Question: Disable Cookie Httponly in v7.0.9?

I've been asked by one of the application teams I support if there is any way to set httponly to false in iPlanet 7.0.9, something along the lines of this Weblogic equivalent (found elsewhere in the forums):
  <session-descriptor>
    <cookie-http-only>false</cookie-http-only>
  </session-descriptor
I've scoured the v7.0.9 PDFs, searched this forum, and Googled around a bit, but so far drawn a blank.
Customer says: "Server is sending JSESSIONID as HttpOnly, and this is not what we require."
Does anyone here have any advice? (Even if it's just to confirm that this is not possible!)
Thanks,
--Neil.

Similar Messages

I have tried all the steps you listed in your FAQ sextion on enabling and disabling cookies but I am still getting the error message "cookies not enabled" on certain websites. Now what do I do?

I have tried every step you have listed in your FAQ section for enabling and disabling cookies but I am still getting error messages "cookies not enabled" on certain websites? Why is this and what do I need to do to fix this?

I have STILL NOT received an answer to my question as of this date. I am VERY disappointed in Firefox support.

Business Catalyst Help | Allow site visitors to disable cookies

This question was posted in response to the following article: http://helpx.adobe.com/business-catalyst/partner/allow-site-visistors-disable-cookies.html

Hi Frank,
thanks for the question. What do you mean by "can prove"? BC allows you to enable the "Cookie Module", hence providing the users the choice to disable cookies. I've seen that you commented to this post as well: http://helpx.adobe.com/business-catalyst/partner/allow-site-visistors-disable-cookies.html.
What exactly do you mean by "proof"? From our research the current module should suffice. However, if there are other pieces of info that we might have missed, please share them with us.
Thanks,
Dragos M. Product Manager Business Catalyst

Google calendar is getting the error "Firefox has detected that the server is redirecting the request for this address in a way that will never complete." I have tried disabling cookies, clearing cookies and cache but that didn't work.

Google calendar is getting the error "Firefox has detected that the server is redirecting the request for this address in a way that will never complete." I have tried disabling cookies, clearing cookies and cache but that didn't work.

Clear the cache and the cookies from sites that cause problems.
* "Clear the Cache": Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
* "Remove the Cookies" from sites causing problems: Tools > Options > Privacy > Cookies: "Show Cookies"
* http://kb.mozillazine.org/The_page_is_not_redirecting_properly

Disabling cookies is not 100% working

Hi!
I'm trying to force clients using urlrewriting from the server, so in the
session descriptor, I set the 'URLRewriting Enabled' to true and 'Cookies
Enabled' to false. Then I test it by setting cookies enabled in browser.
Seems this way can't guarantee using urlrewriting instead of cookies, cos
sometimes sessions do get from cookies except that I disable cookies from
browser. Is it possible to force using urlrewriting from the server? I met
this problem with Weblogic 6.1, and it seems OK with 5.1.
Thanks a lot.
Hattie

How are you blocking Google from settings cookies?
Try opening the Permissions manager by typing or pasting '''about:permissions''' in the address bar and pressing Enter. Then type ''goog'' in the search box above the site list. What do you have set for google.com? See the attached screen shot for an example.

Browser is not allowing sign in to excite web page. it says my settings are configured to disable cookies and/or javascript. please help

i just got firefox 4.0, and i tried to simply sign in to myexcite.com, but instead the message "the browser you're using is not allowing you to sign in to Excite. Right now , your browser's settings are configured to disable cookies and/or javascript..."
Please Help. I am new to Firefox 4.0

First, create a specific [[Managing profiles|profile]] for Firefox 4.0b8 to prevent interferences between current (Firefox 3.6) and beta (Firefox 4.0b8) versions.
Then, see [[Cannot log in to websites]].

Unable to disable cookies in FF 3.6.10 in some web sites

Both cookies boxes are unchecked in FF 3.6.8.
Enter some web sites which over-ride my [no cookies allowed] settings and write unlimited cookies to my hard disk.
What is procedure to block and avoid these unwanted cookies ?
In the past my system has received viruses, worms, trojan horses through spam EMail cookies.
As a result, it is necessary for me to avoid un-necessary cookies, and select only those limited cookies that have come from safe sources.
Do not have this security difficulty with FF 3.0.10.
System is using WIN XP, Trend AntiVirus, ZoneAlarm firewall.
Thank you for your help.

To see all the History and Cookie options, select: Tools > Options > Privacy > History: Firefox will: "Use custom settings for history"<br />
See [[Options window - Privacy panel]]
See:
* http://kb.mozillazine.org/Cookies
* [[Cookies]]
* [[Enabling and disabling cookies]]

Disabled Cookies on Browser, BUT How do you tell?

          I know that you can't save a permanent cookie to the user's computer when cookies
          are disabled in a browser. You can set a temporary cookie that will last for the
          session. An example is Weglobic's JSESSIONID cookie.
          First. I was hoping that when I tried to set a permanent cookie, that at least the
          cookie would last for the session so that it gets sent back to Weblogic like JSESSIONID.
          That doesn't seem to be the case. Doh! Any comments?
          Second. Is there a way I can tell if a browser has disabled cookies so that I can
          set my cookie as a temporary cookie instead of a permanent cookie so that it gets
          passed back to Weblogic in subsequent request? I looked at the header information
          and I didnt' see anything.
          BTW. I'm developing on Windows 2000 and deploy to Unix. Using iPlanet 4.1 as the
          WebServer and Weblogic 6.1 SP2.
          Thanks!!! Later...
          - Wayne


          Thanks for the Info guys!.
          I got a work around. I have client side JavaScript that checks to see if Permanent
          Cookies are disabled. I then pass the flag to the destination URL. If cookies are
          disabled, then I just set it to a temporary cookie and it's find.
          Got some tips from groups.googles.com. This side use to be the Deja Newsgroups.
          Later...
          - Wayne
          "Vyas" <[email protected]> wrote:
          >
          >If you use encodeurl to encode all your links (in the HTML you throw back
          >to browser)
          >then weblogic is supposed to detect if a browser is able to accept cookies
          >or not
          >(if not then uses URLencoding to put the cookies in the URL).
          >By default URLencoding is enabled in weblogic if cookies are turned off
          >on the browser
          >side.
          >
          >As usual there are a few caveats though
          >1. WL documentation states the because for the first communication, since
          >weblogic
          >does not know that a cookie is being accepted or not , it always encodes
          >the uRL.
          >I don't how this is supposed to be really true or not, because if true the
          >first
          >URL should always have JSESSIONID, I did not find it to be the case.
          >2. Even though cookies are turned off on the browser, I did not see URL
          >encoding
          >happening all the time.
          > There is an explicit option in weblogic to turn off cookies completely
          >(irrespective
          >of what the browser is doing).
          >
          >The bottomline is that your app has to code for urlencoding.
          >
          >Vyas
          >
          >"Wayne Lau" <[email protected]> wrote:
          >>
          >>I know that you can't save a permanent cookie to the user's computer when
          >>cookies
          >>are disabled in a browser. You can set a temporary cookie that will last
          >>for the
          >>session. An example is Weglobic's JSESSIONID cookie.
          >>
          >>First. I was hoping that when I tried to set a permanent cookie, that at
          >>least the
          >>cookie would last for the session so that it gets sent back to Weblogic
          >>like JSESSIONID.
          >> That doesn't seem to be the case. Doh! Any comments?
          >>
          >>Second. Is there a way I can tell if a browser has disabled cookies so
          >>that I can
          >>set my cookie as a temporary cookie instead of a permanent cookie so that
          >>it gets
          >>passed back to Weblogic in subsequent request? I looked at the header
          >information
          >>and I didnt' see anything.
          >>
          >>BTW. I'm developing on Windows 2000 and deploy to Unix. Using iPlanet
          >>4.1 as the
          >>WebServer and Weblogic 6.1 SP2.
          >>
          >>
          >>Thanks!!! Later...
          >>
          >>
          >>- Wayne
          >>
          >

Cannot disable cookies

iMac 24" OS Lion/ FF 5.0.1 & 6. cannot disable cookies even with permanent private mode ,cookies unchecked & third party unchecked when I open FF there are about 50 cookies I remove them they come right back with out going any where on the web !!!!!!! remove them again ,close FF, open FF they are all back !!! and when I surf the WEB I get MORE !!! ever since I started using Lion !! I now have tons of spam !! it was a Good Install no prob's I prepped for Lion Before Installed. No Issues at all !! Safari is the same way cookies everywhere !!!

See http://kb.mozillazine.org/Preferences_not_saved and [[Preferences are not saved]]
Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]

If user disable cookie how to set and use session with URL Rewritting

if user disable cookie how to set and use session with URL Rewritting by append session ID in url

If cookies are disabled, then app server will automatically try to use URL rewriting for session control. Programmer's responsibility is to encode any links or redirects using
response.encodeURL("/yourPage.jsp")
and
response.encodeRedirectURL("/yourPage.jsp")
See API for details
http://java.sun.com/j2ee/sdk_1.3/techdocs/api/javax/servlet/http/HttpServletResponse.html#encodeURL(java.lang.String))

HT5312 how do you disable cookies

How do you disable cookies in Safari?

On Safari's Preferences (command-comma) on the Privacy tab you can set 'Block cookies' to 'Always'. Doing so may affect how some sites behave e.g. you may not be able to stay logged in to websites if you set it to 'always', 'block from third parties and advertisers' may be better.

Disable Cookies in HTTP Destination

Hi,
Is there a possibility to disable cookies for the visual admin? Because we want to disable this for the HTTP destination service in the visual admin.
br
Steven

Hi,
that is a strange error message.
I don't know how siteminder works but I guess your are using siteminder as SAML identity provider and configured the SAML Login Module in SAP to achieve SSO correct?
For this purpose you need to define a HTTP Destination which is than used as SAML Receiver.
What I do not get is the Cookie Problem.
I don't know exactly how your process flow is but it should be something like
- Your Client authenticates to your identity provider (let's say siteminder)
- Any time later you try to access any resource that is configured to support SAML using SAML Assertions (e.g. SAP J2EE)
- Your identitiy provider will generate an SAML Artifact an redirect you to the destination application (in your case some J2EE Application on SAP that is configured to validate your SAML Artifact (using the SAML Login Module)
=> This initial client request to your identity provider can contain cookies and you cannot avoid this since they are carried and sent by the client (Browser) => I hope this does not cause any problems because it really shouldn't
Nevertheless:
Your client request containing the SAML Articat (something like http://<j2eehost>:<j2eeport>/YourApp?TARGET=<YourApp>&SAMLArt=<Artifcat created by IDP>
reaches the engine:
Now the Engine creates an HTTP Post Request to your IDP that contains the SAML Assertion (SAML Assertion Request). This Assertion request also contains the Artifact and it does not contain any cookies!!! Your IDP now validates the Requests and sends an SAML Assertion Response to your engine (The SAML Login Module extracts the User from the Response (This one is carried in the NameIdentifier of the SOAP Message) and authenticates the user if it exists on the J2EE Engine
You finally receive the response of your Destination Application.
I don't really understand the cookie issue:
Maybe it really helps if you allow unsecure connections for SAML in SAP J2EE (You can enable this under Visual Admin > Configuration Adapter > saml > Settings > AllowUnsecureConnections > true)
so you can use http instead of https. Now use Wireshark or tcpdump or something similar to create a dump of your traffic and analyze it to check where the problem is or maybe send it to me so I can have a look at it.
Hope this helps
Let me know if you need further assistance on this (Reward points for helpful answers are always appreciated )
Cheers

Check for disabled cookies

I need to be able to check if cookies are enabled or disabled on the server side using JAVA. On the client side, it is easy to check for disabled cookies, but we need that functionality on the server side.

It is a though one and not very easily accomplished.
Conceptual idea on how to do it:
Server sends page to user and gives it an cookie.
The page contains generated unique URL's.
As soon as the user clicks on a link. Assemble information from the user by checking incoming cookie and the URL. If the cookie does not exist or does not conform to the one sent for the unique URL, user has them disabled or fooling them via proxy-server of some sort.
Voila - now you know if they got cookies enabled or not!
Don't think there is another way. Some web servers do this by automatic to keep track of sessions and some don't. Check manual for your server.
Pros:
Seamless transition for cookie based servers
Cons:
Strange URL's for the user
Might need URL rewriting for all code
User must traverse one way or another through 2 pages
Generated pages has to be used. Static HTML is a bit hard for this purpose.
Regards,
Peter Norell

Weblogic wants me to disable cookies to run struts?!

          Hi,
          I woudl like to deploy a web application that use struts 1.1
          in Weblogic 8.1 sp2 (windows)
          The probelm is when I view a page that has struts code
          it works fine for first time, but when I try to browse the same
          or any other struts page again, it gives me this error:
          java.lang.ClassCastException
          at org.apache.struts.util.RequestUtils.createActionForm(RequestUtils.java:777)
          Furthermore, I notced that when I disable cookies,
          (<session-param>
          <param-name>CookiesEnabled</param-name>
          <param-value>false</param-value>
          </session-param>
          strust work fine, it seems it like to use URLRewriting instead, But if i disable
          cookies, I have other JSP pages which uses normal "<jsp:useBean ..."
          and now these pages are suffering becouse all of there session data are lost.
          Also, I have been running this web application on weblogic 6.1 are it was working
          fine.
          any help please?
          thanks in advance
          Ahmed


"Ahmed" <[email protected]> wrote in message news:[email protected]...
          > you are right, I did some mistake in class decleration
          > which I think weblogic 6.1 was forgative enough and allow it
          > but weblogic 8.1 didn't.
          Glad to help.
          Regards,
          Slava Imeshev
          >
          > AHmed
          >
          >
          >
          >
          > "Ahmed" <[email protected]> wrote:
          > >
          > >Slava,
          > >
          > >I didn't specify a cookie path, also this calls works for first
          > >time, but it fails in the second time,
          > >Futhermore, the error happned before it enter the perform action
          > >method in my struts framework, so i didn't fail in the code I wrote.
          > >(RequestUtils.java is - i think - is one of libraries that comes with
          > >struts)
          > >also, this web application has been working in weblogic 6.1
          > >
          > >I found a link in struts website which is mentioening
          > >this class cast problem, but it refering to weblogic 5.1 not 8.1
          > >http://www.mail-archive.com/[email protected]/msg00284.html
          > >
          > >Ahmed
          > >
          > >
          > >
          > >"Slava Imeshev" <[email protected]> wrote:
          > >>Ahmed,
          > >>
          > >>
          > >>I don't think it has anything to do with weblogic. It's likely you have
          > >>code path that
          > >>handles cookies and this path fails at RequestUtils.java:777
          > >>
          > >>Print a class name at line before 777 to see what is actually passed.
          > >>
          > >>Regards,
          > >>
          > >>Slava Imeshev
          > >>
          > >>"Ahmed" <[email protected]> wrote in message news:[email protected]...
          > >>>
          > >>> Hi,
          > >>>
          > >>> I woudl like to deploy a web application that use struts 1.1
          > >>> in Weblogic 8.1 sp2 (windows)
          > >>> The probelm is when I view a page that has struts code
          > >>> it works fine for first time, but when I try to browse the same
          > >>> or any other struts page again, it gives me this error:
          > >>>
          > >>> java.lang.ClassCastException
          > >>> at org.apache.struts.util.RequestUtils.createActionForm(RequestUtils.java:777)
          > >>>
          > >>> Furthermore, I notced that when I disable cookies,
          > >>> (<session-param>
          > >>> <param-name>CookiesEnabled</param-name>
          > >>> <param-value>false</param-value>
          > >>> </session-param>
          > >>>
          > >>> strust work fine, it seems it like to use URLRewriting instead, But
          > >>if i disable
          > >>> cookies, I have other JSP pages which uses normal "<jsp:useBean ..."
          > >>> and now these pages are suffering becouse all of there session data
          > >>are lost.
          > >>> Also, I have been running this web application on weblogic 6.1 are
          > >>it was working
          > >>>
          > >>> fine.
          > >>>
          > >>> any help please?
          > >>>
          > >>> thanks in advance
          > >>>
          > >>> Ahmed
          > >>>
          > >>>
          > >>
          > >>
          > >
          >

Can't sign in to adsense, no enable/disable cookies option in tools

I can't sign in to adsense, and one troubleshooting suggestion was to make sure cookies are enabled. Went too tools-options-privacy and the cookie section has no option to enable or disable cookies. Cookies seem to be enabled, but how do I know? I could sign in to adsense fine before this last update.

Seems to be an issue with AAM. You might try uninstalling AAM and re-installing the most updated version. Lets try the below suggestions:
> Download and install the Adobe Creative Suite Cleaner Tool: http://www.adobe.com/support/contact/cscleanertool.html
> Extract and run it.
> Select "e" for English.
> Hit "Y" for Yes if asked.
> Select Option 3 for Creative Cloud.
> Then select Option 1 for Creative Cloud Installer.
> Download and Install the latest version of Adobe Application Manager from the below link :
Windows: http://www.adobe.com/support/downloads/detail.jsp?ftpID=4773
Mac: http://www.adobe.com/support/downloads/detail.jsp?ftpID=4774
> Try to install the update now and check.
>If error still persists, Rename the OOBE folder to OOBE OLD from
Mac: MAC HD/Library/Application Support/Adobe
Win: C:\Program Files (x86)\Common Files\Adobe\
> Install AAM again and try to launch.

Question: Disable Cookie Httponly in v7.0.9?

Similar Messages

Maybe you are looking for