Forum OpenACS Q&A: cookie mess with 3.2.5 + subsites

Collapse
1: cookie mess with 3.2.5 + subsites
Posted by David Kuczek on 10/09/02 03:04 PM
I just put up a second subsite to my server which runs on 3.2.5 and I
still have this cookie mess (see: https://openacs.org/bboard/q-and-a-fetch-msg.tcl?msg_id=0005yk)...

It has nothing to do with frames this time, because the new site
doesn't use frames.

The problem is that I log out from one subsite and I get logged out
from the other subsite and the main site. Then I log into the main
site and I am back in the game on all three sites. There is three
cookies in my IE Temporary File folder though.

Sometimes he still doesn't want to log into the subsite with frames.
He simply redirects to /index.tcl without logging in. He always
manages to log in the noframe main site and the new noframe subsite
though.

Any help? It looks like my server doesn't read the domain right
sometimes...

Thanks

Collapse
2: Response to cookie mess with 3.2.5 + subsites (response to 1)
Posted by Andrew Piskorski on 10/10/02 11:57 AM
David, that sounds like an IE cookie bug that's been discussed here
before.  I think some versions of IE are known to sometimes ignore
either the port number or other parts of the URL when setting cookies.
I forget exactly though, and I couldn't find the old threads.  If you
do find them, or other info, please let us know.
Collapse
3: Response to cookie mess with 3.2.5 + subsites (response to 1)
Posted by David Kuczek on 10/10/02 01:11 PM
Okay, it looks like I finally found that annoying bug! It definitely is an IE problem!

IE on oacs (at least on my installation) gets confused whenever it has to save a cookie for foo.com instead of www.foo.com... This only becomes a problem with subsites.

Before each of the following steps I deleted all cookies from the temp directory:

1. Whenever I visited sub1.foo.com and then sub2.foo.com without having visited foo.com, I wouldn't have any problems with cookies.

2. BUT whenever I visited foo.com and then sub1.foo.com or sub2.foo.com, the browser would get confused.

3. Finally I visited www.foo.com and then sub1.foo.com or sub2.foo.com and, hoooray!!!, IE would not get confused anymore.