CAS validation error

Marvin Addison marvin.addison at gmail.com
Wed Apr 12 08:48:52 EDT 2017


On Tue, Apr 11, 2017 at 4:42 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> in Java when this matters I do things like tell the container to never put
> JSESSIONID on the URL, that kind of thing.
>

I've found the documentation on how to do that surprisingly obscure, so I'm
putting it here for the benefit of others:

    <session-config>
        <tracking-mode>COOKIE</tracking-mode>
    </session-config>

That's the servlet 3.0 way to handle things in the web.xml. I believe it's
container-specific prior to 3.0, so you'll unfortunately have to look up
the arcane incantation for your specific container if it's an old app.

M <users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170412/fdfc1321/attachment.html>


More information about the users mailing list