[ grinder-Bugs-3008580 ] Cookie handling problems

Bugs item #3008580, was opened at 2010-05-28 14:58
Message generated for change (Comment added) made by sf-robot
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=118598&aid=3008580&group_id=18598

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Closed
Resolution: Wont Fix
Priority: 5
Private: No
Submitted By: Ilsa ()
Assigned to: Philip Aston (philipa)
Summary: Cookie handling problems

Initial Comment:
I've discovered a problem while trying to test a drupal-based site.
Drupal prepends a dot to the beginning of the domain portion of it's
cookies, eg:
SESSb43239df312c947f5c2c2d28e9f848e1=58a82d7f5f95ce745dae21e9513007b9;
expires=Sun, 20-Jun-2010 01:28:40 GMT; path=/; domain=.DOMAIN.TLD

When grinder recieves the cookie, I get the following error:
Bad Set-Cookie header:
SESSb43239df312c947f5c2c2d28e9f848e1=58a82d7f5f95ce745dae21e9513007b9;
expires=Sun, 20-Jun-2010 01:28:40 GMT; path=/; domain=.DOMAIN.TLD;
Current domain DOMAIN.TLD does not match given parsed .DOMAIN.TLD

The session cookie is accepted just fine by all major browsers. According
to rfc2109 and rfc 2965, the domain parameter of a cookie is supposed to
have a beginning dot, and the user agent is supposed to add one if
missing.

I was able to bypass the issue by hacking drupal to remove the leading dot, but when drupal tries to end the session, I get the following from grinder:
Bad Set-Cookie header: SESSb43239df312c947f5c2c2d28e9f848e1=deleted; expires=Thu, 28-May-2009 14:46:58 GMT; path=/; httponly
No '=' found for token starting at position 93
        at HTTPClient.Cookie.parse(Cookie.java:263)



----------------------------------------------------------------------

>Comment By: SourceForge Robot (sf-robot)
Date: 2011-07-04 17:20

Message:
This Tracker item was closed automatically by the system. It was
previously set to a Pending status, and the original submitter
did not respond within 30 days (the time period specified by
the administrator of this Tracker).

----------------------------------------------------------------------

Comment By: Philip Aston (philipa)
Date: 2011-06-04 16:49

Message:
Sounds like a Drupal configuration issue to me.

Close pending as WNF.

----------------------------------------------------------------------

Comment By: Nik (njordanov)
Date: 2011-05-31 18:12

Message:
Hi,

We had the exact same issue and managed to resolve it by updating the
Drupal config file:

1) Locate settings.php
2) Inside, persist the correct cookie domain with the following setting:
$cookie_domain = '<domain name without '.' in front>'
(e.g. $cookie_domain = 'DOMAIN.TLD')

Regards,
Nikolay

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=118598&aid=3008580&group_id=18598

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2