" is able to 
> find the user ID in the session.
> The same is true of IE9 against Tomcat 7.0.40.
> 
> But if I do the above with IE8 against the site on Tomcat 7.0.40, the 
> user ID in the session is empty.
> 
> To summarize,
>                            |     IE8             |   IE9
> -----------------------------------------------------------
> Tomcat 7.0.26  |     ok               |     ok
> -----------------------------------------------------------
> Tomcat 7.0.40   |    fail              |      ok
> -----------------------------------------------------------
> 
> Any ideas where to start looking?
> 

Yes. I would recommend, first of all, that you install some add-on on the IE side, which 
can display the conversation between IE and server (HTTP headers etc.).
(I know of Fiddler2, but there might be others).
Then run your check once on each, and compare requests/responses/headers.

There have been over the years (and there still are) so many quirks/bugs/inconsistencies 
between IE versions (and patch levels within versions), that I would start there with any 
issue of this nature.

I'm not saying that this /is/ the problem here, but first things first.
It would not be too surprising if for some reason at some point, IE8 stops sending back 
the session cookie, causing Tomcat to create a new session, without user-id.



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org