Hi Krishan,

My first guess from what you send is that you have a problem with:

1) The way in which your PoA is serving the images that are used
    to piggyback the cookies. Can you send me the exact URL that your
    AS is including in the page that sends to you upon successful
    authentication?

2) The domain name in cookies. My experience is that on most
    browsers (specially in the Mozilla family) it is not possible
    to set a cookie for a host with a domain-less home. In the PAPI
    installations I use to bring in my laptop for testing I have to
    use names such as "poa1.localdomain" (properly defined in /etc/ 
hosts)
    but never simply "poa1".

3) The use of the Domain directive. Unless you want the PAPI cookie
    to be set for an entire (shared) domain, you should avoid the use
    of that directive.

Hope this helps,
--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez

Red.es - RedIRIS
The Spanish NREN

e-mail: [log in para visualizar]
jid:    [log in para visualizar]
Tel:    +34 955 056 621
Mobile: +34 669 898 094
-----------------------------------------