For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rjordan's avatar
rjordan
Icon for Nimbostratus rankNimbostratus
Apr 15, 2011

cookie persistence problem - IE8 cookie domains

I'm having some issues with session persistence. I'm using the default cookie insert method (only customized the name) and it seems that IE requests are sending cookies for domains that don't really m...
config
design
veer_96014's avatar
veer_96014
Icon for Nimbostratus rankNimbostratus
Jul 16, 2012
I am facing kind of similar issue. I have two domains (primary and secondary) mapped to 127.0.0.1 in the hosts file. I have web application deployed on weblogic (only one application deployed).

 

 

127.0.0.1 mysystem.comp.com

 

 

127.0.0.1 sub.mysystem.comp.com

 

 

Now I open up IE8 and go to primary domain i.e. http://mysystem.comp.com:7001/ and login successfuly. The session cookie I see in the response is

 

 

WLCookie=nYXNQQXRZp7dQdGXLy1dhylQZbtPdJFTjp9f81s5926PQyG04nPb!1416791498

 

 

Now I open another tab in the same browser window of IE8 and try to navigate to subdomain (sub.mysystem.comp.com

 

). Now the subdomain also has the cookie from primary domain. Though I try to clear it by setMaxAge(0), setPath("/"), setdomain, however this cookie does not clean out which causes the weblogic to not accept the session, returns me to the Login page on the second ie tab (subdomain).

 

 

This does not happen if instead of a tab I open up a new browser window.

 

 

This issue does not occur on firefox, chrome. Please provide a solution to this issue