users@glassfish.java.net

The dreaded http-only issue

From: <forums_at_java.net>
Date: Sat, 12 Nov 2011 09:35:58 -0600 (CST)

Hi I am new to glassfish and considering migrating from resin.  I can't seem
to figure out how to set cookie http-only to false so existing code and
packages will work.  Out of the box 3.1 is marking cookies as http-only.
 So far I have tried:

glassfish/bin/asadmin --user admin --host localhost --port 4848 set
server-config.http-service.virtual-server.<MY VIRTUAL
SERVER>.sso-cookie-http-only=false

That worked but didn't help.  I'm tearing my hair out because otherwise
glassfish seems to be working fine.

I also googled this can be set in an XML file but I don't have a WAR just a
directory and class file structure and not sure how or where I would place an
XML file.

Thanks and apologies for being a glassfish idiot. :-)

 


--
[Message sent by forum member 'TampaSteve']
View Post: http://forums.java.net/node/863401