This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Pass Session cookie to backend?

With IBM Webseal, passing the session cookie used between the browser and web app firewall can be optionally forwarded to the backend http server with parameter "include session cookie".

Does UTM offers this function or does a hidden option within the configuration file exists to enable it?

The cookie name used by UTM is "BACKENDHOST_cookie" with "backendhost" replaced by the hostname of the backend http server.

We need that cookie to forward it to our external client launched via Java Webstart to be able to connect via http through the UTM to the backend.

This thread was automatically locked due to age.

Parents

0 isenberg_01 over 10 years ago

Hi Barry,

neither a or b. The cookie name is arbitrary for our system, I just need the name of it and the cookie must be passed to the backend.

Apparently the hidden parameter I was searching for is "SessionCookieRemove":

vi /var/chroot-reverseproxy/usr/apache/conf/reverseproxy.conf
change "SessionCookieRemove On" to "SessionCookieRemove Off" and save file
/var/mdw/scripts/reverseproxy graceful

This modification must be repeated after every change of the Web Server Security settings via the Web interface.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 isenberg_01 over 10 years ago

Hi Barry,

neither a or b. The cookie name is arbitrary for our system, I just need the name of it and the cookie must be passed to the backend.

Apparently the hidden parameter I was searching for is "SessionCookieRemove":

vi /var/chroot-reverseproxy/usr/apache/conf/reverseproxy.conf
change "SessionCookieRemove On" to "SessionCookieRemove Off" and save file
/var/mdw/scripts/reverseproxy graceful

This modification must be repeated after every change of the Web Server Security settings via the Web interface.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data