I've solved the problem. It was to do with permissions. The cosign
runs as user cosign and the web server was running as nobody. The
and cookie files created by the web filter weren't accessible by
and so it would die. I've now changed the web server to run as cosign
all seems to be working.
Hm. That doesn't sound right. We run apache & cosignd as different
users. cosignd never reads data from the filter/apache. cosignd only
gets data from cosign.cgi and other cosignd's. The filter/apache gets
data only from cosignd.