Hello, Please find below the full loglevel from isapi with level debug for the single request to access a url/jci/
Yes, you are right. In the header will only be the username and domain passed to the application. In the application we make a request to query the NTLM with the given username and the current logged in user credentials. So no password will be transferred from browser to IIS resp. Tomcat. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] jk_set_time_fmt::jk_util.c (459): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Fri Sep 30 15:06:06.320 2011] [3456:1540] [info] init_jk::jk_isapi_plugin.c (2602): Starting Jakarta/ISAPI/isapi_redirector/1.2.32 () [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2620): Detected IIS version 7.5 [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2622): Using ini file D:\tecracer\software\tomcat\isapi\isapi_redirect.properties. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2628): Using log file d:\tecracer\software\tomcat\logs\isapi_redirect.log. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2629): Using log level 1. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2630): Using log rotation time 0 seconds. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2631): Using log file size 0 bytes. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2633): Using extension uri /tomcat/isapi_redirect.dll. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2634): Using worker file d:\tecracer\software\tomcat\conf\workers.properties. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2635): Using worker mount file d:\tecracer\software\tomcat\conf\uriworkermap.properties. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2637): Using rewrite rule file . [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2639): Using uri select 3. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2640): Using no chunked encoding. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2642): Using notification event SF_NOTIFY_AUTH_COMPLETE (0x04000000) [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2652): Using uri header TOMCATURI0000000180000000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2653): Using query header TOMCATQUERY0000000180000000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2654): Using worker header TOMCATWORKER0000000180000000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2655): Using worker index TOMCATWORKERIDX0000000180000000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2656): Using translate header TOMCATTRANSLATE0000000180000000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2657): Using a default of 250 connections per pool. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/admin/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/manager/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/examples/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/jci/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_load::jk_uri_worker_map.c (1102): Loading urimaps from d:\tecracer\software\tomcat\conf\uriworkermap.properties with reload check interval 60 seconds [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/admin/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/manager/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/examples/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/jci/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (171): uri map dump after file load: index=0 file='d:\tecracer\software\tomcat\conf\uriworkermap.properties' reject_unsafe=0 reload=60 modified=1317371602 checked=1317387966 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (176): generation 0: size=0 nosize=0 capacity=0 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (176): generation 1: size=4 nosize=0 capacity=4 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #0: uri=/examples/* worker=worker1 context=/examples/* source=uriworkermap type=Wildchar len=11 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #1: uri=/manager/* worker=worker1 context=/manager/* source=uriworkermap type=Wildchar len=10 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #2: uri=/admin/* worker=worker1 context=/admin/* source=uriworkermap type=Wildchar len=8 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #3: uri=/jci/* worker=worker1 context=/jci/* source=uriworkermap type=Wildchar len=6 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property 'worker.list' with value 'worker1' to map. [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property 'worker.worker1.host' with value 'localhost' to map. [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property 'worker.worker1.port' with value '8009' to map. [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property 'worker.worker1.type' with value 'ajp13' to map. [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_resolve_references::jk_map.c (779): Checking for references with prefix worker. with wildcard (recursion 1) [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_shm_calculate_size::jk_shm.c (132): shared memory will contain 1 ajp workers of size 320 and 0 lb workers of size 320 with 0 members of size 384+320 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_shm_open::jk_shm.c (254): Initialized shared memory JKISAPISHMEM_B0621S008_1 size=448 free=320 addr=0x3e0000 [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_dump::jk_map.c (589): Dump of map: 'worker.list' -> 'worker1' [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_dump::jk_map.c (589): Dump of map: 'worker.worker1.host' -> 'localhost' [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] jk_map_dump::jk_map.c (589): Dump of map: 'worker.worker1.port' -> '8009' [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] jk_map_dump::jk_map.c (589): Dump of map: 'worker.worker1.type' -> 'ajp13' [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] build_worker_map::jk_worker.c (242): creating worker worker1 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] wc_create_worker::jk_worker.c (146): about to create instance worker1 of ajp13 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] wc_create_worker::jk_worker.c (159): about to validate and init worker1 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_validate::jk_ajp_common.c (2672): worker worker1 contact is 'localhost:8009' [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2868): setting endpoint options: [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2871): keepalive: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2875): socket timeout: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2879): socket connect timeout: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2883): buffer size: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2887): pool timeout: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2891): ping timeout: 10000 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2895): connect timeout: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2899): reply timeout: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2903): prepost timeout: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2907): recovery options: 0 [Fri Sep 30 15:06:06.367 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2911): retries: 2 [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2915): max packet size: 8192 [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] ajp_init::jk_ajp_common.c (2919): retry interval: 100 [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] ajp_create_endpoint_cache::jk_ajp_common.c (2729): setting connection pool size to 250 with min 125 and acquire timeout 200 [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] wc_get_worker_for_name::jk_worker.c (116): found a worker worker1 [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13' [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker 0: worker1 of type ajp13 (2) [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] wc_get_worker_for_name::jk_worker.c (116): found a worker worker1 [Fri Sep 30 15:06:06.382 2011] [3456:1540] [debug] wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13' [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker 1: worker1 of type ajp13 (2) [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] wc_get_worker_for_name::jk_worker.c (116): found a worker worker1 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13' [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker 2: worker1 of type ajp13 (2) [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] wc_get_worker_for_name::jk_worker.c (116): found a worker worker1 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] wc_get_name_for_type::jk_worker.c (293): Found worker type 'ajp13' [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_ext::jk_uri_worker_map.c (512): Checking extension for worker 3: worker1 of type ajp13 (2) [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (171): uri map dump after extension stripping: index=0 file='d:\tecracer\software\tomcat\conf\uriworkermap.properties' reject_unsafe=0 reload=60 modified=1317371602 checked=1317387966 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (176): generation 0: size=0 nosize=0 capacity=0 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (176): generation 1: size=4 nosize=0 capacity=4 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #0: uri=/examples/* worker=worker1 context=/examples/* source=uriworkermap type=Wildchar len=11 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #1: uri=/manager/* worker=worker1 context=/manager/* source=uriworkermap type=Wildchar len=10 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #2: uri=/admin/* worker=worker1 context=/admin/* source=uriworkermap type=Wildchar len=8 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (186): NEXT (1) map #3: uri=/jci/* worker=worker1 context=/jci/* source=uriworkermap type=Wildchar len=6 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [debug] uri_worker_map_switch::jk_uri_worker_map.c (482): Switching uri worker map from index 0 to index 1 [Fri Sep 30 15:06:06.398 2011] [3456:1540] [info] init_jk::jk_isapi_plugin.c (2781): Jakarta/ISAPI/isapi_redirector/1.2.32 () initialized [Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug] HttpFilterProc::jk_isapi_plugin.c (1891): Filter started [Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug] map_uri_to_worker_ext::jk_uri_worker_map.c (1036): Attempting to map URI '/b0621s008/jci/' from 4 maps [Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/examples/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/manager/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/admin/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/jci/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.429 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/examples/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/manager/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/admin/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (850): Attempting to map context URI '/jci/*=worker1' source 'uriworkermap' [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] find_match::jk_uri_worker_map.c (863): Found a wildchar match '/jci/*=worker1' [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the web-inf directory [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url - should redirect to worker1 [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/] [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] wc_maintain::jk_worker.c (339): Maintaining worker worker1 [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3022): Reading extension header HTTP_TOMCATWORKER0000000180000000: worker1 [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3023): Reading extension header HTTP_TOMCATWORKERIDX0000000180000000: 3 [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3024): Reading extension header HTTP_TOMCATURI0000000180000000: /jci/ [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3025): Reading extension header HTTP_TOMCATQUERY0000000180000000: (null) [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Connection : Keep-Alive [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Content-Length : 0 [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept : */* [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept-Encoding : gzip, deflate [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Accept-Language : de-DE [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header Host : b0621s008 [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727) [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1 method=GET host=fe80::3d83:4ce1:6ac:83dd%11 addr=fe80::3d83:4ce1:6ac:83dd%11 name=b0621s008 port=80 auth=Negotiate user=EUBATT\bamelas uri=/jci/ [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8 attributes=0 chunked=no content-length=0 available=0 [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] wc_get_worker_for_name::jk_worker.c (116): found a worker worker1 [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name worker1 [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool slot=0 after 0 retries [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error] ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the header value [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info] ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, without recovery [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error] HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http error 413 [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint with socket -1 (socket shutdown) [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] ajp_done::jk_ajp_common.c (3078): recycling connection pool slot=0 for worker worker1 -----Ursprüngliche Nachricht----- Von: André Warnier [mailto:a...@ice-sa.com] Gesendet: Mittwoch, 5. Oktober 2011 11:44 An: Tomcat Users List Betreff: Re: AW: ISAPI Redicect - Request Entitiy too large Addendum : can you increase the log level of isapi_redirect on the IIS server, and try again ? it may show us a bit more about what is happening. André Warnier wrote: > Alexander Diedler wrote: >> Hello, >> We use the IIS integrated (Windows) domain authentication, which is >> passed >> to the Tomcat and then we check the given String with our user >> database in >> the app and if username and password match, the user was "automatically" >> logged in (SSO). >> > > Ok, basically thanks. I just wanted to know if the NTLM authentication > dialog could explain some extra-large headers. > But in this case, apparently not, since the authentication dialog > happens between the browser and IIS, and should not even be seen in Tomcat. > (Apart from the final "Authorization:" header). > > One item in your above explanation does not fit : "username and > password" cannot be. There is no way that the IIS authentication would > produce a user password that you can pass on to Tomcat. Userid yes, > password no. > (But it does not matter for the current issue). > > Anyway, what about a difference between the workstations for which it > happens, and the ones for which it does not ? any visible OS/browser > difference ? > > >> Greetings >> Alexander >> -----Ursprüngliche Nachricht----- >> Von: André Warnier [mailto:a...@ice-sa.com] Gesendet: Mittwoch, 5. >> Oktober 2011 10:15 >> An: Tomcat Users List >> Betreff: Re: ISAPI Redicect - Request Entitiy too large >> >> Alexander Diedler wrote: >>> Hello @ll, >>> >>> I have installed a new Windows 2008 R2 x64 Server with IIS7 and Tomcat >>> 6.0.32 x64 Edition. We use SSO Authentication from IIS to the Tomcat. >> >> Which SSO mechanism ? >> >>> Suddenly, we got on some clients, but not on every client (that´s >>> stupid!) the following error: >>> >>> >>> >>> Request Entity Too large! >> >> which does look strange, considering that there is a "Content-length: 0" >> header below. >> >> It looks a bit as if a HTTP *header* in the request was too large. >> >> Repeat question : can you be a bot more specific about the authentication >> mechanism used ? >> Also, if you can determine a difference, what is the difference >> between the >> clients where it happens, and the ones where it does not ? >> >> >>> The HTTP method does not allow the data transmitted, or the data volume >>> exceeds the capacity limit. >>> >>> >>> Jakarata/ISAPI/isapi_redirector/1.2.32 () >>> >>> >>> >>> The isapi.log contains the following messages in debug mode: >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> find_match::jk_uri_worker_map.c (863): Found a wildchar match >>> '/jci/*=worker1' >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> HttpFilterProc::jk_isapi_plugin.c (1978): check if [/jci/] points to the >>> web-inf directory >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> HttpFilterProc::jk_isapi_plugin.c (1994): [/jci/] is a servlet url - >> should >>> redirect to worker1 >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> HttpFilterProc::jk_isapi_plugin.c (2034): fowarding escaped URI [/jci/] >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >> wc_maintain::jk_worker.c >>> (339): Maintaining worker worker1 >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3022): Reading extension header >>> HTTP_TOMCATWORKER0000000180000000: worker1 >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3023): Reading extension header >>> HTTP_TOMCATWORKERIDX0000000180000000: 3 >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3024): Reading extension header >>> HTTP_TOMCATURI0000000180000000: /jci/ >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3025): Reading extension header >>> HTTP_TOMCATQUERY0000000180000000: (null) >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3085): Applying service extensions >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header >>> Connection : Keep-Alive >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header >>> Content-Length : 0 >>> >>> [Fri Sep 30 15:06:08.445 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header >> Accept >>> : */* >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header >>> Accept-Encoding : gzip, deflate >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header >>> Accept-Language : de-DE >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header >>> Host >> : >>> b0621s008 >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3309): Forwarding request header >>> User-Agent : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; >>> Trident/4.0; SLCC2; .NET CLR 2.0.50727) >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3344): Service protocol=HTTP/1.1 >>> method=GET host=fe80::3d83:4ce1:6ac:83dd%11 >> addr=fe80::3d83:4ce1:6ac:83dd%11 >>> name=b0621s008 port=80 auth=Negotiate user=DOMAIN\USERNAME uri=/jci/ >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> init_ws_service::jk_isapi_plugin.c (3356): Service request headers=8 >>> attributes=0 chunked=no content-length=0 available=0 >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> wc_get_worker_for_name::jk_worker.c (116): found a worker worker1 >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> HttpExtensionProc::jk_isapi_plugin.c (2228): got a worker for name >>> worker1 >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> ajp_get_endpoint::jk_ajp_common.c (3161): acquired connection pool >>> slot=0 >>> after 0 retries >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error] >>> ajp_marshal_into_msgb::jk_ajp_common.c (469): failed appending the >>> header >>> value >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [info] >>> ajp_service::jk_ajp_common.c (2431): Creating AJP message failed, >>> without >>> recovery >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [error] >>> HttpExtensionProc::jk_isapi_plugin.c (2261): service() failed with http >>> error 413 >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >>> ajp_reset_endpoint::jk_ajp_common.c (807): (worker1) resetting endpoint >> with >>> socket -1 (socket shutdown) >>> >>> [Fri Sep 30 15:06:08.460 2011] [3456:1540] [debug] >> ajp_done::jk_ajp_common.c >>> (3078): recycling connection pool slot=0 for worker worker1 >>> >>> >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
smime.p7s
Description: S/MIME cryptographic signature
