Applet - > Servlet Communication Losing Session ID Crossing Firewall 2006-11-17 - By Rick Strong
Back
RE Tomcat 5, applet, servlet, firewall, other security.
Hi All,
Somewhat new to Applet/Servlet work, and in need of some assistance.
My app has an applet front end and a servlet back end. The user first
contacts the servlet, which writes an HTTP response back including an
APPLET tag, passing the JSESSIONID gotten from the session as a PARAM
tag for the applet. In the applet, I rewrite the server's URL and append
";jsessionid=[the session id]" before using the URL to communicate via a
URLConnection, so that the server knows that this is still the same
session.
This works fine as long as everyone is on one side or the other of the
firewall, but when I put the server behind the firewall, trying to talk
to it from outside the firewall fails (HTTP error 500) Upon debugging
this setup, I noticed that the requestedSessionID is consistently null,
where it normally picks up the session id I supply in the APPLET tag.
My network keepers assure me that the firewall is not blocking cookies,
there are no proxies or NATs or anything in the way, but I'm losing the
requested session id and as a result the server thinks that the reply
from the applet is a request for a new session...which kills the app. Argh.
Any ideas as to how I can figure out what is mangling my applet's
requests across the firewall? Any information very much appreciated!
Rick Strong
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
