Information of the MYSAPSSO2 Cookie

Hello everybody,
I am working with SSO and I've instaled analyzer tool to look how the cookies are, on "Information of the MYSAPSSO2 Cookie". The other day worked but now it seems like doesn't works because all parameters shows as null.
How can i known if my portal sends cookies or not?
Thanks
Guillermo

Hi,
Michael, my portal certificate has not expired the date shows from Mon Mar 06 20:30:28 CET 2006 to Thu Mar 06 20:30:28 CET 2008 (i didnt want to be rude, but the button was obvious one for me, thank you)
I suspect my portal doesn't generates that cookie and probably I have anything wrong in the UM configuration...i've read that the parameter ume.usermapping.unsecure=FALSE has to be TRUE but this parameter is to do with the user mapping method isn't it?
Maybe another thing in UM configuration that i dont realize?
Thanks again.

Similar Messages

  • Issue while parsing the MYSAPSSO2 Cookie

    Hi All,
    We are trying to establish SSO with a non SAP web application using MYSAPSSO2 cookie.
    Plan is to write a java class which can parse out the MYSAPSSO2 cookie, extract the user Id and use it for single sign on.
    Following Libraries are used:
    logging.jar
    i18n_cp.jar
    iaik_jce.jar
    com.sap.security.api.jar
    com.sap.security.core.jar
    rscp4j.dll(this is downloaded from a SAP EP 7.0 instance running in windows 2003 server in our landscape).
    Our Source SAP EP 7.0 instance which will be issuing the cookie is running in Solaris.
    The target application in which the cookie is parsed, is running in Windos 2003 64 bit server.
    Following is the code which we are using.
    //Instantiate the rpovider
    IAIK provider = new IAIK();
    Security.addProvider(provider);
    //Instantiate the ticket
    tv  =   new com.sap.security.core.ticket.imp.Ticket();
    //set teh certificates
    tv.setCertificates(certificates);
    //set the MYSAPSSO2 cookie
    tv.setTicket(strCookie);
    if (!tv.isValid()){
         System.out.println("Ticket is not valid");
    //Verify the ticket
    tv.verify();
    isValid method is working fine - it is returning true or false exactly based on the validity.
    ISSUE:
    tv.verify();--->Raises the following exception:
    java.security.SignatureException-Certificate (Issuer="CN=SID,OU=XX,O=XYZ,L=LO,ST=ST,C=CO", S/N=1234567890) not found.
    When analyzed, it looks like the verify method is trying to compare the issuer's serial number in integer format
    but the portal is providing the serial number in hexadecimal format.
    So the keystore has the certificate with the same issuer and serial number but the serial number is in hexadecimal format.
    The certificate from SAP Enterprise Portal was imported to the local keystore using the keytool -import option.
    Could anyone help resolve this issue?
    Thanks in advance.

    Hi,
    im facing the exact same problem, and I think I found the reason for the behavior described above.
    The Problem seems to be located at
    [http://help.sap.com/javadocs/NW73/SPS01/CE/se/com.sap.se/com/sap/security/api/ticket/TicketVerifier.html#verify()]
    from com.sap.security.api.jar, just like mentioned.
    But the Problem seems to be the issuer, not the serial number.
    When decompiling  com.sap.security.api.jar with JD-GUI ([http://java.decompiler.free.fr/?q=jdgui]),
    you can see the following:
         public static java.security.cert.X509Certificate[] findCertificates(
                   java.security.cert.X509Certificate[] certificates, String issuer, BigInteger serial) {
              if ((certificates == null) || (certificates.length == 0)) {
                   return null;
              ArrayList certificateList = new ArrayList();
              for (int i = 0; i < certificates.length; i++) {
                   java.security.cert.X509Certificate certificate = certificates<i>;
                   if ((certificate.getIssuerDN().getName().equals(issuer)) && (certificate.getSerialNumber().equals(serial))) {
                        certificateList.add(certificate);
              if (certificateList.size() == 0) {
                   return null;
              java.security.cert.X509Certificate[] matchedCertificates = new java.security.cert.X509Certificate[certificateList
                        .size()];
              certificateList.toArray(matchedCertificates);
              return matchedCertificates;
    As you can see, the issuer-parameter is beeing compared with the issuer from the certificate. And here comes the weird stuff: While the  issuer-parameter contains an issuer like
    "OU=J2EE,CN=EXAMPLE"
    the issuer retrieved from the certificate is
    "OU=J2EE, CN=EXAMPLE"
    (see toString() of the java.security.cert.X509Certificate)
    You see the missing whitespace after the comma? This is the reason why the if-condition fails and you get something like
    java.security.SignatureException: Certificate (Issuer="OU=J2EE,CN=EXAMPLE", S/N=1234) not found.
    A workaround (a really UGLY one, I admit), is the following:
    1. Open  com.sap.security.api.jar with a ZIP-tool and delete
    /com/sap/security/api/ticket/TicketVerifier.class
    2. Copy the decompilied Version of TicketVerifier to Java-Class /com/sap/security/api/ticket/TicketVerifier.java
    3. Change
    for (int i = 0; i < certificates.length; i++) {
         java.security.cert.X509Certificate certificate = certificates<i>;
         if ((certificate.getIssuerDN().getName().equals(issuer)) && (certificate.getSerialNumber().equals(serial))) {
              certificateList.add(certificate);
    to
    for (int i = 0; i < certificates.length; i++) {
         X509Certificate certificate = certificates<i>;
         String dnNameFromCert = certificate.getIssuerDN().getName().replaceAll(", ", ",");
         BigInteger serialNumberFromCert = certificate.getSerialNumber();
         if ((dnNameFromCert.equals(issuer)) && (serialNumberFromCert.equals(serial))) {
              certificateList.add(certificate);
    4. Package this class into a jar and make it available in your classpath.
    5. Enjoy
    To me, this is a huge bug in the SAP-Library and has to be fixed.
    Regards
    Matthias
    Edited by: Matthias82 on Sep 29, 2011 12:47 PM

  • Getting the MYSAPSSO2 cookie in the application running in tomcat server

    Hi All
    I am trying to integrate the java application running in tomcat in to portal ...for this i have developed a servlet and trying to get the MYSAPSSO2 cookie in this so that i can vlaidate this ticket...
    can any one plz help in solving this issue
    Thanks & Regards
    Ajay

    Hi Ajay,
    Did you solve this problem? how? I need to do this too.
    thanks,
    Daniel Arakawa

  • Issue in parsing MYSAPSSO2 Cookie -Certificate Serial no is in Hexadecimal

    Hi All,
    We are trying to establish SSO with a non SAP web application using MYSAPSSO2 cookie.
    Plan is to write a java class which can parse out the MYSAPSSO2 cookie, extract the user Id and use it for single sign on.
    Following Libraries are used:
    logging.jar
    i18n_cp.jar
    iaik_jce.jar
    com.sap.security.api.jar
    com.sap.security.core.jar
    rscp4j.dll(this is downloaded from a SAP EP 7.0 instance running in windows 2003 server in our landscape).
    Our Source SAP EP 7.0 instance which will be issuing the cookie is running in Solaris.
    The target application in which the cookie is parsed, is running in Windos 2003 64 bit server.
    Following is the code which we are using.
    //Instantiate the rpovider
    IAIK provider = new IAIK();
    Security.addProvider(provider);
    //Instantiate the ticket
    tv = new com.sap.security.core.ticket.imp.Ticket();
    //set teh certificates
    tv.setCertificates(certificates);
    //set the MYSAPSSO2 cookie
    tv.setTicket(strCookie);
    if (!tv.isValid()){
    System.out.println("Ticket is not valid");
    //Verify the ticket
    tv.verify();
    isValid method is working fine - it is returning true or false exactly based on the validity.
    ISSUE:
    tv.verify();--->Raises the following exception:
    java.security.SignatureException-Certificate (Issuer="CN=SID,OU=XX,O=XYZ,L=LO,ST=ST,C=CO", S/N=1234567890) not found.
    When analyzed, it looks like the verify method is trying to compare the issuer's serial number in integer format
    but the portal is providing the serial number in hexadecimal format.
    So the keystore has the certificate with the same issuer and serial number but the serial number is in hexadecimal format.
    If I print the certificates available in the keystore it is printing that certificate with serial number in hexadecimal format. if I convert that hexadecimal to decimal - I get the same number which is part of the error message raised by the code.
    The certificate from SAP Enterprise Portal was imported to the local keystore using the keytool -import option.
    Could anyone help resolve this issue?
    Thanks in advance.

    Any advice please?
    Do I need to post it in a different forum?

  • MYSAPSSO2 Cookie not found in IE

    Hi Everyone,
    I am trying to implement SSO between a third party Java application and the SAP EP 7.0. As a test procedure, I log in to my portal and then run my code to see if I can retrieve and decrypt the MYSAPSSO2 cookie.
    My code works perfectly when I log in to the portal using Mozilla Firefox (2.0.0.1); I can see the MYSAPSSO2 cookie and decrypt it (Log file output below). However, when I use IE (6.0.3790.1830) to log in to the portal, I can not retrieve the MYSAPSSO2 cookie. It seems as if this cookie does not even exists. I am thinking the cookie is somehow hidden and therefore my code can't see it.
    Has anyone faced this issue before? I have tried to decrease the security settings on IE but that doesn't help things. Any help on this issue would be really appreciated!
    Pasted below is a snippet of my code.
    //request is a HttpServletRequest object
    Cookie[] allCookies = request.getCookies();
                        int allCookiesLength = allCookies.length;
                        for (int i = 0 ; i<allCookiesLength; i++)
                             Log.debug("Cookie Name at " + i + " = " + allCookies<i>.getName());
                             if(allCookies<i>.getName().compareToIgnoreCase("MYSAPSSO2")==0)
                                  SAP_SSO_COOKIE =  allCookies<i>;
                                                    Log.debug("Cookie Found!");
                                  cookieFound = true;
                                  break;
                                            Log.debug("Cookie NOT Found!");
                             cookieFound = false;
    <u><b>Log file Output with IE</b></u>
    2007.02.07 13:05:31 Cookie Name at 1 = saplb_*
    2007.02.07 13:05:31 Cookie Name at 2 = JSESSIONID
    2007.02.07 13:05:31 Cookie NOT Found!
    <u><b>Log file Output with Firefox</b></u>
    2007.02.07 13:54:15 Cookie Name at 0 = saplb_*
    2007.02.07 13:54:15 Cookie Name at 1 = PortalAlias
    2007.02.07 13:54:15 Cookie Name at 2 = JSESSIONID
    2007.02.07 13:54:15 Cookie Name at 3 = MYSAPSSO2
    2007.02.07 13:54:15 Cookie Found!
    Thanks
    MOY

    Michael,
    I changed the parameter "httponlycookie" to FALSE and this works. My issue was that when I set the parameter to FALSE, I restarted my J2EE engine. For some odd reason, after the restart this parameter was set back to TRUE. Whats even worse, or maybe even cool, depends how you look at it, is that this parameter is set back to TRUE even if I closed down Visual Admin and fire it up again (without restarting the server). However, in this case SSO still works because the J2EE settings are not updated with this TRUE value. Is there a security setting which sets back this parameter to TRUE every time the server is restarted or when Visual Admin is fired up?
    Thanks
    MOY

  • MYSAPSSO2 cookie format in J2ee and ABAP - NW7

    Hello
    I installed NW7 with ABAP + Java with system id DV1. I was able to configure the java and abap to issue ticket and to be accepted by other systems (DV2).
    If I login to the DV1 abap host using webgui url(integrated ITS), I am getting the MYSAPSSO2 cookie in the browser IE.  With this I am able to login to DV2 j2ee and also to ABAP.
    If I login to DV1 j2ee engine using the portal link, I am not seeing the MYSAPSSO2 cookie in the browser, but seeing JSESSIONID and with it still I am able to login to DV2.
    My question : Is the JSESSIONID exactly equal to MYSAPSSO2 ? If not how can I make the DV1 J2ee to issue MYSAPSSO2 cookie ? Thanks.
    SAPLearner

    Hi
    I am able to test and able to login to the other j2ee or abap system. But still not able to see the MYSAPSSO2 cookie issued by EP j2ee.
    DV1 - NW7 SP12 system ABAP + J2ee(with portal on it)
    DV2 - NW7 SP12 system ABAP + J2ee(with BI java)
    I have exported DV1's java and abap certificate to DV2, made it trusted and the the connection is working.
    When I login to DV1 j2ee using the url  http://<DV1fullhostname>.com:52200/irj/portal
    and getting the below in my browser
    SignOnDefault=<windows id>; JSESSIONID=(DV1host_DV1_22)ID2068173650DB0050916542928689590End; SAPPORTALSDB0=urn%253Acom.sapportals.appdesigner%253Aframework%2526isPersonalizeMode%3Dfalse; GWS_AUTO_LOGIN=FALSE; AbxUserLocale=en_US_STAFF; PortalAlias=portal; saplb_*=(DV1host_DV1_22)613943650
    With this above cookie I am able to login to DV2 j2ee http://<DV2fullhostname>.com:52500/nwa
    or abap http://<DV2fullhostname>.com:8025/sap/bc/gui/sap/its/webgui
    without any issue. In my browser I do not see MYSAPSSO2 cookie. Why is that?
    My login stack in j2ee is defined as below.
               1. Evaluate ticket
               2. Basic login modele
               3. Create ticket
    At the same time if I login to DV1 abap http://<DV1fullhostname>.com:8022/sap/bc/gui/sap/its/webgui  I can see the cookie MYSAPSSO2 in the browser and still able to login to DV2.
    Dont understand why my DV1 j2ee is not issuing MYSAPSSO2 cookie and issueing JSESSIONID ?
    Appreciate your reply
    SAPLearner

  • MYSAPSSO2 Cookie renaming?

    Hello.
    Out of several reasons we would like to rename the MYSAPSSO2 identifier of the MYSAPSSO2-Cookie. Is that possible or is the name of that cookie fixed?
    Best regards,
    Michael Kijek

    Hello Michael,
    I think it is impossible because you had to adapt every SAP component which is using the Cookie. But try to open an OSS Message in EP-PIN-SEC. What are your reasons to rename the Cookie?
    Regards
    Gregor

  • MYSAPSSO2 cookie - difference user versus portaluser

    Hi all,
    I recognized that the MYSAPSSO2 cookie contains 2 fields for a user id.
    1) the user
    2) the portalUser
    does anybody the difference / use cases for those fields
    any help is appreciated
    regards Karin

    Hi Paul,
    thanks for your answer.
    We use a abap mandant as user store for sap ep.
    if the user is stored in the abap mandant (which is almost for all users the case,
    except of some special users)
    portaluser and user field are used.
    if the user is just stored in the local user database of the portal (this is only for some admin users the case) then the user field is empty, only the portaluser field is used.
    If I would like to use the MYSAPSSO2 cookie to propagate the user to NON
    SAP systems. According to your answer, it would make sense, to use the user field (and not the portaluser field).
    Regards
    Karin

  • MYSAPSSO2 Cookie

    Can someone tell me why I log into our portal (where SSO works fine) and execute the javascript "document.cookie.indexOf("MYSAPSSO2") > -1", and it cannot find the MYSAPSSO2 cookie? If I look at my cookies (via Firefox add-on), I see the cookie fine. The cookie is also not displayed if I execute javascript:document.cookie.
    Thanks.

    It is simpler to do from server side as follows. Place below line
    inside Page_Load event of any portal component:
       Write(this.Request.Cookies.Get("MYSAPSSO2").Value);

  • Disable MYSAPSSO2 cookie

    Dear Experts,
    I need to disable the MYSAPSSO2 cookie creation during every user logon phase to the EP.
    The version is 7.0 sp22, stack java only.
    What are the configuration steps to do it?
    Thanks in advance for the collaboration.
    Regards,
    Massimiliano

    I am not sure what is your requirement here but you can disable the cookie creation by adjusting your login module stack.
    The module responsible for ticket creation is CreateTicketLoginModule which you can choose to remove from your list.
    You can either adjust individual login module stacks, or you can adjust any of the corresponding policy configuration templates (basic, form, client_cert, digest, ticket,evaluate_assertion_ticket). If you change any of these templates, then any applications that use these templates for their login modules are then also automatically configured accordingly.
    See SAP help for more info:
    http://help.sap.com/saphelp_nw70ehp1/helpdata/en/aa/bf503e1dac5b46e10000000a114084/frameset.htm
    Thanks,
    Shanti

  • Retrive Cookie Information in the Apache Access Log Files

    Hi All,
    Can anyone give me the solution or any link to follow the steps for retriving cookie information and user information in the Apache Access log files using httpd.conf file.
    we are using Oracle Appserver 10.1.2 Version and we have specfied below commands in httpd.conf file.
    LogFormat "%h %l %u %t \"%r\" %>s %b %v \"%{Referer}i\" \"%{User-Agent}i\" \"%{cookie}n\"" combined
    But it failed to retrive cookie and user informations
    Looking forward any one help.....
    Thanks
    Regards
    Sona

    Thanks for your reply
    Can u please check the below link for the cookie flag information
    http://download-west.oracle.com/docs/cd/B31017_01/web.1013/q20201/mod/mod_usertrack.html
    For your information i have logged in already.
    Our Sample O/p is given below
    151.146.191.186 - - [28/Dec/2006:10:13:05 +0530] "GET /Tab_files/lowerbox.gif HT
    TP/1.1" 200 150 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows)"
    We are using the below command format
    LogFormat "%h %l %u %t \"%r\" %>s %b %{cookie}n \"%{Referer}i\" \"%{User-Agent}i\"" combined
    But User and Cookie informations is not displaying.
    what steps should i follow.
    Looking for the favourable reply
    Thanks

  • If I want to retrieve more information about the cookies being stored, such as when the cookie was accessed/created/modified; how can I find this information?

    I would like to have more information about the cookies being stored on my computer via firefox- such as last date accessed/created/modified; how can I add these options to cookie storage?

    Maybe this extension will do that:
    *Cookies Manager+: https://addons.mozilla.org/firefox/addon/cookies-manager-plus/

  • Terminate Portal User Login with JSessionID or MYSAPSSO2 Cookie

    Dear All,
    I know using Visual Administrator , we can terminate the session.
    Is it possible for the administrator to terminate a logged in portal user with his/her  JsessionID or MYSAPSSO2 cookie value or User Id programmatically.?
    Is it possible for portal admin to forcibly exit (logoutl) an active user login  without logging onto visual administrator?
    Regards,
    Eben Joyson

    The only complete mitigation for session hijacking is to run the entire site as SSL. This is Oracle's recommendation if you need a complete mitigation solution. And example of an ATG site running in full SSL is Dennis Kirk (denniskirk.com).
    The problem with doing so is that SSL (a) takes more processing power in the system running the client's browser and (2) incurs latency that degrades the perceived page performance. This is particularly true for consumers running Internet Explorer, where speed-up measures like SPDY are either incomplete or don't work. And for a hard core eComemrce site, slower page performance means that you make less money.
    Most sites, including those that you mention, use a mixture of SSL and non-SSL pages to overcome this. They use non-SSL for those areas of the site where penetration does not have a material negative impact. Browsing catalog pages as an anonymous user, for example. If someone hijacks my session and I'm browsing the catalog anonymously, they're welcome to it. There's nothing private in my session. Even robots can access that content.
    Once I login or go to pages where private information is being exchanged, then you have to secure the session. That's where the protocol switcher servlet comes in. As you authenticate, you switch the user to SSL.
    I've tried a number of additional mitigation steps. Unfortunately I can't discuss them here at this time.
    And none of the servlets that you mention have any benefit with mitigating session hijacking.

  • $20 to anyone who can help: (I think) how to send the right cookie info

    Yes, we're so befuddled and stumped that we are willing to pay $25 by Paypal or any other method (check, money order) to the first person who provides us with a concrete solution that allows us to read this page through a Java application:
    http://s1.amazon.com/exec/varzea/subst/your-account/your-open-marketplace-items.html/104-3907538-7794313
    The problem (we think) seems relatively simple: how can we pass the correct cookie to a server? We want to search our merchant web pages on amazon.com (and perform other operations, but for the purposes of this problem, just assume we want to read the above web page). We wrote a variation of a webcrawler which works fine on most web pages. However, the Amazon web pages we want to crawl (i.e., http://s1.amazon.com/exec/varzea/subst/your-account/your-open-marketplace-items.html/104-3907538-7794313) require you to sign in first (otherwise you get redirected to http://s1.amazon.com/exec/varzea/subst/your-account/your-won-zshop-items.html/104-0793551-2976761). So we thought that this meant we had to figure out how to get our webcrawler to login first (we implemented the Java Almanac example for accessing password-protected URLs: http://javaalmanac.com/egs/java.net/Auth.html?l=rel). During the course of testing this out (the code seemed to work, though we still got redirected), we realized that the Amazon web page is not actually performing basic authentication (not asking for username/password), but instead seems (that is, seems to inexperienced us) to be looking for a cookie. We believe this because after we sign in to Amazon, we can access all our merchant web pages just fine without ever needing to log in, even if we turn off the browser (or computer). Also, if we try to access the web page after deleting all cookies, we again get redirected to the page requesting that we sign in.
    So we took a look at the Amazon cookie that was created after we signed in to Amazon (printed below), and then implemented the cookie-passing code from the Java Almanac (http://javaalmanac.com/egs/java.net/SendCookie.html). This seemed to have no effect:we still got redirected. We hunted around for other Cookie examples and found achase1's example from a previous forum question (http://forum.java.sun.com/thread.jsp?forum=54&thread=375956), which seemed to add a few HTTPUrlConnection.set's, but this also had no effect--our Java crawler still gets redirected to the page that requests that we sign in first.
    So we think that either we are somehow passing the wrong cookie information, or are just missing some critical HttpURLConnection setting or parameter.
    So, if you can tell us how to read the Amazon page that seems to require a cookie, and your explanation actually works (that is, we can read the page), we will send you $25 immediately--like so many others on the forum, we're frustrated and lost and need an answer that works!
    Here is the Amazon account information (naturally, this is a working dummy account on Amazon, not our actual account, in case you want to test your solution before posting it):
    username: [email protected]
    password: melville
    Here is the cookie that is generated:
    session-id
    104-3907538-7794313
    amazon.com/
    1536
    3382951936
    29569409
    1475475408
    29568127
    session-id-time
    1055491200
    amazon.com/
    1536
    3382951936
    29569409
    1475575408
    29568127
    ubid-main
    430-1017936-7312154
    amazon.com/
    1536
    2916341376
    31961269
    1482485408
    29568127
    x-main
    Z3yciaQAfpzN?CPFkzeRd8z1U2lWcoap
    amazon.com/
    1536
    2916341376
    31961269
    2005235408
    29568127
    Here is the extra-simplified version of our webcrawler, which simply tries to read (and print out) the web page:
    import java.net.*;
    import java.io.*;
    public class PasswordReader {
    public static void main(String[] args) throws Exception {
    // Try to access the page
    try {
         HttpURLConnection m_urlConn;
         URL url = new URL(args[0]);
    // Cookie passing code
         m_urlConn=(HttpURLConnection)url.openConnection();
         m_urlConn.setDoOutput(true);
         m_urlConn.setDoInput(true);
         m_urlConn.setUseCaches(false);
         m_urlConn.setRequestMethod("POST");
         // optrional
         m_urlConn.setRequestProperty("User-Agent","Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; H010818)");
         m_urlConn.setRequestProperty("Content-Type","application/x-www-form-urlencoded");
         m_urlConn.setRequestProperty("Cookie" , "session-id=104-3907538-7794313;session-id-time=1055491200;ubid-main=430-1017936-7312154;x-main=Z3yciaQAfpzN?CPFkzeRd8z1U2lWcoap");
         m_urlConn.connect();
    // end cookie code
         BufferedReader in = new BufferedReader(
                        new InputStreamReader(
                        url.openStream()));
         String inputLine;
    // Read and print out the web page
         while ((inputLine = in.readLine()) != null)
         System.out.println(inputLine);
         in.close();
    } catch (MalformedURLException e) {
    } catch (IOException e) {
    Thank so much to anyone who even tries to help us!! We've been poring through the Sun forums, almanacs, and sample code all week without much evident progress. You'd really be making us very, very happy.
    Thank you,
    Ogi Ogas
    [email protected]

    "{[VERSION="0" ; NAME="session_id" ; VALUE="@@33f84622845133891a68ec0dffe9f620" ; DOMAIN="my.asu.edu" ; PATH="/" ; SECURE="false" ; EXPIRES="null"]}"
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~The Cookie!
    <HTML><HEAD><!--set cookie-->
    <SCRIPT language='JavaScript'><!--
    document.cookie = "session_id=@@33f84622845133891a68ec0dffe9f620; path=/;";
    // Begin JavaScript
    if(!document.cookie) {
    var agt=navigator.userAgent.toLowerCase();
    var is_major = parseInt(navigator.appVersion);
    var is_minor = parseFloat(navigator.appVersion);
    // Note: Opera and WebTV spoof Navigator.
    var is_nav = ((agt.indexOf('mozilla')!=-1) && (agt.indexOf('spoofer')==-1)
    && (agt.indexOf('compatible') == -1) && (agt.indexOf('opera')==-1)
    && (agt.indexOf('webtv')==-1));
    var is_nav2 = (is_nav && (is_major == 2));
    var is_nav3 = (is_nav && (is_major == 3));
    var is_nav4 = (is_nav && (is_major == 4));
    var is_nav4up = (is_nav && (is_major >= 4));
    var is_navonly = (is_nav && ((agt.indexOf(";nav") != -1) ||
    (agt.indexOf("; nav") != -1)) );
    var is_nav5 = (is_nav && (is_major == 5));
    var is_nav5up = (is_nav && (is_major >= 5));
    var is_ie = (agt.indexOf("msie") != -1);
    var is_ie3 = (is_ie && (is_major < 4));
    var is_ie4 = (is_ie && (is_major == 4) && (agt.indexOf("msie 5.0")==-1) );
    var is_ie4up = (is_ie && (is_major >= 4));
    var is_ie5 = (is_ie && (is_major == 4) && (agt.indexOf("msie 5.0")!=-1) );
    var is_ie5up = (is_ie && !is_ie3 && !is_ie4);
    // KNOWN BUG: On AOL4, returns false if IE3 is embedded browser
    // or if this is the first browser window opened. Thus the
    // variables is_aol, is_aol3, and is_aol4 aren't 100% reliable.
    var is_aol = (agt.indexOf("aol") != -1);
    var is_aol3 = (is_aol && is_ie3);
    var is_aol4 = (is_aol && is_ie4);
    var is_opera = (agt.indexOf("opera") != -1);
    var is_webtv = (agt.indexOf("webtv") != -1);
    var intro_dir = "This installation of Blackboard 5 requires the acceptance of a cookie by your browser software. ";
    intro_dir += "The cookie is used to ensure that you <I>and only you</I> are able to access information in the courses, assessments, gradebooks and other features which are appropriate for you. <P>";
    intro_dir += "The system has been unable to place the cookie. This may be because cookies are disabled in your browser.<P> To enable cookies in your browser:<ol>";
    var nn4dir = "<LI>Select <I>Preferences</I> from your browser's Edit Menu. <LI>Select <I>Advanced</I> from the list in the left-hand pane of the dialog box. ";
    nn4dir += "<LI>Under the <I>Cookies</I> box, select either of the first two options ('Accept all cookies' or 'Accept only cookies that get sent back to ";
    nn4dir += "the originating server')<LI>Click 'Ok' to close the dialog box. ";
    var ie5dir = "<LI>Select <I>Internet Options</I> from your browser's Tools Menu <LI>Select the <I>Security</I> Tab, and click on the 'Custom Level' button. ";
    ie5dir += "<LI>Scroll down to the 'Cookies' Section, and select either of the last two options under 'Allow Per-Session Cookies (not stored)' - either 'Enable' or 'Prompt'. ";
    ie5dir += "<LI>Click 'Ok' to Close the Security Settings dialog box. ";
    ie5dir += "<P><B>NOTE</B> Depending on your institution's set-up of Blackboard 5, you may need to repeat steps 3 & 4 for more than one 'Security Zone'. ";
    ie5dir += "<BR>For example, if you are connecting from a computer inside the same firewall or network as the Blackboard 5 machine, you would select the 'Local Intranet Zone'. ";
    ie5dir += "<BR>If you are making a connection across the internet from another location, you would select the 'Internet Zone'. <BR>In some cases, you may need to do both.<P>";
    ie5dir += "<LI>Click 'Apply' and 'Ok' to close the Internet Options dialog box.";
    var ie4dir = "<LI>Select <I>Internet Options</I> from your browser's Tools Menu <LI>Select the <I>Advanced</I> Tab. ";
    ie4dir += "<LI>Scroll down to the 'Cookies' Section under 'Security', and select either the first or last option - either 'Prompt before Accepting Cookies' or 'Always Accept Cookies'. ";
    ie4dir += "<LI>Click 'Apply' and 'Ok' to close the Internet Options dialog box.";
    var browser_dir = "<LI>Please follow your browser's Help instructions for enabling Session (non-stored) cookies that are sent back to the originating server.";
    if (is_nav) { browser_dir = nn4dir; }
    if (is_ie5up) { browser_dir = ie5dir; }
    if (is_ie4) { browser_dir = ie4dir; }
    browser_dir += "<LI>Click 'Ok' on this page to return to Blackboard 5.";
    document.write("<table border='0' width='100%' cellpadding='0' cellspacing='0'><tr><td align='left' width='40'> </td>");
    document.write("<td align='left' width='100%'><b><font face='Arial, Helvetica, sans-serif' size='4'>Browser Cookies Disabled</font></b><hr size=5 noshade></td></tr></table>");
    document.write("<table border='0' cellpadding='5' cellspacing='0' width='100%'><tr><td width='20' valign='top'> </td><td width='100%' valign='top'>");
    document.write("<font face='Arial, Helvetica, sans-serif' size='2'><b>Browser Cookies Disabled</b></font><br>");
    document.write("<font size='2' face='Arial, Helvetica, sans-serif'>"+intro_dir);
    document.write(browser_dir);
    document.write("</font><br></td></tr><tr><td colspan='6' align='center'><form><input type=button value='Ok' onclick='javascript:history.go(-1)'></td></tr></table></form>");
    } else {
    var href = document.location.href;
    href = href + "?bbatt=Y";
    document.location.href = href;
    //END JavaScript
    //--></SCRIPT>
    </HEAD><BODY BGCOLOR='FFFFFF'>
    </BODY><HTML>

  • I had to boot my iMAC and now the FF 'cookies' folder is always always empty. How can I undo this? TNX

    My iMAC had the 'twirling circle' and I had to restart my Mac.
    After that, when I went to FireFox, (Preference -> show cookies), the show cookies (with the delete cookies option) comes up - but had no cookies listed.
    I KNOW hotmail won't work with out them and yet even in hotmail the cookies 'page' is blank.
    I did another 'restart' but the cookies 'page' stays blank.
    My concern is malware or virus.
    Thanks for your help.

    It is possible that the <i>cookies.sqlite</i> file that stores the cookies is corrupted.
    Rename (or delete) <b>cookies.sqlite</b> (cookies.sqlite.old) and delete other present cookies files like <b>cookies.sqlite-journal</b> in the Firefox profile folder in case the file cookies.sqlite got corrupted.
    *http://kb.mozillazine.org/Cookies
    *https://support.mozilla.org/kb/Deleting+cookies
    You can use this button to go to the Firefox profile folder:
    *Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder)

Maybe you are looking for

  • Two ADE users on one computer

    I have a laptop, a kobo and ADE and everything works fine.  I have admin rights on the laptop, and the ADE is authorized for me and computer, and I use it with my library account. My wife is also a user on the same laptop, and has her own login name

  • LOGS PROVIDER HAS STOPPED ,WHAT DO I DO TO FIX PROBLEM?

    GALAXY S4  -"LOGS PROVIDER HAS STOPPED .HOW DO I FIX PROBLEM?

  • Zen Stone P

    I am having trouble with my . I download music to it, it shows in Window Media and Media Lite but it won't play after I disconnect it. Can anyone help me figure out this problem It is very frustrating. Thanks.

  • Date formatting problems

    Hi, i tried to format a date, this is the code: Date d=new Date(2002, 01, 12);         DateFormat df=new SimpleDateFormat( "dd/MM/yy" );         System.out.println(df.format(d));but my output was: "12/02/02" and not "12/01/02" as expected can anyone

  • Multi valued property metadata modifying using Portal Drive

    Hi All, We are analyzing Portal Drive tool for KM. We have multivalued properties for files say geo:USA, APAC etc... Once we give value to geo property by being online in portal drive it is not reflectiong in Portal. We are not able to view geo value