Microsoft KB Archive/937185

= You can disable the HTTPOnly flag in WPLB cookies that ISA Server 2006 uses =

Article ID: 937185

Article Last Modified on 8/29/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2006 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition

-



INTRODUCTION
If you publish a Web farm in Microsoft Internet Security and Acceleration (ISA) Server 2006, ISA Server uses Web Publishing Load Balancing (WPLB) cookies to implement load balancing. By default, the HTTPOnly flag in WPLB cookies is enabled. This behavior may cause some compatibility issues.

You can disable the HTTPOnly flag in WPLB cookies after you apply the hotfix that is described in the KB937186 Microsoft Knowledge Base article.



MORE INFORMATION
To disable the HTTPOnly flag in WPLB cookies, follow these steps:  Apply the hotfix that is described in the following Microsoft Knowledge Base article:

937186 Description of the ISA Server 2006 hotfix package that is dated May 14, 2007

 Start Notepad.  Copy the following script into a Notepad file. Const SE_VPS_GUID = &quot;{143F5698-103B-12D4-FF34-1F34767DEabc}&quot; Const SE_VPS_NAME = &quot;HTTPOnly&quot; Const SE_VPS_VALUE = false

'Define the constants needed const Error_FileNotFound = &H80070002 Const fpcPolicyWebPublishing = 2

Main(WScript.Arguments)

Sub Main(args)

If(args.Count = 1) Then AllowCompressedContent args(0) Else Usage End If End Sub

Sub AllowCompressedContent(ruleName)

' Create the root object. Dim root ' The FPCLib.FPC root object Set root = CreateObject(&quot;FPC.Root&quot;)

' Declare the other objects needed. Dim isaArray       ' An FPCArray object Dim rule           ' An FPCPolicyRule object

' Get a reference to the array object. Set isaArray = root.GetContainingArray

' Get a reference to the policy rule specified. On Error Resume Next Set rule = isaArray.ArrayPolicy.PolicyRules.Item(ruleName) If Err.Number = Error_FileNotFound Then WScript.Echo &quot;The policy rule specified could not be found.&quot; Else Err.Clear On Error GoTo 0 If rule.Type = fpcPolicyWebPublishing Then

Dim VendorSets ' An FPCVendorParametersSets collection Dim VendorSet  ' An FPCVendorParametersSet object

Set VendorSets = rule.VendorParametersSets

On Error Resume Next Set VendorSet = VendorSets.Item( SE_VPS_GUID )

If Err.Number <> 0 Then Err.Clear

' Add the item Set VendorSet = VendorSets.Add( SE_VPS_GUID ) CheckError WScript.Echo &quot;New VendorSet added... &quot; & VendorSet.Name

Else WScript.Echo &quot;Existing VendorSet found... value- &quot; & VendorSet.Value(SE_VPS_NAME) End If

if VendorSet.Value(SE_VPS_NAME) <> SE_VPS_VALUE Then

Err.Clear VendorSet.Value(SE_VPS_NAME) = SE_VPS_VALUE

If Err.Number <> 0 Then CheckError End If           End If

rule.Save WScript.Echo &quot;Done!&quot;

Else WScript.Echo &quot;The policy rule specified is not a Web publishing rule.&quot; End If   End If

End Sub

Sub Usage WScript.Echo &quot;Usage:&quot; & VbCrLf _ & &quot; &quot; & WScript.ScriptName & &quot; RuleName&quot; & VbCrLf _ & &quot;&quot; & VbCrLf _ & &quot;   RuleName - Name of the Web publishing rule&quot; WScript.Quit End Sub

Sub CheckError

If Err.Number <> 0 Then WScript.Echo &quot;An error occurred: 0x&quot; & Hex(Err.Number) & &quot; &quot; & Err.Description Err.Clear End If

End Sub  Save the file as a Microsoft Visual Basic script file by using the .vbs file name extension. For example, use the following name to save the file:

WPLBDisableHTTPOnly.vbs

 Open a command prompt, move to the location where you saved the WPLBDisableHTTPOnly.vbs file, and then run the following command:

cscript WPLBDisableHTTPOnly.vbs 

Note The  placeholder represents the name of the policy rule for which you want to apply this change. You can run the script multiple times for multiple policy rules.

Keywords: kbhowto kbexpertiseinter kbinfo KB937185

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.