Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
71 views

How to make nginx understand dots in cookie values?

I have Nginx configured as a simple sticky LB. One of the key parts of config is matching cookie value to server address. This works fine: map $cookie_sessionServer $http_sticky_backend { default ...
0
votes
0answers
6 views

mod_rewrite: Use Substitution from Previous Condition

I'm trying to do a basic language redirect based on a cookie. To do that and prevent a loop, I need to check that the user isn't already on the correct URL, so I wrote this rule: RewriteCond ...
0
votes
0answers
54 views

Glassfish-3.0.1 mixing user sessions - SSO

We are experiencing a strange behaviour, we have an application (jsf 2.2.4 embedded) that has a login form, glassfish has sso enabled and a custom realm (LDAP). We have also several applications (some ...
0
votes
1answer
160 views

Reverse Proxy a Sub-directory to a Sub-directory with Apache

I understand proxies in concept (though have never set one up). I'm attempting to proxy Drupal, but I'm fairly sure that my problem is not related to Drupal. As I have been trying to determine the ...
0
votes
2answers
133 views

HAproxy current session is zero

I have some problems on sticky sessions with HAproxy. Haproxy counts every request as a new session. I have a Java servlet that creates the cookie JSESSIONID. If I refresh that page 5 times. The ...
0
votes
1answer
150 views

Https on HAproxy 1.4 using stunnel

I'm running a load balancing server with HAproxy and implementing Https using stunnel on the same machine, on the actual webpages end i've got 2 diferent webs, A and B, with similar behaviour. Here ...
1
vote
1answer
444 views

IIS7 Multiple Websites Same Port

I am trying to set up an internal-only web server of our production websites for QA and development testing. There is no need or intention to access this dev site from outside of the corporate ...
2
votes
1answer
79 views

Varnish - Allow specific cookies for the backend?

I am trying figure out how to allow the backend to see tracking cookies on specific registration pages but ignore them on others. Currently, I'm trying to use a custom header sent from the backend to ...
0
votes
0answers
453 views

Nginx cookie path for JSESSIONID not set

I have a problem with the JSESSIONID of a web application that is running on a Tomcat. The webapplication is running at https://alm-staging.domain.de/webclient.webapp/. Nginx should proxy all request ...
0
votes
1answer
238 views

Redirection in varnish based on cookie value

We have varnish sitting in front of our site and it is imperative that we cache as much as possible. Recently we decided to ditch GeoIP redirection for interstate content for a more traditional ...
0
votes
2answers
347 views

Internet Explorer ignoring PHP setcookie() from CentOS server

In the past we used a windows XAMPP server for an internal website. It worked fine but had some intermittent issues and we decided to move to a LAMP server on CentOS. We made the switch today but it ...
1
vote
1answer
708 views

PRUM_EPISODES cookie

We have noticed an unusual cookie in our logs: PRUM_EPISODES=s=1379338025465&r=http%3A//www.example.com/demo.html I presume it's a 3rd party control on our site which creates this. Does anyone ...
0
votes
1answer
30 views

Passwords not remembered

We'r running an IIS7 with our .NET4 aspx C# solution ontop as a site. I'm getting reports that some users experience their passwords needs to be retyped at times. I told my boss that is a client side ...
0
votes
1answer
327 views

Laravel/Apache “Bad Request”

I'm playing around with Laravel and implemented the Auth class to create a user registration/login system, i'm using the cookie driver so that members can stay logged in. But most of the time it will ...
0
votes
1answer
126 views

Can Apache clean cookies from a request to specific URLs?

We have the following configuration: <Directory /docs> AuthFormAuthoritative Off AuthType None Allow from all Satisfy any Options FollowSymLinks </Directory> ...
4
votes
1answer
1k views

Problems setting a cookie from a machine proxied by nginx

For a project of mine, I need to wire up a long chain of machines that are essentially proxying the HTTP requests for each other. It goes like this: Web client - A - B/C - D When a request is made ...
0
votes
1answer
353 views

.htaccess RewriteRule with cookies not working

The Joomla CMS Platform has an /administratotr/ folder which cannot be renamed. I'd like to secure it by requiring a custom url parameter to access it - I.E. /administrator/index.php?token=1149785380. ...
1
vote
0answers
190 views

How to add domain to Cisco ACE sticky cookie value?

My Cisco ACE, by default, sets the sticky cookie to not have a domain set. This has the effect of serving the sticky cookie under the domain of the host requested: ...
2
votes
3answers
5k views

Leverage proxy caching with nginx by removing Set-Cookie header

The following is a result of a bug within WebKit's Dev Tools used by Google Chrome and Apple's Safari. I have made a bug report with CrBug, who then identified the regression within WebKit Changeset ...
1
vote
1answer
154 views

Apache2 - Forward a value from URL param OR cookie, whichever is present

I managed to use apache to strip off a url param and stuff it in a header to be passed on to another server. See this question for reference. Now I would like to add to this by getting the value for ...
1
vote
2answers
843 views

Logging of POST requests, cookies and XID in varnish (varnishncsa)

I would like to include following information in my varnishncsa logs (I need to relate some issues with specific users). content of post requests cookie with full content XID After reading ...
0
votes
1answer
152 views

How to test if cookie contains pattern VCL (Varnish)

How can I test if a cookie starts with SESS* in the Varnish config file. I want all requests to hit the server if this cookie is set. Is it a regular regex?
3
votes
1answer
2k views

Setting the secure flag on cookies from Outlook Web Access

I'm running Exchange 2007 SP3 which is exposing outlook web access over only HTTPS. However the server delivers the sessionid cookie without the secure flag set. Even though I don't have port 80 open, ...
0
votes
1answer
140 views

Placing multiple tracking cookies with mod_usertrack module of apache

We are using mod_usertrack module of Apache for tracking user activity on our website. We wish to place additional tracking cookies to differentiate returning users on the website. Can we place ...
2
votes
1answer
254 views

haproxy maxconn and cookie sessions

i have any instances under an haproxy loadbalancer. i am using the haproxy cookies to make each client connect to the same server troughout his whole session. now the thing is, I would like to setup ...
1
vote
2answers
167 views

Expire cookie from web server

I've made some modifications on my user token and current session cookie makes server to redirect the request "in a way that will never complete". The trick is to delog/relog, or wait for session ...
3
votes
2answers
153 views

Where can I report an issue with ASP.NET Browsers File?

While working with an ASP.NET application on Chrome for Android I discovered that Request.Browser.Cookies returns False for that browser (despite the browser supporting cookies). Based on what I've ...
1
vote
0answers
173 views

Rewrite cookies for ISA: add Secure

We've developed a web application. One of our customers decided to run it over HTTP internally and use an ISA server to function as a reverse proxy. The access to the ISA server from the outside world ...
2
votes
1answer
2k views

GPO - Block 3rd party cookies for IE 8

I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
2
votes
1answer
357 views

Apache mod_cache: Strip/ignore (only) Google Analytics cookies

Varnish has the possibility to strip certain cookies from the request before deciding if a request is non-cachable because it contains cookies. Is there such a thing for Apache's mod_cache? Consider ...
0
votes
1answer
483 views

Google Analytics setting cookies on static content despite being on entirely separate domain

I recently decided to comply with the YSlow recommendation that static content is hosted on a cookieless domain. As I already use the root of my domain (donaldjenkins.com) to host my website—on which ...
0
votes
1answer
365 views

curl cookie and cookiejar trouble

I've got a script that curls a site using a specific cookie value in a cookie file. When I run this on my local system, the server returns the same value to my cookie jar, as per my expectations. When ...
0
votes
1answer
2k views

how to check the value of a cookie in varnish

I have a cookie for language. I want to check if this cookie is set and to check its value to redirect the user to specific page. the cookie name is Lang and its value might be En,Fr,or Ar if ...
9
votes
3answers
9k views

How to rewrite the domain part of Set-Cookie in a nginx reverse proxy?

I have a simple nginx reverse proxy: server { server_name external.domain.com; location / { proxy_pass http://backend.int/; } } The problem is that Set-Cookie response headers contain ...
0
votes
1answer
820 views

How can I configure a Windows Embedded Standard 7 Thin Client to permanently store IE Browser Cookies?

I have a Wyse C90LE7 Thin Client with Windows Embedded Standard 7. By default it stores Internet Explorer Cookies in a Folder on the Z: ramdrive. I need the Cookies to be stored on the C: flash ...
4
votes
2answers
1k views

non-www domains prevent hosting of static content on the same domain, correct?

Flaw to using non-www domain a canonical? I love the idea of short, clean urls like example.com over www.example.com, and certainly whichever one is used should redirect to the other. However, as I ...
2
votes
2answers
398 views

Bad Request Due to “Bad” Cookie

I have a web site under a domain, where the main domain is using Google Analytics which sets a cookie named __utmva which is value is part binary. As far as I can tell passing this cookie to IIS ...
2
votes
0answers
204 views

Vanilla .Net 4.0 website cannot identify some AppleWebKit based browsers

We are seeing some Safari browsers failing to cross-authenticate our website after we upgrade to .net 4.0 from .net 3.5. After much investigation, it turns out to be a problem with ASP.Net ...
3
votes
1answer
8k views

Apache mod_header rule to change all cookies to secure

I would like to change all cookies to be secure and http-only. It works fine for one cookie, but doesn't work when multiple cookies are set in response. Apache mod_header rule should change cookies ...
2
votes
2answers
3k views

How to configure cookieless virtual host in Apache2?

We run over a hundred web applications (growing daily) on a LAMP stack using Apache2 on Ubuntu 10.04. We've would like all requests to static content to be cookieless. We host applications on many ...
1
vote
2answers
930 views

Haproxy Check if Cookie is Set

I have a Haproxy config that is currently in development and I am using the following code in order to find if the requesting user will accept a cookie or not as the script at the end destination ...
1
vote
2answers
3k views

How to add recently set cookies to nginx's access log

I'd like to include cookie data in an nginx access log like so: (simplified example) log_format foo '$remote_addr "$request" $cookie_bar'; access_log /var/log/nginx/access.log foo; This works ...
6
votes
1answer
2k views

Date header returned by IIS7 is wrong

I am serving an ASP.NET application from IIS 7 but we are experiencing some weird cookie issues. The code works fine in other environments so we are assuming this is specific to this server (related ...
0
votes
1answer
820 views

Why can't Windows Server 2008 create cookies?

Scenario: I have a web application (SnapshotServer) which uses a WebBrowser control to take a snapshot images of a web page. I use a WebBrowser control within SnapshotServer to navigate to a entry ...
4
votes
2answers
3k views

How to make Varnish ignore, not delete cookies

I want to use Varnish to cache certain pages even in the presence of cookies. There are 3 possibilities that I need to take care of: An anonymous user is viewing some page A logged in user is ...
1
vote
0answers
564 views

ActiveSync on iOS 4.2 no longer supports cookies?

We have a in-house developed WAF protecting our OWA (activesync) webserver, and part of its function requires long-lived Cookies on the "browsers". We're trying to get it to support iPhones via the ...
0
votes
1answer
100 views

Enforcing a specific order for cookie headers

We have an application that cares about the order of cookie headers. It shouldn't, since this isn't mandated by the standards and indeed we're getting the headers in various different orders So we ...
2
votes
6answers
4k views

How to cache websites using Varnish, PHP and Cookies

I consider starting using Varnish on my websites. I just tried out Varnish and I am wondering how to cache pages even if I my websites uses cookies, for Google Analytics. I am trying to remove them ...
4
votes
5answers
544 views

Mitigating the 'firesheep' attack at the network layer?

What are the sysadmin's thoughts on mitigating the 'firesheep' attack for servers they manage? Firesheep is a new firefox extension that allows anyone who installs it to sidejack session it can ...
0
votes
1answer
329 views

$_COOKIE and subdomains

I've written a cookie for my domain + subdomain: setcookie("visitor", $visitor, time()+60*60*24*365, "/", ".mydomain.net"); but when I try to read it from within subdomain.mydomain.net, it's ...