"cookie secondary" problem

Hi,
our customer would like using http cookie stickiness and Ace module would learn cookie from url web page.
For expample during this get http request:
http://172.16.211.69:85/UNIX_PS/?ONWEB_InfoRule=UNIX_PS.U_LISTA_AUTORIZZAZIONI('xxxx,'xxxx','xxxx')&PSONWEBID=172017242064START20090914143000
ace must be use "172017242064START20090914143000" such as cookie.
So I Configured this sticky serverfarm:
sticky http-cookie &PSONWEBID ONWEB-STICKY-CRM
cookie offset 0 length 32
cookie secondary &PSONWEBID
timeout 30
replicate sticky
serverfarm ONWEB-SFARM-2
I leave out Layer 3 and Layer 4 SLB beacuse I haven't problem with it.
Questions are:
1. why "show sticky database group ONWEB-STICKY-CRM" is empty?
2. stickiness doesn't work: i try to send two request with same url and ace balance on two different server.
3. what's mean "You can configure an alternative cookie name that appears in the URL string of the web page on the server." rif cisco documentation ? I'm confusing alternative concept.
Regards.
Arduino

Hi Arduino,
In your http-cookie definition don't use the & prefix. The "&" isn't part of the cookie name but part of the glue that holds the HTTP request/response together. In this case I don't think you need a secondary cookie.
Check the example at http://docwiki.cisco.com/wiki/Session_Persistence_Using_Cookie_Learning_on_the_Cisco_Application_Control_Engine_Configuration_Example
HTH
Kind Regards
Cathy

Similar Messages

Cookie request problem!

Hi, can you help me?
I add a cookie in this way:
Cookie cookie = new Cookie("event_channel_cookie",String.valueOf((vali.getUserID())));
cookie.setMaxAge(60);
cookie.setPath("/");
cookie.setVersion(0);
cookie.setSecure(false);
response.addCookie(cookie);
The problem is when a request the cookies, I obtain my cookie, but cookie.getMaxAge() is equal with -1 (not 60)
cookie.getPath is null.
Here is the request code:
//check for cookie
cookies = request.getCookies();
if( cookies != null )
for(int i=0; i < cookies.length; i++)
cookieName = cookies.getName();
Thank you!

Now try:
for(int i=0; i<cookies.length; i++)
cookieName = cookies[ i ].getName();
maxAge = cookies[ i ].getMaxAge();
// my [ i ] behind cookies wasnt shown
// Test # [ i ] # is shown
// Test # # isnt shown
hope this helps

Cookie(?) problem on Firefox AND Chrome in xfce4

So, this is a weird one:
Firefox and chrome refuse to let me log-in to the majority of forums. I enter my login details, get the 'please wait, redirecting...' then it takes me back to the login screen. This is across multiple, unconnected forums. opera doesn't seem to have this problem, although I do get 'invalid session, please resubmit form' occasionally when making posts using opera.
I'm at a bit of a loss as to how to solve this problem.
Obviously I've tried clearing my cache multiple times in both browsers, clearing down all my cookies and saved passwords / sessions etc but the problem refuses to go away. Help!

Which Firefox/Chrome do you use ? Which site is that you mentioned ? Is there any output if you start these from console? Could you compare the output in terminal when you run opera and firefox e.g.?

Cookie Value - problem one more time

when I set a Cookie like: response.addCookie(new Cookie("Name","hello"));
and I try to get the value: cookie.getValue();
I will get: hello no problem!
But when I set a Cookie with an String identifier like:
String str = "hello";
response.addCookie(new Cookie("Name",str));
and I try to get the value: cookie.getValue();
I will get: "hello " (it's written in "")
how can I prevent this ?????????
when I try to compare the CookieValue with another String, I'll allways get a wrong result because of these ""

I do not have the solution... but the same problem with a nice iMac G5 purchased in July 2005.
My Mac operated very silently untill 6 month ago;problem MAY ( I am not sure) have started when I upgraded to 10.4.10 ; even with few applications and low CPU usage (80% or more inactive), it seems that I have the following regrettable chain of events;
==> the CPU temperature is quite high ( 60°c to 72°c most of the time, ie 140-160 °F)
==> resulting in fan turning at high speed ( 2.000 for CPU and system, 2500 for HD), and changing speed all the time
==> resulting in a noisy computer
I am SURE this was not the case 6 month ago, and I suspect it is linked to my upgrade to 10.4.10.
I did all sorts of reinstall, authorization repair, SMU reset, fan clean-up with no sucess.
iMac G5 (2005) Mac OS X (10.4.10) POwerbook G4 Titanium (2001)

Regarding Safari cookie size problem (RFC 2109)

Latest Safari versions do not comply with RFC 2109 regarding cookies size.
RFC 2109 6.3 Implementation Limits
   Practical user agent implementations have limits on the number and
   size of cookies that they can store. In general, user agents' cookie
   support should have no fixed limits. They should strive to store as
   many frequently-used cookies as possible. Furthermore, general-use
user agents should provide each of the following minimum capabilities
   individually, although not necessarily simultaneously:
* at least 300 cookies
* at least 4096 bytes per cookie (as measured by the size of the
        characters that comprise the cookie non-terminal in the syntax
        description of the Set-Cookie header)
* at least 20 cookies per unique host or domain name
User agents created for specific purposes or for limited-capacity
   devices should provide at least 20 cookies of 4096 bytes, to ensure
   that the user can interact with a session-based origin server.
Latest Safari violates this RFC and has 4 KB limit on total size of all cookies for each domain.
It causes severe problems with many Web Applications including Web Applications which use Microsoft SAML2 federated security.
Safari must support up to 20 cookies per domain and each cookie must be at least 4096 bytes long.
Where can I get a fix fro Safari.
This was tested with Safari for MS Windows, but people reported same problem for many other platforms.

You can provide feedback to Apple here > Apple - Safari - Feedback

No longer able to download from UTube - states wants some third party cookie; I've attempted to allow all cookies yet problem persists ???

I don't know anything further than stated in question.

Hi,
Double post:
http://h30434.www3.hp.com/t5/Notebook-Hardware/Most-Discs-aren-t-opened-by-Multimedia-Drive/m-p/4812...
Regards,
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Creating a cookie, constructor problem...

I have a servlet that creates a cookie when a user registers...
int typeUserInt = Integer.parseInt(typeUserString);
if(typeUserInt == 0) {
     Cookie cookie = new Cookie("trialUser", customerid);
           cookie.setMaxAge(86400*14);
     response.addCookie(cookie);
     System.out.println("trial user cookie value is "+customerid); //error check
}     However I am getting this error when I compile...
cannot find symbol
symbol: constructor Cookie(java.lang.String, int)
location: class javax.servlet.http.Cookie
Cookie cookie = new Cookie("trialUser", customerid);
^
Any advice anyone, all my other cookies in servlets are created in the same way and they all work! Why wont this one work?

Some basic thing like you didn't import the class or... hang on a bit, let me look at the documentation... okay, the only constructor for Cookie takes two Strings as its parameters. You aren't passing two Strings.

Cookie forwarding problem

The cookie forwarding is not working.
I try to forward the cookie to the target server inside the gateway (SRAS) but the target web server doesn't receive it.
I'm running SUN One portal server 6.0 with SRAS on an separate server. They are running on Solaris server. I've checked the "Enabled Cookie management" option and add my target server in "Forward Cookie URLs:" url list.
They only special things I see in my configuration is the target listener are on 4400, 4401 and 4413 ports instead of 80.
Any help would be appreciated, thanks

Are target and gateway servers on the same domain?
If gateway is "democrats.com" and webapplication is
"republicans.com" you can't forward cookies even if
you are Arnold Schwarzenegger!
But also on the same domain in some cases
cookie forwarding doesn't work and you have
to do it manually using JSPProxy and javascript...
And finally, if this is host.subdomain.domain.com
issue you can set document.domain to "domain.com"
Cheers,
Alex :-)

Is cookies the problem on iPad air.

I can log in on my PC for my account in credit union. When I try to use iPad it won't allow me in without getting a pass code to verify that it is indeed me. I shouldn't have to get a code each time I log into site. What else needs to be checked or unchecked so I can log in without having to get them to send me pass code each time?

Read the threads over on the right under the heading of More Like This
Allan

Cookie problem with this forum?

Today I am no longer able to connect with this forum with my Safari browser. All I receive in a page with the 6 categories and nothing else. Also, I am not able to log in. However, I can log in using Foxfire with all the topics correctly displayed. I suspect it must be a cookie problem and if that is so, I'm not sure where to go in Safari to delete cookies.

Same problem is back after only one day. When using Safari (latest version), if I click on the following link...
http://discussions.apple.com/category.jspa?categoryID=218
All I see is the Category headings (no latest posts) and I'm NOT automatically signed in. When I attempt to sign in, I then go the the "new user" data page. After signing in, I get very restrictive access to the forum.
When I sign in with Firefox, everything is normal. Yesterday when I had this problem, I erases the cookies from Safari and everything returned to normal. I hate to have to erase my cookies everyday to get access here as I prefer to use Safari.
Is this happening to anyone else?

ACE: Stickyness, Cookie in URL

Hello,
I have a problem with cookies in the URL if the browser does not support Cookies in the http header.
I'm setting the cookie in the url static , so the URL looks like:
http://testfarm/sticky.cgi?serverid=1.1.1.1
And configure the sticky group:
sticky http-cookie serverid sticky-farm cookie secondary serverid
replicate sticky
serverfarm sticky-farmm 8 static cookie-value "1.1.1.1" rserver server1
16 static cookie-value "1.1.1.2" rserver server2
What's wrong with my configuration?
If the client accepts cookies in the Cookie header anything works but not if the client rejects the cookie.

Hi Gilles,
no, i did not specify a port in the serverfarm or in the realserver.
The configuration looks like this:
sticky http-cookie serverid ST-sticky-farm
cookie secondary serverid
replicate sticky
serverfarm sticky-farm
8 static cookie-value "1.1.1.1" rserver server1
16 static cookie-value "1.1.1.2" rserver server2
policy-map type loadbalance first-match L7-10-1-1-1
class class-default
sticky-serverfarm sticky-farm
policy-map multi-match L4_SLB_POL_external
description L4 Policy fuer SLB ohne NAT
class V-10-1-1-1
loadbalance vip inservice
loadbalance policy L7-10-1-1-1
loadbalance vip icmp-reply active
appl-parameter http advanced-options HTTP-rebalance
class-map match-any V-10-1-1-1
2 match virtual-address 10.1.1.1 tcp eq www
serverfarm host sticky-farm
probe tcp80-i30
rserver server1
inservice
rserver server2
inservice
rserver host server1
ip address 1.1.1.1
inservice
rserver host server2
ip address 1.1.1.2
inservice
Sven

Firefox refuses to delete cookes

Ref, firefox not opening homepage (google search).
Secondary problem is firefox refuses to remove cookies under Options/Advanced/show cookies/Remove all cookies.
Any suggestions??

Do you have an extension like TACO (Abine) that maintains a set of OPT-OUT cookies?
* Targeted Advertising Cookie Opt-Out (TACO): https://addons.mozilla.org/firefox/addon/11073
<blockquote>TACO with Abine prevents over 100 different online advertising networks (including Google, Microsoft and Yahoo) from displaying highly targeted advertisements using the detailed information on your web surfing habits. TACO disables most behavioral advertising by setting 100+ permanent, generic, non personally identifiable "opt-out" cookies directly into the browser.<br>
<br>
Unlike other opt-out solutions, this tool will make the opt out cookies completely persistent. That is, clearing the browser's cookies will delete all other installed cookies, except these.
</blockquote>

URL-learn cookie stickiness method

Hello
In our network we are trying to configure a SLB with stickiness based on the passive cookie method on the CSM-S module for cat6k.
The server is setting the JSESSIONLIST cookie in the "set-cookie" field in the HTTP header. Unfortunately, each time a client is accessing the server, the server adds more data into the "Refer" field in the HTTP header that it's placed before the cookie field. Finally when the HTTP header is bigger then 4000 bytes, which is the maximum max-parse length value for CSM-S module, the module is unable to correctly stick the session based on the cookie value send by the client.
When a server sets the set-cookie value in the HTTP header, at the same time, it sets the parameter called jsessionid in the URI that has the same value that the cookie JSESSIONLIST. Because of our problem with the long "Referer" field in subsequent client requests we have tried to configure the stickiness based on URL-Learn method.
The virtual server is using a sticky group configured as below
sticky 2 cookie JSESSIONLIST timeout 30
cookie secondary jsessionid
Unfortunately it does not work. We are wondering why. In the configuration-guide there is not much information about this kind of stickiness. We are wondering if it is not a problem for CSM to stick a session based on the "secondary cookie", when, at the same time, the cookie field is also transmitted in the client requests. We are also wondering if it is not a problem for a load balancer that the jsessionid parameter in the URI follows ";" not "?" as in the example in the configuration guide.
I am attaching an example HTTP GET request from the client (some values were hidden). This trace shows the request with a short "Refere" field but the subsequent packets contain this field much more bigger.
Thanks for any help in advance

the CSM will look into the url if it can't find the cookie in the header.
However, if the header length is too big, the CSM will consider this an error and it will stop parsing.
A solution for you is to increase the parse length with a variable:
gdufour-cat6k-2#sho mod csm 3 var | i PAR
MAX_PARSE_LEN_MULTIPLIER 1
It will multiply whatever parse length you have configured.
Now, you could also change the server behavior with the referer.
Increasing the size of the header will consume BW and reduce performance of the LB and SSL offloader.
Gilles.

ACE "Secondary" Sticky Method

We're currently switching to ACE to serve our loadbalance needs and are trying to replicate the same set up we had on our old load balancers from another vendor.
I currently have set up stickiness for our web servers using a COOKIE INSERT type sticky method and it appears to be working.
However, if a user comes to our site and has cookies turned off, I presume the stickiness will fail. I'd like to set up a secondary sticky method to use HTTP Headers.
If it works like we want, a user will be stickied to a server based on the cookie insert but if he has his cookies turned off, the ACE would revert to the sticky by HTTP Header method.
Is this possible? If not, does anyone have any other ideas on how to fill this requirement?
Thanks!

Gilles,
Thank you for your reply.
We use a third party content proxy vendor to distribute our website through-out the world. So it appears to our website that all (most) of our traffic is coming from this vendor. For this reason (and others, such as AOL changing source addresses at will), our primary wish is to use cookies to maintain stickiness. Our developers don't want to add the cookie to the application, nor do they want to maintain a session ID in the URL. So they would like the loadbalancer to insert the cookie. This I already have configured.
Now, on the chance that the client has cookies disabled in his browser, we would like to have a backup sticky method. Our contect proxy vendor inserts an HTTP HEADER called "True-Client-IP" that lists the client's true source IP. As a backup to the cookie disable problem, we would like to revert to using this HTTP HEADER to maintain stickiness.
When using the COOKIE INSERT method, what do most users do to combat the cookie disable problem?
Thanks in advance for your help!

URL cookie

Hallo,
we have some trouble with our sticky configuration" on an ACE Module.
We would like to do session persistence on an URL cookie with the name jsessionid.
now, I found a presentation about HTTP cookie troubleshooting with following:
=> If the cookie is not found, then the ACE looks for a string in the URL, starting with one of the characters /?&#+ and
followed by a "=", then parses that value.
=> Our URL: https://www-testtest.de/test/index.do;jsessionid=B05404082849E51068A764120663B36E-!server=1
=> the cookie starts with a ";" Could this be our problem?
=> If yes, is it possible to configure the ACE to look also for the ";" string.
The sticky configuration part looks like the following,
service-policy input pmap_TEST
policy-map multi-match pmap_TEST
class cmap-WWW_HTTPs
    loadbalance vip inservice
    loadbalance policy HTTPs-sticky
    loadbalance vip icmp-reply
    ssl-proxy server ssl-proxy_TFU-3
    class-map match-any cmap-WWW_HTTPs
2 match virtual-address 1.2.3.4 tcp eq https
policy-map type loadbalance http first-match HTTPs-sticky
class class-default
    sticky-serverfarm sticky-cookie
    action actlist_HTTPMODIFY-http_https
sticky http-cookie jsessionid sticky-cookie
cookie offset 0 length 42
cookie secondary jsessionid
timeout 35
replicate sticky
serverfarm sfarm_Test
best regards
Bernd

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Normale Tabelle";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
Hallo litrenta,
Thanks for your fast reply,
according the config guide there are two options:
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_0/configuration/slb/guide/classlb.html#wp1245246
=> Defining URL Delimiters
=> Defining the secondary cookie start
our URL cookie starts with an ";" so shouldn't we use "set secondary-cookie-start" instead of the "set secondary-cookie-delimiters " command, or will we have the some result with both commands?
Regards
bhoehenberger

"cookie secondary" problem

Similar Messages

Maybe you are looking for