-----------------------------------
Http request/response log from IE8.
-----------------------------------
--- User request: http://192.168.252.5:8080/myOrbeonApp/ ---
GET /myOrbeonApp/ HTTP/1.1
Accept: application/vnd.ms-excel, */*
Accept-Language: it
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) )
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Host: 192.168.252.5:8080
If-Modified-Since: Sun, 04 Apr 2010 23:43:04 GMT
--- index.jsp (default page for site) response is "please authenticate yourself using NTLM" ---
HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
Set-Cookie: JSESSIONID=51195A7F75C50DE383F320AD1BD7A31E; Path=/myOrbeonApp
WWW-Authenticate: NTLM
Content-Type: text/html
Date: Sun, 04 Apr 2010 23:44:10 GMT
Proxy-Support: Session-Based-Authentication
Content-Length: 29
--- IE8 request is NTLM Authorization request ---
GET /myOrbeonApp/ HTTP/1.1
Accept: application/vnd.ms-excel, */*
Accept-Language: it
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) )
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Host: 192.168.252.5:8080
If-Modified-Since: Sun, 04 Apr 2010 23:43:04 GMT
Cookie: JSESSIONID=51195A7F75C50DE383F320AD1BD7A31E
Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbAdAAAADw==
--- index.jsp response is "Gimmie a good token, based on my NTLM challenge message": ---
HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAACgAAAABggAAAAICAgAAAAAAAAAAAAAAAA==
Content-Type: text/html
Content-Length: 954
Date: Sun, 04 Apr 2010 23:44:17 GMT
Proxy-Support: Session-Based-Authentication
Apache Tomcat/6.0.20 - Error report HTTP Status 401 -
type Status report
message
description This request requires HTTP authentication ().
Apache Tomcat/6.0.20
--- IE8 request is "Ok, that's my token, please let-me-in" ---
GET /myOrbeonApp/ HTTP/1.1
Accept: application/vnd.ms-excel, */*
Accept-Language: it
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) )
Accept-Encoding: gzip, deflate
Connection: Keep-Alive
Host: 192.168.252.5:8080
If-Modified-Since: Sun, 04 Apr 2010 23:43:04 GMT
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAIAAAAAYABgAmAAAAA4ADgBYAAAADAAMAGYAAAAOAA4AcgAAAAAAAACwAAAABYIAAgYBsB0AAAAPgnlLGZzgt1IrU8F3i4d050MATwBOAFMASQBOAFQAcABhAG8AbABvAG4AUAA0AFAATwBXAEUAUgD0tbbmYiE4nsZ3+a4LbY1ztuNC40HWt6L0tbbmYiE4nsZ3+a4LbY1ztuNC40HWt6I=
Cookie: JSESSIONID=51195A7F75C50DE383F320AD1BD7A31E
--- index.jsp, when knows that client is "a good guy", redirects to "real" application page (http://192.168.252.5:8080/login) posting user name: ---
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Last-Modified: Sun, 04 Apr 2010 23:44:17 GMT
Expires: Sun, 04 Apr 2010 23:44:17 GMT
Cache-Control: public
Pragma:
Content-Type: text/html;charset=utf-8
Date: Sun, 04 Apr 2010 23:44:17 GMT
Content-Length: 33528
... bla bla bla ...
--- Xforms engine, who knows that client is IE, pushes some "fix" includes in html code, so IE requests them ----
GET /ops/javascript/iepngfix.htc HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) )
If-Modified-Since: Mon, 20 Jul 2009 00:32:30 GMT
If-None-Match: W/"4570-1248049950000"
Host: 192.168.252.5:8080
Connection: Keep-Alive
--- IE (was in cache) says "thank you, I ate it before" ---
HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"4570-1248049950000"
Date: Sun, 04 Apr 2010 23:44:17 GMT
--- suddenly requests: gimmie more, please (deja-vu?) ---
GET /ops/javascript/iepngfix.htc HTTP/1.1
Accept: application/vnd.ms-excel, */*
Accept-Language: it
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) )
Accept-Encoding: gzip, deflate
If-Modified-Since: Mon, 20 Jul 2009 00:32:30 GMT
If-None-Match: W/"4570-1248049950000"
Connection: Keep-Alive
Host: 192.168.252.5:8080
--- IE (was in cache) says, again, "burp" ---
HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"4570-1248049950000"
Date: Sun, 04 Apr 2010 23:44:17 GMT
--- May I have something different? Some iepngfix, please? ---
GET /ops/javascript/iepngfix.htc HTTP/1.1
Accept: application/vnd.ms-excel, */*
Accept-Language: it
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) )
Accept-Encoding: gzip, deflate
If-Modified-Since: Mon, 20 Jul 2009 00:32:30 GMT
If-None-Match: W/"4570-1248049950000"
Connection: Keep-Alive
Host: 192.168.252.5:8080
--- boring... ---
HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"4570-1248049950000"
Date: Sun, 04 Apr 2010 23:44:17 GMT
------------------------------------
And now THE_PROBLEM:
------------------------------------
- page is fully displayed
- no user interaction for a minute
When I click on a listbox item (and don't release mouse) javascript (ajax request)
would like to notify event to server (trough /xforms-server request), but IE,
knowing that connection has been closed by server (keep-alive timeout) send again a new NTLM negotiation:
POST /myOrbeonApp/xforms-server HTTP/1.1
Accept: */*
Accept-Language: it
Referer: http://192.168.252.5:8080/myOrbeonApp/
x-requested-with: XMLHttpRequest
Content-Type: application/xml
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) )
Host: 192.168.252.5:8080
Connection: Keep-Alive
Pragma: no-cache
Cookie: JSESSIONID=51195A7F75C50DE383F320AD1BD7A31E
Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbAdAAAADw== <<<<<<<<--- carrying NTLM initial request
Content-Length: 0 <<<<<<<<--- and a 0 content-length
--- Orbeon response is "URL generator found null URL...." ----
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Last-Modified: Sun, 04 Apr 2010 23:45:14 GMT
Expires: Sun, 04 Apr 2010 23:45:14 GMT
Cache-Control: public
Pragma:
Content-Type: application/xml;charset=utf-8
Content-Length: 5367
Date: Sun, 04 Apr 2010 23:45:14 GMT
URL generator found null URL for config:<config><url/></config>