ACE - Issue with sticky cookies - Changing subdomain ans SSO

[Hallur Krossa]

Hi

I have an issue with sticky-cookie on the ACE and Singel SignOn.

I want the ACE to stay sticky based on the ACE cookie, when i change from eg. intra.test.org to webmail.test.org.

I want the flow to be as follows:

#1  http://intra.test.org  - I am prompted for login.

#2 ACE sets cookie "SRV1.cookie" and setup connection to webserver SRV1

#3 http://webmail.test.org containing cookie from #2.

#4 ACE using cookie from 2. - Due to cookie set in #2 the connection is setup for webserver SRV1

I am experiencing that the ACE sets a new cookie "SRV2.cookie", and I am load-balanced to SRV2, and is prompted for login again.

Have can I get the ACE to accept "cross-site cookie"?

/Hallur

[shbadve · Accepted solution]

Hallur,

Do you have same servers serving http://intra.test.org and http://webmail.test.org sites?

If they are then you should be able to use the SAME sticky serverfarm under both L7 policies. That is as long as the "browser" does maintain the cookie between the two sites / requests.

Looks like right now you have two different "sticky serverfarms" serving these sites.

Hope that helps.

Thank you.

- Shubha