Consultor Eletrônico



Kbase P13627: Connection to Appserver/Aia with webserver authorization enabled fails.
Autor   Progress Software Corporation - Progress
Acesso   Público
Publicação   28/09/2004
Status: Unverified

FACT(s) (Environment):

Tomcat

SYMPTOM(s):

Web client application fails to connect to AppServer / Aia

Application executes the following connection statement:

v-return-code = v-handle-corppro:CONNECT ("-URL
http://username:password@machinename:8080/aia/Aia").


PROGRESS AppServer network protocol mismatch. (5565)

Application server connect failure. (5468)

Unexpected message code received: expected <exp_code> received <msg_code>. (5478)

Web Server authorization is enabled

Tomcat is configured to allow basic authorization

CAUSE:

Http-method security is enabled within the $TOMCAT_HOME/webapps/aia/WEB-INF/web.xml file.
The Security permissions within the web.xml file restrict http connections.

FIX:

Comment out the lines that set the http-method security from the web.xml file <security-constraint> element.
Example of what web.xml security-constraint element.

<security-constraint>
- <web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/engineering/*</url-pattern>
<url-pattern>/Aia/*</url-pattern>
<http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>PUT</http-method>
</web-resource-collection>
- <auth-constraint>
<role-name>tomcat_users</role-name>
</auth-constraint>
</security-constraint>
- <login-config>
<auth-method>BASIC</auth-method>
<realm-name>Admin</realm-name>
</login-config>
<LogSetter name="example_servlet_log" path="/tomcat/servlet_aia.log" verbosityLevel="DEBUG" servletLogger="true" />
</web-app>