We use Weblogic 7.0.6 on a JRockit 7.0SP5 (1.3.1) JVM and occasionally
run into a problem with HttpSession objects getting 'lost' or not
initialized properly, which causes users to 'time out' right after
login. So the validation data from the login (set in the HttpSession
object) is not found, and the session shows that isNew=true. This
happens occasionally with certain users, only with IE. Firefox users
do have this problem at all.
We know there is a myriad of privacy settings on the IE browser, but
is there any trick on the server side to make sure the standard
session cookies work at all times? For instance does setting the
JSESSIONID in the permanent cookie help?
We have already installed a P3P policy file on our site (including the
special header served by IIS) and that has helped a little bit.
Regards,
Joop Kaashoek