Error: URL generator found null URL for config: <config><url/></config>
Locked
Error: URL generator found null URL for config: <config><url/></config>
 
|
Hi, I have a problem with version dev-post-3.7.1.200907291001 (tested on dev-post-3.7.1.201003242100 too) running under Tomcat 6.x (can't try with Tomcat 5).
Application starts with a jsp (index.jsp) which writes "WWW-Authenticate NTLM" header to request NTLM auth, and gets current user name from response, then redirects to "real" startup page through <jsp:forward> directive. After some inactivity seconds (about 20) every action (press a button on form, select a listbox element, everything which needs to post back data to server) the response is: URL generator found null URL for config: <config><url/></config> Log reports: Exception at line 46, column 51 of oxf:/ops/xforms/xforms-server.xpl (executing processor: name='{http://www.orbeon.com/oxf/processors}url-generator') org.orbeon.oxf.common.ValidationException: line 46, column 51 of oxf:/ops/xforms/xforms-server.xpl (executing processor: name='{http://www.orbeon.com/oxf/processors}url-generator'): URL generator found null URL for config: <config><url/></config> This happens only using Internet Explorer (versions 6, 7 and 8), NO error using Firefox. I tried to set up Java HTTP Connector connectionTimeout parameter (tomcat server.xml) with different values (from 1000 to 60000 and more) and the number of seconds before "Url generator" error changes according to this parameter (not for values over 60000). It looks like a "keep-alive" problem, which is enabled (by default) for Http Connector. I need to get current user (from Microsoft Active Directory) and use Internet Explorer (customer policy), so what can I do to circumvent this problem? |
Re: Error: URL generator found null URL for config: <config><url/></config>
|
|
I was wrong about NTLM, error comes even without NTLM (no pre-auth page), and only on Internet Explorer.
|
Re: Error: URL generator found null URL for config: <config><url/></config>
|
|
A little "up" for this problem...
If you need more informations let me know... Currently users can't run application on IE (and they can't switch to Firefox). |
Re: Error: URL generator found null URL for config: <config><url/></config>
Administrator
|
In reply to this post by Paolo Nacci
Paolo,
Are you saying that this is happening with the Ajax requests? Could it be that it happens because the Ajax requests don't go through the same path you describe, where you add a header? Alex On Fri, Mar 26, 2010 at 9:22 AM, Paolo Nacci <[hidden email]> wrote: > > Hi, I have a problem with version dev-post-3.7.1.200907291001 (tested on > dev-post-3.7.1.201003242100 too) running under Tomcat 6.x (can't try with > Tomcat 5). > > Application starts with a jsp (index.jsp) which writes "WWW-Authenticate > NTLM" header to request NTLM auth, and gets current user name from response, > then redirects to "real" startup page through <jsp:forward> directive. > > After some inactivity seconds (about 20) every action (press a button on > form, select a listbox element, everything which needs to post back data to > server) the response is: > URL generator found null URL for config: <config><url/></config> > > Log reports: > Exception at line 46, column 51 of oxf:/ops/xforms/xforms-server.xpl > (executing processor: > name='{http://www.orbeon.com/oxf/processors}url-generator') > org.orbeon.oxf.common.ValidationException: line 46, column 51 of > oxf:/ops/xforms/xforms-server.xpl (executing processor: > name='{http://www.orbeon.com/oxf/processors}url-generator'): URL generator > found null URL for config: > <config><url/></config> > > This happens only using Internet Explorer (versions 6, 7 and 8), NO error > using Firefox. > > I tried to set up Java HTTP Connector connectionTimeout parameter (tomcat > server.xml) with different values (from 1000 to 60000 and more) and the > number of seconds before "Url generator" error changes according to this > parameter (not for values over 60000). > > It looks like a "keep-alive" problem, which is enabled (by default) for Http > Connector. > > I need to get current user (from Microsoft Active Directory) and use > Internet Explorer (customer policy), so what can I do to circumvent this > problem? > > -- > View this message in context: http://n4.nabble.com/Error-URL-generator-found-null-URL-for-config-config-url-config-tp1692461p1692461.html > Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com. > > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
R: Re: Error: URL generator found null URL for config: <config><url/></config>
|
|
Hi Alessandro, and thanks for response. I can give you some information about
application logic: 1) Client (IE/Firefoex) request http://localhost:8080/app-name a. request goes to /app-name/index.jsp (NTLM auth, to get user name and
send it to real application): <html> <head> </head> <body> <% String auth =
request.getHeader("Authorization"); String
username=new String(); if (auth ==
null) {
response.setStatus(response.SC_UNAUTHORIZED);
response.setHeader("WWW-Authenticate", "NTLM");
response.flushBuffer(); return; } if
(auth.startsWith("NTLM ")) { byte[] msg
= new sun.misc.BASE64Decoder().decodeBuffer(auth.substring(5)); int off =
0, length, offset; if (msg[8]
== 1) { byte z =
0; byte[]
msg1 = {(byte)'N', (byte)'T', (byte)'L', (byte)'M', (byte)'S', (byte)'S',
(byte)'P', z,(byte)2, z, z, z, z, z, z, z,(byte)40, z, z, z, (byte)1,
(byte)130, z, z,z, (byte)2, (byte)2, (byte)2, z, z, z, z, z, z, z, z, z, z, z,
z}; response.setHeader("WWW-Authenticate",
"NTLM " + new sun.misc.BASE64Encoder().encodeBuffer(msg1));
response.sendError(response.SC_UNAUTHORIZED); return; } else if
(msg[8] == 3) { off = 30; length =
msg[off+9]*256 + msg[off+8]; offset =
msg[off+11]*256 + msg[off+10]; username
= new String(msg, offset, length); } } %> <jsp:forward
page="/login"> <jsp:param
name="user" value="<%=username%>"/> <jsp:param
name="integratedlogin" value="true"/> </jsp:forward> </html>
i. Firefox (unless a special config [from “about:config”
page]) opens classic NTLM user/password request, where I type my user name and
password
ii. IE, with no user interaction, pulls my user name from current user
lan connection (I’m a domain member) b. after NTLM auth (message type 3) index.jsp can get user name and “forward”
to /login (with user name as a parameter). At this time connection is still
open (TCPMon marks State as “Active”). 2) login.xhtml (http://localhost:8080/login)
read parameters (user name) and get available options (listbox), waiting for
data entry. (TCPMon always give “Active” state). 3) After a couple of seconds (according to connectionTimeout parameter
in server.xml config file) first ajax request (click on list member): a. TCPMon mark State as “Done” b. Ajax request return with error (Url gen null…) – only IE This problem is NTLM/IE related because: - It doesn’t happen using firefox (and NTLM) - It doesn’t happen without NTLM (IE and Firefox) Reading some doc I found that NTLM is
connection-oriented rather than request-oriented (or session-oriented) and that’s
why I think that after “Keep-alive” timeout ajax request fails (NTLM,
after keep-alive timeout, requests a new NTLM Handshake). It doesn’t happen with firefox
because it discard “Authorization” header (after redirection from
index.jsp to login.xhtml). If there is no solution for this nasty
IE “behavior” (M$ style) what can I do to get user name from MS AD
and send it to another page? I’m looking at SPNEGO (http://spnego.sourceforge.net/) but I’d
like to use orbeon nearly “as is” (minimal config cheating). -----Messaggio originale----- Paolo, Are you saying that this is happening with the Ajax
requests? Could it be that it happens because the Ajax requests don't go
through the same path you describe, where you add a header? Alex On Fri, Mar 26, 2010 at 9:22 AM, Paolo Nacci
<[hidden email]> wrote: > > Hi, I have a problem with version
dev-post-3.7.1.200907291001 (tested > on dev-post-3.7.1.201003242100 too) running under
Tomcat 6.x (can't > try with Tomcat 5). > > Application starts with a jsp (index.jsp) which
writes > "WWW-Authenticate NTLM" header to request
NTLM auth, and gets current > user name from response, then redirects to
"real" startup page through <jsp:forward> directive. > > After some inactivity seconds (about 20) every
action (press a button > on form, select a listbox element, everything which
needs to post back > data to > server) the response is: > URL generator found null URL for config:
<config><url/></config> > > Log reports: > Exception at line 46, column 51 of
oxf:/ops/xforms/xforms-server.xpl > (executing processor: >
name='{http://www.orbeon.com/oxf/processors}url-generator') > org.orbeon.oxf.common.ValidationException: line 46,
column 51 of > oxf:/ops/xforms/xforms-server.xpl (executing processor: >
name='{http://www.orbeon.com/oxf/processors}url-generator'): URL > generator found null URL for config: > <config><url/></config> > > This happens only using Internet Explorer (versions
6, 7 and 8), NO > error using Firefox. > > I tried to set up Java HTTP Connector
connectionTimeout parameter > (tomcat > server.xml) with different values (from 1000 to
60000 and more) and > the number of seconds before "Url
generator" error changes according > to this parameter (not for values over 60000). > > It looks like a "keep-alive" problem,
which is enabled (by default) > for Http Connector. > > I need to get current user (from Microsoft Active
Directory) and use > Internet Explorer (customer policy), so what can I
do to circumvent > this problem? > > -- > View this message in context: >
http://n4.nabble.com/Error-URL-generator-found-null-URL-for-config-con > fig-url-config-tp1692461p1692461.html > Sent from the Orbeon Forms (ops-users) mailing list
archive at Nabble.com. > > > -- > You receive this message as a subscriber of the
[hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page:
http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise
- http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Re: R: Re: Error: URL generator found null URL for config: <config><url/></config>
|
Administrator
|
Paolo,
By connection-oriented, do you mean that with NTLM, at every request the server is supposed to respond with WWW-Authenticate: NTLM, and the client will send the request again with the Authorization header? I know IE could do that without prompting the user, but that sounds a bit weird to me. Also, who checks the username/password? Are you not supposed to have some code in front of you app. that does this, and doesn't let the request even reach the web app if the user is not properly authenticated? I.e. using a servlet filter or IIS (see: http://stackoverflow.com/questions/439120/how-to-configure-tomcat-to-use-windows-ntlm-authentication)? Alex On Wed, Mar 31, 2010 at 3:30 PM, Paolo Nacci <[hidden email]> wrote: > Hi Alessandro, and thanks for response. > > > > I can give you some information about application logic: > > 1) Client (IE/Firefoex) request http://localhost:8080/app-name > > a. request goes to /app-name/index.jsp (NTLM auth, to get user name and > send it to real application): > > <html> > > <head> > > </head> > > <body> > > <% > > String auth = request.getHeader("Authorization"); > > String username=new String(); > > if (auth == null) > > { > > response.setStatus(response.SC_UNAUTHORIZED); > > response.setHeader("WWW-Authenticate", "NTLM"); > > response.flushBuffer(); > > return; > > } > > if (auth.startsWith("NTLM ")) > > { > > byte[] msg = new sun.misc.BASE64Decoder().decodeBuffer(auth.substring(5)); > > int off = 0, length, offset; > > if (msg[8] == 1) > > { > > byte z = 0; > > byte[] msg1 = {(byte)'N', (byte)'T', (byte)'L', (byte)'M', (byte)'S', > (byte)'S', (byte)'P', z,(byte)2, z, z, z, z, z, z, z,(byte)40, z, z, z, > (byte)1, (byte)130, z, z,z, (byte)2, (byte)2, (byte)2, z, z, z, z, z, z, z, > z, z, z, z, z}; > > response.setHeader("WWW-Authenticate", "NTLM " + new > sun.misc.BASE64Encoder().encodeBuffer(msg1)); > > response.sendError(response.SC_UNAUTHORIZED); > > return; > > } > > else if (msg[8] == 3) > > { > > off = 30; > > > > length = msg[off+9]*256 + msg[off+8]; > > offset = msg[off+11]*256 + msg[off+10]; > > username = new String(msg, offset, length); > > } > > } > > %> > > <jsp:forward page="/login"> > > <jsp:param name="user" value="<%=username%>"/> > > <jsp:param name="integratedlogin" value="true"/> > > </jsp:forward> > > > > </html> > > i. Firefox (unless a special config [from > “about:config” page]) opens classic NTLM user/password request, where I type > my user name and password > > ii. IE, with no user interaction, pulls my user name > from current user lan connection (I’m a domain member) > > b. after NTLM auth (message type 3) index.jsp can get user name and > “forward” to /login (with user name as a parameter). At this time connection > is still open (TCPMon marks State as “Active”). > > 2) login.xhtml (http://localhost:8080/login) read parameters (user name) > and get available options (listbox), waiting for data entry. (TCPMon always > give “Active” state). > > 3) After a couple of seconds (according to connectionTimeout parameter in > server.xml config file) first ajax request (click on list member): > > a. TCPMon mark State as “Done” > > b. Ajax request return with error (Url gen null…) – only IE > > > > This problem is NTLM/IE related because: > > - It doesn’t happen using firefox (and NTLM) > > - It doesn’t happen without NTLM (IE and Firefox) > > > > Reading some doc I found that NTLM is connection-oriented rather than > request-oriented (or session-oriented) and that’s why I think that after > “Keep-alive” timeout ajax request fails (NTLM, after keep-alive timeout, > requests a new NTLM Handshake). > > It doesn’t happen with firefox because it discard “Authorization” header > (after redirection from index.jsp to login.xhtml). > > > > If there is no solution for this nasty IE “behavior” (M$ style) what can I > do to get user name from MS AD and send it to another page? I’m looking at > SPNEGO (http://spnego.sourceforge.net/) but I’d like to use orbeon nearly > “as is” (minimal config cheating). > > > > > > -----Messaggio originale----- > Da: Alessandro Vernet [mailto:[hidden email]] > Inviato: mercoledì 31 marzo 2010 20:25 > A: [hidden email] > Oggetto: [ops-users] Re: Error: URL generator found null URL for config: > <config><url/></config> > > > > Paolo, > > > > Are you saying that this is happening with the Ajax requests? Could it be > that it happens because the Ajax requests don't go through the same path you > describe, where you add a header? > > > > Alex > > > > On Fri, Mar 26, 2010 at 9:22 AM, Paolo Nacci <[hidden email]> wrote: > >> > >> Hi, I have a problem with version dev-post-3.7.1.200907291001 (tested > >> on dev-post-3.7.1.201003242100 too) running under Tomcat 6.x (can't > >> try with Tomcat 5). > >> > >> Application starts with a jsp (index.jsp) which writes > >> "WWW-Authenticate NTLM" header to request NTLM auth, and gets current > >> user name from response, then redirects to "real" startup page through >> <jsp:forward> directive. > >> > >> After some inactivity seconds (about 20) every action (press a button > >> on form, select a listbox element, everything which needs to post back > >> data to > >> server) the response is: > >> URL generator found null URL for config: <config><url/></config> > >> > >> Log reports: > >> Exception at line 46, column 51 of oxf:/ops/xforms/xforms-server.xpl > >> (executing processor: > >> name='{http://www.orbeon.com/oxf/processors}url-generator') > >> org.orbeon.oxf.common.ValidationException: line 46, column 51 of > >> oxf:/ops/xforms/xforms-server.xpl (executing processor: > >> name='{http://www.orbeon.com/oxf/processors}url-generator'): URL > >> generator found null URL for config: > >> <config><url/></config> > >> > >> This happens only using Internet Explorer (versions 6, 7 and 8), NO > >> error using Firefox. > >> > >> I tried to set up Java HTTP Connector connectionTimeout parameter > >> (tomcat > >> server.xml) with different values (from 1000 to 60000 and more) and > >> the number of seconds before "Url generator" error changes according > >> to this parameter (not for values over 60000). > >> > >> It looks like a "keep-alive" problem, which is enabled (by default) > >> for Http Connector. > >> > >> I need to get current user (from Microsoft Active Directory) and use > >> Internet Explorer (customer policy), so what can I do to circumvent > >> this problem? > >> > >> -- > >> View this message in context: > >> http://n4.nabble.com/Error-URL-generator-found-null-URL-for-config-con > >> fig-url-config-tp1692461p1692461.html > >> Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com. > >> > >> > >> -- > >> You receive this message as a subscriber of the [hidden email] mailing >> list. > >> To unsubscribe: mailto:[hidden email] > >> For general help: mailto:[hidden email]?subject=help > >> OW2 mailing lists service home page: http://www.ow2.org/wws > >> > >> > > > > > > > > -- > > Orbeon Forms - Web forms, open-source, for the Enterprise - > http://www.orbeon.com/ My Twitter: http://twitter.com/avernet > > -- > You receive this message as a subscriber of the [hidden email] mailing > list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Re: Error: URL generator found null URL for config: <config><url/></config>
|
|
In reply to this post by Paolo Nacci
Hi Alex, here is an excerpt from http://curl.haxx.se/rfc/ntlm.html#ntlmHttpAuthentication:
This scheme differs from most "normal" HTTP authentication mechanisms, in that subsequent requests over the authenticated connection are not themselves authenticated; NTLM is connection-oriented, rather than request-oriented. So a second request for "/index.html" would not carry any authentication information, and the server would request none. If the server detects that the connection to the client has been dropped, a request for "/index.html" would result in the server reinitiating the NTLM handshake.
A notable exception to the above is the client's behavior when submitting a POST request (typically employed when the client is sending form data to the server). If the client determines that the server is not the local host, the client will initiate reauthentication for POST requests over the active connection. The client will first submit an empty POST request with a Type 1 message in the "Authorization" header; the server responds with the Type 2 message (in the "WWW-Authenticate" header as shown above). The client then resubmits the POST with the Type 3 message, sending the form data with the request.
Could this “POST” behavior the problem?
Paolo
|
Re: Re: Error: URL generator found null URL for config: <config><url/></config>
|
Administrator
|
Hi Paolo,
This is very interesting; the documentation you point to is well written, and there were quite a few things I didn't know about NTLM. But as you can see, I don't have much experience with NTLM ;), so I wouldn't be able to say why it isn't working with IE. It could indeed be related to the way the POST works over NTLM. To make progress on this, I would recommend you look at exactly what goes over HTTP (with a tool like Wireshark on Windows or HTTP Scoop on OS X). This way you'll be able to compare side by side what goes on with Firefox vs. IE. Alex On Thu, Apr 1, 2010 at 5:48 PM, Paolo Nacci <[hidden email]> wrote: > Hi Alex, here is an excerpt from > http://curl.haxx.se/rfc/ntlm.html#ntlmHttpAuthentication: This scheme > differs from most "normal" HTTP authentication mechanisms, in that > subsequent requests over the authenticated connection are not themselves > authenticated; NTLM is connection-oriented, rather than request-oriented. So > a second request for "/index.html" would not carry any authentication > information, and the server would request none. If the server detects that > the connection to the client has been dropped, a request for "/index.html" > would result in the server reinitiating the NTLM handshake. A notable > exception to the above is the client's behavior when submitting a POST > request (typically employed when the client is sending form data to the > server). If the client determines that the server is not the local host, the > client will initiate reauthentication for POST requests over the active > connection. The client will first submit an empty POST request with a Type 1 > message in the "Authorization" header; the server responds with the Type 2 > message (in the "WWW-Authenticate" header as shown above). The client then > resubmits the POST with the Type 3 message, sending the form data with the > request. Could this “POST” behavior the problem? Paolo > ________________________________ > View this message in context: Re: Error: URL generator found null URL for > config: > Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com. > > > -- > You receive this message as a subscriber of the [hidden email] mailing > list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Re: Re: Error: URL generator found null URL for config: <config><url/></config>
|
|
IE-trace.txt Firefox-trace.txt Attached files are http request/response messages for same requests (IE8 vs Firefox). 2 differences: a) IE requests are HTTP 1.1 (Firefox HTTP 1.0), but I tried firefox with HTTP 1.1 too (network.http.pipelining;true in firefox config) b) IE, after connection close (due to keep-alive timeout?), POST a new authorization request (message type 1) to server (header only request) |
Re: Re: Re: Error: URL generator found null URL for config: <config><url/></config>
|
Administrator
|
Paolo,
Very interesting. And IE seems to have too much fun chatting with the server about iepngfix.htc. But that is another story :). Regarding the Firefox log, the Ajax request is sent after the connection is closed, so how come the Ajax request goes through if that request doesn't contain a valid Authorization? Your code checking the Authorization doesn't kick in for requests to /xforms-server? Regarding the IE log, Ajax query is sent with the Authorization, which is reasonable so far... except the body of the request is empty. Ouch, that's not good, and most likely this is the reason for the error you get in Orbeon Forms. Now, here is why my previous question is relevant: if the requests /xforms-server were sent to a piece of code that understands NTLM, that piece of code, seeing that the request is an empty POST with a Type 1 message in the "Authorization" header, would respond with the Type 2 message without talking to Orbeon Forms, and would only pass along the post to Orbeon Forms when IE resubmits the POST with body and a Type 3 message. Alex On Wed, Apr 7, 2010 at 4:41 PM, Paolo Nacci <[hidden email]> wrote: > > > Alessandro Vernet wrote: >> >> ... >> To make progress on >> this, I would recommend you look at exactly what goes over HTTP (with >> a tool like Wireshark on Windows or HTTP Scoop on OS X). This way >> you'll be able to compare side by side what goes on with Firefox vs. >> IE. >> ... >> > > http://n4.nabble.com/file/n1755814/IE-trace.txt IE-trace.txt > http://n4.nabble.com/file/n1755814/Firefox-trace.txt Firefox-trace.txt > > Attached files are http request/response messages for same requests (IE8 vs > Firefox). > > 2 differences: > a) IE requests are HTTP 1.1 (Firefox HTTP 1.0), but I tried firefox with > HTTP 1.1 too (network.http.pipelining;true in firefox config) > b) IE, after connection close (due to keep-alive timeout?), POST a new > authorization request (message type 1) to server (header only request) > > > -- > View this message in context: http://n4.nabble.com/Error-URL-generator-found-null-URL-for-config-config-url-config-tp1692461p1755814.html > Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com. > > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Re: Re: Re: Error: URL generator found null URL for config: <config><url/></config>
|
|
When connection is closed Firefox sends a "normal" request, and server doesn't care about authentication (remember, index.jsp "fooled" client to obtain user name).
Internet explorer remembers that "dead" connection required auth, and starts auth process again (sending an empty, header only, request). I resolved this problem using spnego (tomcat level). Once set up, I could get user name quite easily: I configured tomcat to request auth for index.jsp page: <filter-mapping> <filter-name>SpnegoHttpFilter</filter-name> <url-pattern>index.jsp</url-pattern> </filter-mapping> and got user name through request.getRemoteUser() call.
|
Re: Re: Re: Re: Error: URL generator found null URL for config: <config><url/></config>
|
Administrator
|
Paolo,
Very interesting indeed; thank you for sharing the link to this project. Alex On Mon, Apr 26, 2010 at 5:56 PM, Paolo Nacci <[hidden email]> wrote: > > When connection is closed Firefox sends a "normal" request, and server > doesn't care about authentication (remember, index.jsp "fooled" client to > obtain user name). > Internet explorer remembers that "dead" connection required auth, and starts > auth process again (sending an empty, header only, request). > > I resolved this problem using http://spnego.sourceforge.net/ spnego > (tomcat level). > > Once set up, I could get user name quite easily: > > I configured tomcat to request auth for index.jsp page: > <filter-mapping> > <filter-name>SpnegoHttpFilter</filter-name> > <url-pattern>index.jsp</url-pattern> > </filter-mapping> > > and got user name through request.getRemoteUser() call. > > > > Alessandro Vernet wrote: >> >> Paolo, >> >> Very interesting. And IE seems to have too much fun chatting with the >> server about iepngfix.htc. But that is another story :). >> >> Regarding the Firefox log, the Ajax request is sent after the >> connection is closed, so how come the Ajax request goes through if >> that request doesn't contain a valid Authorization? Your code checking >> the Authorization doesn't kick in for requests to /xforms-server? >> >> Regarding the IE log, Ajax query is sent with the Authorization, which >> is reasonable so far... except the body of the request is empty. Ouch, >> that's not good, and most likely this is the reason for the error you >> get in Orbeon Forms. Now, here is why my previous question is >> relevant: if the requests /xforms-server were sent to a piece of code >> that understands NTLM, that piece of code, seeing that the request is >> an empty POST with a Type 1 message in the "Authorization" header, >> would respond with the Type 2 message without talking to Orbeon Forms, >> and would only pass along the post to Orbeon Forms when IE resubmits >> the POST with body and a Type 3 message. >> >> Alex >> >> On Wed, Apr 7, 2010 at 4:41 PM, Paolo Nacci <[hidden email]> >> wrote: >>> >>> >>> Alessandro Vernet wrote: >>>> >>>> ... >>>> To make progress on >>>> this, I would recommend you look at exactly what goes over HTTP (with >>>> a tool like Wireshark on Windows or HTTP Scoop on OS X). This way >>>> you'll be able to compare side by side what goes on with Firefox vs. >>>> IE. >>>> ... >>>> >>> >>> http://n4.nabble.com/file/n1755814/IE-trace.txt IE-trace.txt >>> http://n4.nabble.com/file/n1755814/Firefox-trace.txt Firefox-trace.txt >>> >>> Attached files are http request/response messages for same requests (IE8 >>> vs >>> Firefox). >>> >>> 2 differences: >>> a) IE requests are HTTP 1.1 (Firefox HTTP 1.0), but I tried firefox with >>> HTTP 1.1 too (network.http.pipelining;true in firefox config) >>> b) IE, after connection close (due to keep-alive timeout?), POST a new >>> authorization request (message type 1) to server (header only request) >>> >>> >>> -- >>> View this message in context: >>> http://n4.nabble.com/Error-URL-generator-found-null-URL-for-config-config-url-config-tp1692461p1755814.html >>> Sent from the Orbeon Forms (ops-users) mailing list archive at >>> Nabble.com. >>> >>> >>> -- >>> You receive this message as a subscriber of the [hidden email] mailing >>> list. >>> To unsubscribe: mailto:[hidden email] >>> For general help: mailto:[hidden email]?subject=help >>> OW2 mailing lists service home page: http://www.ow2.org/wws >>> >>> >> >> >> >> -- >> Orbeon Forms - Web forms, open-source, for the Enterprise - >> http://www.orbeon.com/ >> My Twitter: http://twitter.com/avernet >> >> >> -- >> You receive this message as a subscriber of the [hidden email] mailing >> list. >> To unsubscribe: mailto:[hidden email] >> For general help: mailto:[hidden email]?subject=help >> OW2 mailing lists service home page: http://www.ow2.org/wws >> >> > > -- > View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Error-URL-generator-found-null-URL-for-config-config-url-config-tp1692461p2066019.html > Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com. > > > -- > You receive this message as a subscriber of the [hidden email] mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws > > -- Orbeon Forms - Web forms, open-source, for the Enterprise - http://www.orbeon.com/ My Twitter: http://twitter.com/avernet -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
«
Return to Orbeon Forms community mailing list
|
1 view|%1 views
| Free forum by Nabble | Edit this page |