funky jsp to asp problem w/ jrun...real funky!

[Geoff Tate]

I have come across a funky problem. I have jsp app that is running on JRun. One jsp does a redirect to an ASP which then builds a cookie and then redirects back to the calling jsp. the jsp checks for the presence of that cookie.If it is there it skips the redirect to the ASP and continues. The thing is that different users(browser sessions) are getting the same session back allowing them to see each others data!!! I have tried redirecting to the asp before the session is created and after and the results are the same. I haven't exactly nailed it down...any ideas

[Madhav Lakkapragada]

Is this cookie of yours getting generated (instantiated) in the
application scope ?
Taking a wild guess.....
- satya

[Geoff Tate]

the cookie is response level - in the ASP the line is:
Response.Cookies("acct") = someField.
it addes the cookie then redirects back to the jsp page that called it:
Response.Redirect(referer)

[Mike Curwen]

The only thing I can think of is that the ASP container (IIS w/ asp.dll, right? ) sees your JRun instance as the referer.

But how would that be possible, because you are using response.sendRedirect(URLString) in your jsp, which means *the browser* is sent an HTTP redirect command. So your asp should see it as coming from that client's browser, and not JRun.