Websphere 6.1:如何向 cookie 添加版本?

发布于 2024-10-24 23:07:23 字数 835 浏览 1 评论 0原文

默认情况下,WebSphere 6.1 不将版本包含到 LtpaToken 和 JSESSIONID cookie 中。有没有办法对这些 cookie 强制执行 cookie 版本 1?

WebSphere 7.0 有这个选项吗?

-- 编辑 --

这是一个例子: 当我登录到部署在 WebSphere 上的某个 Web 应用程序时,会在某个时刻创建会话。然后它的 ID 被发送到客户端浏览器(这里是 FireBug 的一些输出):

GET /myApp/somepage.jsf HTTP/1.1
Host: 127.0.0.1:9080
...
Referer: http://127.0.0.1:9080/myApp/somepage.jsf
Cookie: someMyCookie=whatever;LtpaToken=9eC8Nk3Pu; JSESSIONID=00005YXN:-1;

我剪切了 cookie,因为它们的内容不相关。但我想看到:

GET /myApp/somepage.jsf HTTP/1.1
Host: 127.0.0.1:9080
...
Referer: http://127.0.0.1:9080/myApp/somepage.jsf
Cookie: someMyCookie=whatever;LtpaToken="9eC8Nk3Pu";Version=1; JSESSIONID="00005YXN:-1";Version=1;

我可以控制我的cookies(someMyCookie)并设置它们的版本。但是我无法控制 JSESSIONID 和 LtpaToken。有什么办法可以将它们设置为版本1吗?

问候

By default WebSphere 6.1 does not include version into LtpaToken and JSESSIONID cookies. Is there any way to enforce cookie version 1 for these cookies?

Does WebSphere 7.0 have this option?

-- EDIT --

Here is an example:
When I log into some web application deployed on WebSphere, the session is created at some point. Then its ID is sent to the client browser (here is some output from FireBug):

GET /myApp/somepage.jsf HTTP/1.1
Host: 127.0.0.1:9080
...
Referer: http://127.0.0.1:9080/myApp/somepage.jsf
Cookie: someMyCookie=whatever;LtpaToken=9eC8Nk3Pu; JSESSIONID=00005YXN:-1;

I cut the cookies, since their content is irrelevant. But I'd like to see:

GET /myApp/somepage.jsf HTTP/1.1
Host: 127.0.0.1:9080
...
Referer: http://127.0.0.1:9080/myApp/somepage.jsf
Cookie: someMyCookie=whatever;LtpaToken="9eC8Nk3Pu";Version=1; JSESSIONID="00005YXN:-1";Version=1;

I may control my cookies (someMyCookie) and set them version. However I can't control JSESSIONID and LtpaToken. Is there any way to set them to version 1?

Regards

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

给我一枪 2024-10-31 23:07:23

你的要求不理智。

JSESSIONID 不存在版本不兼容或版本不同的问题,它只是本地已知的(或与单元共享的)ID 号。 LTPAKEY 始终为版本 1。名为 LTPAKEY2 的 cookie 始终包含版本 2。可能当出现版本 3 时,新 cookie 将被命名为 LTPAKEY3。

Your requirements are not sane.

JSESSIONID does not have version incompatibilities or different versions, it is just locally known (or shared with cell) ID number. LTPAKEY is always version 1. LTPAKEY2 named cookie contains always version 2. Probably when there will be version 3 the new cookie will be named LTPAKEY3.

魄砕の薆 2024-10-31 23:07:23

您是否尝试在旧服务器上进行 SSO?
您可能想尝试管理控制台中的互操作性模式设置:全局安全性>单点登录 (SSO)

互操作模式

Specifies that an interoperable cookie is sent to the browser to support back-level servers.

In WebSphere® Application Server, Version 6 and later, a new cookie format is needed by the security attribute propagation functionality. When the interoperability mode flag is enabled, the server can send a maximum of two single sign-on (SSO) cookies back to the browser. In some cases, the server just sends the interoperable SSO cookie.

Are you trying to do SSO accross older servers?
You might want to try the Interoperability mode setting in the admin console: Global security > Single sign-on (SSO)

Interoperability mode

Specifies that an interoperable cookie is sent to the browser to support back-level servers.

In WebSphere® Application Server, Version 6 and later, a new cookie format is needed by the security attribute propagation functionality. When the interoperability mode flag is enabled, the server can send a maximum of two single sign-on (SSO) cookies back to the browser. In some cases, the server just sends the interoperable SSO cookie.
~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文