Protocol for failover cookies

Failover authentication cookies are disabled by default. To enable failover cookies, edit the WebSEAL configuration file.

In the [failover] stanza, specify a value that instructs WebSEAL how to handle requests with failover cookies. The following table shows the valid values.

Table 1. Supported protocols for failover cookies
Stanza EntryDescription
failover-auth = http

Failover cookies enabled over HTTP protocol.

failover-auth = https

Failover cookies enabled over HTTPS (SSL) protocol.

failover-auth = both

Failover cookies enabled over both HTTP and HTTPS (SSL) protocol.

Note: Enabling failover authentication to either HTTP or HTTPS causes cookies to be written to clients connecting over all protocols. The value specified in the failover-auth stanza entry dictates the protocol over which cookies will be accepted for authentication during a failover authentication event.