iChain rewrites cookie and causes web server error when authenticating.

  • 3004426
  • 05-Sep-2006
  • 26-Apr-2012

Environment


Novell iChain 2.3 Support Pack 4

Situation

Customer is accelerating an application which stores a cookie.
Unfortunately this cookie is being rewritten by iChain and contains errors. iChain changes the
cookie format by adding a space and changing a comma "," to a semicolon ";"


The following can be seen in the LAN trace:
- iChain is requesting the login.aspx page.

- The origin server replies and sets a cookie which is the following:
Set-Cookie: ecm=user_id=14&site_id=/CMS400/,0123456789&username=John Doe&new_site=/CMS400/&unique_id=1092946048&site_preview=0&langvalue=;path=/\r\n

- iChain makes a new GET request for the login.aspx page and sends the cookie but the format of the cookie has changed.
Cookie: ASP.NET_SessionId=o3rd4l55gb03op55p2jcrg45;ecm=user_id=14&site_id=/CMS400/; 0123456789&username=John Doe&new_site=/CMS400/&unique_id=1092946048&site_preview=0&langvalue=\r\n

- Origin server responds with a "500 Internal Server Error"


The difference between both cookies is the following:
site_id=/CMS400/,0123456789&username=John Doe
site_id=/CMS400/; 0123456789&username=John Doe

The "," is replaced by a "; ".

Resolution

Reported to Engineering

Status

Reported to Engineering