coldfusioncoldfusion-11

ColdFusion: new cfid with every refresh

I updated a test server from ColdFusion 10 to ColdFusion 11 30 days Enterprise trail edition with update 7.

However, every time I hit refresh in my browsers, I get a new cfid. As a result, a valid session is not found so the login page doesn't work.

I checked the session in coldfusion admin page and my cookie in my browsers, they are both created correctly.

This is what I have in my application.cfm 

<CFAPPLICATION NAME="TESTWEB"
  CLIENTMANAGEMENT="Yes"
  SETCLIENTCOOKIES="Yes"
  SESSIONMANAGEMENT="Yes"
  SESSIONTIMEOUT = "#CreateTimeSpan(7,0,0,0)#"
  SETDOMAINCOOKIES = "No">

However, when I open the page from the host computer, then the cfid doesn't get change everytime I hit refresh, so everything works.

Any idea what can cause my problem?

EDIT:

  1. During login, I had code that set cfid/cftoken to cookie, but since I changed to SETCLIENTCOOKIES="Yes", I removed those code. The only other place would be in logout.
  2. I am not using jsessionids, only coldFusion session id.
  3. Timeout for all session variables is 7 days.
Solution

  • I have switched to using JEE session by enabling it in the ColdFusion admin. My session is now working.