279287 - If cookies are enabled in Firefox, not able to navigate the site pages with hyperlinks. Site does session tracking.

Status: RESOLVED EXPIRED

(Core :: Networking: Cookies, defect)

Description

[Ajit Gobbur]

User-Agent:       Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Build Identifier: 

1. Our production site needs a login which starts a user session. If we enable 
cookies in Firefox and login, we are logged out the moment we try to click any 
hyperlink avaiilable on the landing page. All the requests to the site are 
routed through Apache Web Server, which further delegates the task to Tomcat 
(Servlet Container). In the cookies information viewable from the browser 
options, the host/domain name appears properly.

2. If the cookies are disabled in the Firefox, the 'JSESSIONID' used for URL 
rewriting, is different for different links on one single displayed page. This 
behavior is difficult to understand considering that the JSESSIONID is 
generated by the same server.

However, we observe that if we access our staging site with cookies enabled in 
Firefox, we are able to navigate properly using the hyperlinks. The only 
difference here is that Apache Web Server is not present here as a router. The 
http requests hit Tomcat directly. 

We also observe that with other browsers, we are able to navigate the 
production site using hyperlinks, with cookies enabled.


Reproducible: Always

Steps to Reproduce:
1. Keep the cookies enabled in Firefox browser 
2. Connect to a site having Apache as web server and Tomcat as the servlet 
container. The site also needs to have a user login mechanism, after which the 
user session starts. 
3. Login and see the landing page.
4. Click on a hyperlink on the landing page. 

Actual Results:  
The user is logged out. In other words, it appears that cookie information sent 
by the browser is probably corrupted, for some reason and hence cannot be 
identified by the server.


Expected Results:  
After clicking the hyperlink, one should be able to navigate to the next page.

Comment 1

[Mike Connor [:mconnor]]

There's lots of sites using that type of setup, and we don't exactly have
widespread compatibility issues.

If you can provide a testcase, or attach a cookie log using the instructions
here: http://www.mozilla.org/projects/netlib/cookies/cookie-log.html there's
possibly something wrong with the script that our stricter cookie handling is
rejecting as opposed to IE...

Comment 2

[Ajit Gobbur]

Attachment: cookie.log file for analysis of the reported bug

Attached cookie.log file generated after completing the steps mentioned in bug.

Please analyze it further and let us have your feedback.

Comment 3

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 4

[Gervase Markham [:gerv]]

This bug has been automatically resolved after a period of inactivity (see above
comment). If anyone thinks this is incorrect, they should feel free to reopen it.