You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "antongiulio05@gmail.com" <an...@gmail.com> on 2010/06/08 21:27:08 UTC
HyperLink Office connection
Hi,
I have a webapp (Spring+Hibernate) running on Tomcat 5.5.15. Tomcat is configured for Single-Sign-On and it works fine with the login system of the application (typical login/password).
Anyway at the moment it's not well working when an external link is executed from a Word file (Microsoft Office 2003/2007 - more info here: http://support.microsoft.com/kb/899927).
Basically when the link requires a protected page, normally the user is redirected to the login page and, after a successful login, the page should be displayed. But it happens only if the user Copy&Paste the link on the browser URL bar. Instead, if he clicks on the Word file after the login, he is redirected to the default home page.
I debugged the application, browser cookies and http sessions and it looks like another session is created:
1) when the link is sent ("200") to the application
2) it returns "302" http status and JSESSIONID (strangely this value is always the same)
2) Word requires connection again ("200")
3) A new JSESSIONID cookie is created differently from the 1) and returns "200"
the changed session of course cause of the application fails the redirection after login.
How can I configure Tomcat to make it work with this kind of connection and keeping on work with the usual login via browser?
Thanks,
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: HyperLink Office connection
Posted by Martin Gainty <mg...@hotmail.com>.
Another pure java based altearnative would be if you all you need is a servlet that reads/writes Microsoft Compound Documents write a POI based servlet?
http://poi.apache.org/casestudies.html
Martin
______________________________________________
Verzicht und Vertraulichkeitanmerkung/Note de déni et de confidentialité
Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut être privilégié. Si vous n'êtes pas le destinataire prévu, nous te demandons avec bonté que pour satisfaire informez l'expéditeur. N'importe quelle diffusion non autorisée ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni.
> Date: Wed, 9 Jun 2010 21:25:41 +0200
> From: aw@ice-sa.com
> To: users@tomcat.apache.org
> Subject: Re: HyperLink Office connection
>
> Caldarale, Charles R wrote:
> >> From: Christopher Schultz [mailto:chris@christopherschultz.net]
> >> Subject: Re: HyperLink Office connection
> >>
> >> Or do you mean that Word has some kind of embedded web
> >> browser (almost certainly MSIE).
> >
> > Yes, MS Office products have done this for ages. IE is a just a rendering engine that can be invoked by pretty much any program to display HTML in any window the program provides. I think it's running as a separate child process rather than in-process, but I'm not positive about that.
> >
> Probably that is what is happening. Word has some embedded "browser
> capability" (using a part of IE's DLL's), but it probably does not
> support the full set of IE capabilities (like cookies e.g), which may be
> the reason of the OP's problem.
>
> Antonio :
> When Word is doing the login, Tomcat returns a re-direct response to the
> original requested page, along with a "Set-Cookie" header containing the
> session-id. However, Word does not take this Set-Cookie header into
> account, and does not send the Cookie header when it re-requests the
> protected page. So Tomcat thinks this is a new session, and sends the
> request somewhere else.
> Or something of the kind.
>
> You nmay have better luck using the setup whereby Tomcat does not use
> session-id cookies, but embeds the session-id in the URL. Someone here
> should intervene, and tell you how to achieve this.
>
> Anyway, this is all quite inelegant, and likely to cause variable
> behaviour depending on which browser version is installed, which local
> software is installed, which DLLs and so on.
> If this whole thing is supposed to work inside a local Windows-based
> network, for Windows workstations and users already logged-in into the
> Windows domain, then I would suggest that you redesign your scheme to
> work using the Windows Integrated Authentication (aka NTLM).
> I have not tried it, but I am quite sure that MS-Word will support this,
> and there are several solutions for supporting this in Tomcat.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
_________________________________________________________________
The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multiaccount&ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4
Re: HyperLink Office connection
Posted by André Warnier <aw...@ice-sa.com>.
Caldarale, Charles R wrote:
>> From: Christopher Schultz [mailto:chris@christopherschultz.net]
>> Subject: Re: HyperLink Office connection
>>
>> Or do you mean that Word has some kind of embedded web
>> browser (almost certainly MSIE).
>
> Yes, MS Office products have done this for ages. IE is a just a rendering engine that can be invoked by pretty much any program to display HTML in any window the program provides. I think it's running as a separate child process rather than in-process, but I'm not positive about that.
>
Probably that is what is happening. Word has some embedded "browser
capability" (using a part of IE's DLL's), but it probably does not
support the full set of IE capabilities (like cookies e.g), which may be
the reason of the OP's problem.
Antonio :
When Word is doing the login, Tomcat returns a re-direct response to the
original requested page, along with a "Set-Cookie" header containing the
session-id. However, Word does not take this Set-Cookie header into
account, and does not send the Cookie header when it re-requests the
protected page. So Tomcat thinks this is a new session, and sends the
request somewhere else.
Or something of the kind.
You nmay have better luck using the setup whereby Tomcat does not use
session-id cookies, but embeds the session-id in the URL. Someone here
should intervene, and tell you how to achieve this.
Anyway, this is all quite inelegant, and likely to cause variable
behaviour depending on which browser version is installed, which local
software is installed, which DLLs and so on.
If this whole thing is supposed to work inside a local Windows-based
network, for Windows workstations and users already logged-in into the
Windows domain, then I would suggest that you redesign your scheme to
work using the Windows Integrated Authentication (aka NTLM).
I have not tried it, but I am quite sure that MS-Word will support this,
and there are several solutions for supporting this in Tomcat.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
> And in this new browser tab, you get the login form ?
Yes
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by André Warnier <aw...@ice-sa.com>.
antonio giulio wrote:
>> How have you configured your login form?
>> Please include it's path/filename, the definition in web.xml, and the
> raw HTML for the login form itself.
>
> I don't get what u mean exactly. Anyway I used Spring-Security 2.0.5
> but I have not the code with me right now.
>
>> Can you confirm what happens when you click the URL in Word?
>> Is it as Chris/Chuck asked opening in an embedded browser in Word, or
>> does it launch a new tab/window in the default OS web browser?
>
> When I click it launches a new tab in the default OS web browser (or
> new browser instance if not any)
>
And in this new browser tab, you get the login form ?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
Hi Andrè,
yes I know the "route" is very long tho at this point I don't see many
alternatives.
The "200" returned to Office with the same path of the first request
(changing "http" to "https") make it working with one session only.
I have not the Office's specification for this communication (maybe
are "closed" cos I didn't find anything about it) but I suspect that
every value returned but "200" cause Office creates a new session and
if you close the communication after the first request, Word returns
an error-popup about connection (no good for the customers of course).
The only points where I can see possible improvements are:
1) Avoiding CGI, and working directly in the "httpd.conf" with some
mod_* (I don't know what)
2) Using C instead of Perl for the CGI
3) Some way to pass through Tomcat and maybe the application (but I
cannot see a real gain respect to the CGI)
Any hints?
On 10 June 2010 18:36, André Warnier <aw...@ice-sa.com> wrote:
> Hi.
>
> I am glad that you found a solution that works for you, and maybe the most
> important at this point is that it quickly solves your problem.
>
> About the solution below however, I want to point out that it is rather
> "expensive" in many respects, and I hope that this is not supposed to be a
> high-volume server.
> What is happening in your schema is :
> - Word requests a page by sending a HTTP request to the server (directly, or
> going through some IE functionality)
> - the server gets the request
> - the server starts a new separate perl interpreter process
> - the perl interpreter compiles your script
> - the perl interpreter runs your script, producing the initial html
> response, and exits
> - Apache reads the response from perl and sends it to the browser
> - the browser (or Word) receives the html page
> - the browser (or Word) interprets the refresh header, and makes a new
> request to the server
> - the server now processes what should have been the original request
>
> I am a fan of Apache and perl myself, but you may want to revise this a bit
> if this is supposed to handle many clients.
>
>
> antonio giulio wrote:
>>
>> Hi Andre',
>>
>> thanks for the offer, you are right, at this point is off-topic,
>> anyway I solved (sorry for the OT) all in Apache-httpd:
>>
>> on the virtual host configuration:
>>
>> RewriteEngine on
>> ReWriteCond %{SERVER_PORT} !^443$
>> RewriteRule (.*) https://%{HTTP_HOST}/cgi-bin/redirect.pl$1
>>
>> and the simple redirect.pl in the cgi-bin/ is:
>>
>> #!/usr/bin/perl
>> $uri = $ENV{'REQUEST_URI'};
>> $context = substr $uri, 27;
>> $url = "https://$ENV{'HTTP_HOST'}$context";
>>
>> print "Content-type:text/html\r\n\r\n";
>> print "<html>";
>> print "<head>";
>> print "<meta http-equiv=\"refresh\" content=\"0;url=$url\" />";
>> print "</head>";
>> print "<body>";
>> print "</body>";
>> print "</html>";
>>
>> 1;
>>
>> basically the address:
>>
>> http://mycompany.com/rest_of_the_url
>>
>> is redirect from the RewriteRule to:
>>
>> https://mycompany.com/cgi-bin/redirect.pl/rest_of_the_url
>>
>> and the redirect.pl just retrieve rest_of_the_url string and compose
>> the new string.
>> The html returned has:
>>
>> <meta http-equiv=\"refresh\" content=\"0;url=$url\" />
>>
>> meta-refresh sends back to Office/Word 200, and this time Office can
>> open correctly the browser returned in the <meta />
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by André Warnier <aw...@ice-sa.com>.
Hi.
I am glad that you found a solution that works for you, and maybe the
most important at this point is that it quickly solves your problem.
About the solution below however, I want to point out that it is rather
"expensive" in many respects, and I hope that this is not supposed to be
a high-volume server.
What is happening in your schema is :
- Word requests a page by sending a HTTP request to the server
(directly, or going through some IE functionality)
- the server gets the request
- the server starts a new separate perl interpreter process
- the perl interpreter compiles your script
- the perl interpreter runs your script, producing the initial html
response, and exits
- Apache reads the response from perl and sends it to the browser
- the browser (or Word) receives the html page
- the browser (or Word) interprets the refresh header, and makes a new
request to the server
- the server now processes what should have been the original request
I am a fan of Apache and perl myself, but you may want to revise this a
bit if this is supposed to handle many clients.
antonio giulio wrote:
> Hi Andre',
>
> thanks for the offer, you are right, at this point is off-topic,
> anyway I solved (sorry for the OT) all in Apache-httpd:
>
> on the virtual host configuration:
>
> RewriteEngine on
> ReWriteCond %{SERVER_PORT} !^443$
> RewriteRule (.*) https://%{HTTP_HOST}/cgi-bin/redirect.pl$1
>
> and the simple redirect.pl in the cgi-bin/ is:
>
> #!/usr/bin/perl
> $uri = $ENV{'REQUEST_URI'};
> $context = substr $uri, 27;
> $url = "https://$ENV{'HTTP_HOST'}$context";
>
> print "Content-type:text/html\r\n\r\n";
> print "<html>";
> print "<head>";
> print "<meta http-equiv=\"refresh\" content=\"0;url=$url\" />";
> print "</head>";
> print "<body>";
> print "</body>";
> print "</html>";
>
> 1;
>
> basically the address:
>
> http://mycompany.com/rest_of_the_url
>
> is redirect from the RewriteRule to:
>
> https://mycompany.com/cgi-bin/redirect.pl/rest_of_the_url
>
> and the redirect.pl just retrieve rest_of_the_url string and compose
> the new string.
> The html returned has:
>
> <meta http-equiv=\"refresh\" content=\"0;url=$url\" />
>
> meta-refresh sends back to Office/Word 200, and this time Office can
> open correctly the browser returned in the <meta />
>
> Thanks,
> Julio
>
> On 10 June 2010 11:52, André Warnier <aw...@ice-sa.com> wrote:
>> antonio giulio wrote:
>>>> N.B. If Office is handling the connection requests up to some step,
>>>> then Tomcat can't do anything about it - the problem is occuring before
>>>> Tomcat has any influence over the situation.
>>> Yes, Unfortunely I think you are right. A solution maybe could be
>>> writing a CGI for Apache and redirect there the connection and change
>>> HTTP-headers to communicate with Office.
>>>
>> Julio,
>> I also believe that this is a bit off-topic for this list.
>> But what you are trying to do does not seem very exotic, and I am interested
>> in the topic, and I think that I can help you.
>> So if you want to continue this discussion off-list, send me an email
>> directly.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
Hi Andre',
thanks for the offer, you are right, at this point is off-topic,
anyway I solved (sorry for the OT) all in Apache-httpd:
on the virtual host configuration:
RewriteEngine on
ReWriteCond %{SERVER_PORT} !^443$
RewriteRule (.*) https://%{HTTP_HOST}/cgi-bin/redirect.pl$1
and the simple redirect.pl in the cgi-bin/ is:
#!/usr/bin/perl
$uri = $ENV{'REQUEST_URI'};
$context = substr $uri, 27;
$url = "https://$ENV{'HTTP_HOST'}$context";
print "Content-type:text/html\r\n\r\n";
print "<html>";
print "<head>";
print "<meta http-equiv=\"refresh\" content=\"0;url=$url\" />";
print "</head>";
print "<body>";
print "</body>";
print "</html>";
1;
basically the address:
http://mycompany.com/rest_of_the_url
is redirect from the RewriteRule to:
https://mycompany.com/cgi-bin/redirect.pl/rest_of_the_url
and the redirect.pl just retrieve rest_of_the_url string and compose
the new string.
The html returned has:
<meta http-equiv=\"refresh\" content=\"0;url=$url\" />
meta-refresh sends back to Office/Word 200, and this time Office can
open correctly the browser returned in the <meta />
Thanks,
Julio
On 10 June 2010 11:52, André Warnier <aw...@ice-sa.com> wrote:
> antonio giulio wrote:
>>>
>>> N.B. If Office is handling the connection requests up to some step,
>>> then Tomcat can't do anything about it - the problem is occuring before
>>> Tomcat has any influence over the situation.
>>
>> Yes, Unfortunely I think you are right. A solution maybe could be
>> writing a CGI for Apache and redirect there the connection and change
>> HTTP-headers to communicate with Office.
>>
> Julio,
> I also believe that this is a bit off-topic for this list.
> But what you are trying to do does not seem very exotic, and I am interested
> in the topic, and I think that I can help you.
> So if you want to continue this discussion off-list, send me an email
> directly.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by André Warnier <aw...@ice-sa.com>.
antonio giulio wrote:
>> N.B. If Office is handling the connection requests up to some step,
>> then Tomcat can't do anything about it - the problem is occuring before
>> Tomcat has any influence over the situation.
>
> Yes, Unfortunely I think you are right. A solution maybe could be
> writing a CGI for Apache and redirect there the connection and change
> HTTP-headers to communicate with Office.
>
Julio,
I also believe that this is a bit off-topic for this list.
But what you are trying to do does not seem very exotic, and I am
interested in the topic, and I think that I can help you.
So if you want to continue this discussion off-list, send me an email
directly.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
> N.B. If Office is handling the connection requests up to some step,
> then Tomcat can't do anything about it - the problem is occuring before
> Tomcat has any influence over the situation.
Yes, Unfortunely I think you are right. A solution maybe could be
writing a CGI for Apache and redirect there the connection and change
HTTP-headers to communicate with Office.
Thanks,
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by Pid <pi...@pidster.com>.
On 10/06/2010 10:31, antonio giulio wrote:
> No proxy for the browser.
>
> I try to describe better with header stuff steps:
>
> 1) When the user click on link the request for the URL is sent by Office/Word
> 2) Office/Word connect 200 to the server
> 3) Server sends back 302 http status and a redirect on the "Location:
> /login-page"
> 4) Office/Word cause of 302 try to connect again and gets 200
> 5) Server sends 200 and Location: /login-page
Servers don't send 200 and a Location header, are you sure this is
what's happening?
> 6) Now the web broser page is open on the /login-page
You said earlier this stuff occurred in the OS browser?
At which step does it switch to a OS browser window?
N.B. If Office is handling the connection requests up to some step,
then Tomcat can't do anything about it - the problem is occuring before
Tomcat has any influence over the situation.
p
> There is a common JSESSIONID for the steps 1-5 and a new JSESSIONID for 6
>
> Julio
>
> On 10 June 2010 10:12, Pid <pi...@pidster.com> wrote:
>> On 09/06/2010 22:33, antonio giulio wrote:
>>>> How have you configured your login form?
>>>> Please include it's path/filename, the definition in web.xml, and the
>>> raw HTML for the login form itself.
>>>
>>> I don't get what u mean exactly. Anyway I used Spring-Security 2.0.5
>>> but I have not the code with me right now.
>>
>> Sorry, I missed that.
>>
>>>> Can you confirm what happens when you click the URL in Word?
>>>> Is it as Chris/Chuck asked opening in an embedded browser in Word, or
>>>> does it launch a new tab/window in the default OS web browser?
>>>
>>> When I click it launches a new tab in the default OS web browser (or
>>> new browser instance if not any)
>>
>> Is the browser configured to use a proxy / what proxy settings does the
>> browser have?
>>
>>
>> p
>>
>>
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
> How have you configured your login form?
> Please include it's path/filename, the definition in web.xml, and the
raw HTML for the login form itself.
I don't get what u mean exactly. Anyway I used Spring-Security 2.0.5
but I have not the code with me right now.
> Can you confirm what happens when you click the URL in Word?
> Is it as Chris/Chuck asked opening in an embedded browser in Word, or
> does it launch a new tab/window in the default OS web browser?
When I click it launches a new tab in the default OS web browser (or
new browser instance if not any)
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by Pid <pi...@pidster.com>.
On 09/06/2010 20:21, antonio giulio wrote:
> When u click on the link a browser is open (my deafult browser is
> firefox but with IE is the same)
> Basically it looks at me this:
>
> the browser starts one session and so tomcat generate a jsessionid-cookie
> Word (Office) open a parallel connection with the same server, so
> tomcat create a new jsessionid.
Can you confirm what happens when you click the URL in Word?
Is it as Chris/Chuck asked opening in an embedded browser in Word, or
does it launch a new tab/window in the default OS web browser?
p
LBFAS
> more info here http://support.microsoft.com/kb/899927
>
> the application is "confused" cos it looks like 2 sessions are
> generated for the same request and "delete" the cached value session.
>
> I need to "join" the 2 jsessionid basically to be only one session
>
> for Microsoft the SingleSignOn process is not the right way
> communicate with "Office"
>
> Julio
>
> On 9 June 2010 19:30, Caldarale, Charles R <Ch...@unisys.com> wrote:
>>> From: Christopher Schultz [mailto:chris@christopherschultz.net]
>>> Subject: Re: HyperLink Office connection
>>>
>>> Or do you mean that Word has some kind of embedded web
>>> browser (almost certainly MSIE).
>>
>> Yes, MS Office products have done this for ages. IE is a just a rendering engine that can be invoked by pretty much any program to display HTML in any window the program provides. I think it's running as a separate child process rather than in-process, but I'm not positive about that.
>>
>> - Chuck
>>
>>
>> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
When u click on the link a browser is open (my deafult browser is
firefox but with IE is the same)
Basically it looks at me this:
the browser starts one session and so tomcat generate a jsessionid-cookie
Word (Office) open a parallel connection with the same server, so
tomcat create a new jsessionid.
more info here http://support.microsoft.com/kb/899927
the application is "confused" cos it looks like 2 sessions are
generated for the same request and "delete" the cached value session.
I need to "join" the 2 jsessionid basically to be only one session
for Microsoft the SingleSignOn process is not the right way
communicate with "Office"
Julio
On 9 June 2010 19:30, Caldarale, Charles R <Ch...@unisys.com> wrote:
>> From: Christopher Schultz [mailto:chris@christopherschultz.net]
>> Subject: Re: HyperLink Office connection
>>
>> Or do you mean that Word has some kind of embedded web
>> browser (almost certainly MSIE).
>
> Yes, MS Office products have done this for ages. IE is a just a rendering engine that can be invoked by pretty much any program to display HTML in any window the program provides. I think it's running as a separate child process rather than in-process, but I'm not positive about that.
>
> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: HyperLink Office connection
Posted by "Caldarale, Charles R" <Ch...@unisys.com>.
> From: Christopher Schultz [mailto:chris@christopherschultz.net]
> Subject: Re: HyperLink Office connection
>
> Or do you mean that Word has some kind of embedded web
> browser (almost certainly MSIE).
Yes, MS Office products have done this for ages. IE is a just a rendering engine that can be invoked by pretty much any program to display HTML in any window the program provides. I think it's running as a separate child process rather than in-process, but I'm not positive about that.
- Chuck
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.
Re: HyperLink Office connection
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Julio,
On 6/9/2010 1:42 PM, antonio giulio wrote:
>> So the problem is that you click a URL:
>>
>> http://site/path/to/page
>>
>> and after login in one case you end up that page, but in another case
>> you end up instead at:
>>
>> http://site/
>>
>> ?
>
> Yes exactly.
That's very weird. When you say that Word "opens the page", do you mean
that is opens-up the default web browser (Firefox or MSIE?) and loads
that URL? Or do you mean that Word has some kind of embedded web browser
(almost certainly MSIE).
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkwP3MIACgkQ9CaO5/Lv0PBFFACfVIIpWFFA5ZA2ATpeaiuoesXl
kQ0AoJ+VtNc5G+W3KakLeqadtKhoocLg
=cOde
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by Pid <pi...@pidster.com>.
On 09/06/2010 18:42, antonio giulio wrote:
>> So the problem is that you click a URL:
>>
>> http://site/path/to/page
>>
>> and after login in one case you end up that page, but in another case
>> you end up instead at:
>>
>> http://site/
>>
>> ?
>
> Yes exactly.
>
> http://site/ is the default page in the application if none is
> required. Anyway at the beginning of the session
> http://site/path/to/page is cached but it is lost cos a different
> session with different jsessionid begins (application debugged).
> Otherwise it works fine if the url is pasted on the browser url-bar.
How have you configured your login form?
Please include it's path/filename, the definition in web.xml, and the
raw HTML for the login form itself.
p
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
> So the problem is that you click a URL:
>
> http://site/path/to/page
>
> and after login in one case you end up that page, but in another case
> you end up instead at:
>
> http://site/
>
> ?
Yes exactly.
http://site/ is the default page in the application if none is
required. Anyway at the beginning of the session
http://site/path/to/page is cached but it is lost cos a different
session with different jsessionid begins (application debugged).
Otherwise it works fine if the url is pasted on the browser url-bar.
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by Pid <pi...@pidster.com>.
On 09/06/2010 17:28, antonio giulio wrote:
> Hi,
>
> No, they are not already logged.
>
> Sorry for my bad scenario's description. I try to clear it:
> The application is a Web application developed with Spring 2.5
> /Spring-Security 2.0.5/ Hibernate 3.2.
> At the moment it's running on a remote machine with tomcat 5.5.15 (I
> will update it soon) RHEL 4. On the same machine run apache 2.0.*.
>
> Locally I use the browser Firefox 3.6.3 (same problem with IE 8
> anyway) and this Word-file with well-formed links:
>
> http//... etc
>
> If I copy and paste one of these links on the browser I redirected to
> the login page and after login the right page is displayed (it's a
> protected resource).
> If I click on this hyperlink directly on word (without be already
> logged), broswer is open automatically with login page on. But after
> login it return me to the default home page (debugging the application
> it happens cos jsessionid changes)
So the problem is that you click a URL:
http://site/path/to/page
and after login in one case you end up that page, but in another case
you end up instead at:
http://site/
?
p
> The http.conf is configured for the proxy like this:
>
> ProxyRequests off
> ProxyPass mycompany.com localhost:8080
> ProxyPassReverse mycompany.com localhost:8080
>
> this defines how apache changes http to https:
>
> #Load Tomcat Conector Module
> LoadModule jk_module modules/mod_jk-apache-2.0.49-linux-i686.so
>
> # Where to find workers.properties
> JkWorkersFile /etc/httpd/conf.d/workers.properties
> # Where to put jk shared memory
> JkShmFile /var/log/httpd/mod_jk-prod2.shm
> # Where to put jk logs
> JkLogFile /var/log/httpd/mod_jk-prod2.log
> # Set the jk log level [debug/error/info]
> JkLogLevel info
> # Select the timestamp log format
> JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
>
> NameVirtualHost *:80
> <VirtualHost *:80>
> ServerName mycompany.com
> ServerAdmin dev@mycompany.com
> JkMount /main* worker1
> JkMount /manager* worker1
> #DocumentRoot /var/www/html/maintenance
> DocumentRoot /var/www/html/mvcprox
> RewriteEngine on
> ReWriteCond %{SERVER_PORT} !^443$
> RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
> </virtualHost>
>
> <VirtualHost *:80>
> ServerName 192.168.173.19
> ServerAdmin dev@mycompany.com
> DocumentRoot /var/www/html/nightlybuild
> </virtualHost>
>
>
> Listen 88
> <VirtualHost *:88>
> ServerName mycompany.com
> DocumentRoot /var/www/html/nightlybuild
> </VirtualHost>
>
> finally server.xml for tomcat:
>
> <Server port="8005" shutdown="SHUTDOWN"
> maxHttpHeaderSize="8192"
> maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
> enableLookups="false" redirectPort="8443" acceptCount="100"
> connectionTimeout="20000" disableUploadTimeout="true"
> useBodyEncodingForURI="true" >
>
> <GlobalNamingResources>
> <!-- Used by Manager webapp -->
> <Resource name="UserDatabase" auth="Container"
> type="org.apache.catalina.UserDatabase"
> description="User database that can be updated and saved"
> factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
> pathname="conf/tomcat-users.xml" />
> </GlobalNamingResources>
>
> <Service name="Catalina">
> <Connector port="8080"
> ProxyName="mycompany.com"
> ProxyPort="80"
> />
>
> <!-- This is here for compatibility only, not required -->
> <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
>
> <Connector port="8443" maxHttpHeaderSize="8192"
> maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
> enableLookups="false" disableUploadTimeout="true"
> acceptCount="100" scheme="https" secure="true"
> clientAuth="false" sslProtocol="TLS" />
>
> <Engine name="Catalina" defaultHost="localhost">
> <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
> resourceName="UserDatabase" />
> <Host name="localhost" appBase="/app/mycompany/webapps"
> unpackWARs="true" autoDeploy="true"
> xmlValidation="false" xmlNamespaceAware="false"
> deployXML="true" />
> </Engine>
>
> </Service>
> </Server>
>
> After click on a link, I have something like the session described
> before between MS-Word and the server with a specific JSESSIONID in
> the headers of the protocols and browser session with another cookie
> with different JSESSIONID
>
> thanks,
> Julio
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
Hi,
No, they are not already logged.
Sorry for my bad scenario's description. I try to clear it:
The application is a Web application developed with Spring 2.5
/Spring-Security 2.0.5/ Hibernate 3.2.
At the moment it's running on a remote machine with tomcat 5.5.15 (I
will update it soon) RHEL 4. On the same machine run apache 2.0.*.
Locally I use the browser Firefox 3.6.3 (same problem with IE 8
anyway) and this Word-file with well-formed links:
http//... etc
If I copy and paste one of these links on the browser I redirected to
the login page and after login the right page is displayed (it's a
protected resource).
If I click on this hyperlink directly on word (without be already
logged), broswer is open automatically with login page on. But after
login it return me to the default home page (debugging the application
it happens cos jsessionid changes)
The http.conf is configured for the proxy like this:
ProxyRequests off
ProxyPass mycompany.com localhost:8080
ProxyPassReverse mycompany.com localhost:8080
this defines how apache changes http to https:
#Load Tomcat Conector Module
LoadModule jk_module modules/mod_jk-apache-2.0.49-linux-i686.so
# Where to find workers.properties
JkWorkersFile /etc/httpd/conf.d/workers.properties
# Where to put jk shared memory
JkShmFile /var/log/httpd/mod_jk-prod2.shm
# Where to put jk logs
JkLogFile /var/log/httpd/mod_jk-prod2.log
# Set the jk log level [debug/error/info]
JkLogLevel info
# Select the timestamp log format
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
NameVirtualHost *:80
<VirtualHost *:80>
ServerName mycompany.com
ServerAdmin dev@mycompany.com
JkMount /main* worker1
JkMount /manager* worker1
#DocumentRoot /var/www/html/maintenance
DocumentRoot /var/www/html/mvcprox
RewriteEngine on
ReWriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
</virtualHost>
<VirtualHost *:80>
ServerName 192.168.173.19
ServerAdmin dev@mycompany.com
DocumentRoot /var/www/html/nightlybuild
</virtualHost>
Listen 88
<VirtualHost *:88>
ServerName mycompany.com
DocumentRoot /var/www/html/nightlybuild
</VirtualHost>
finally server.xml for tomcat:
<Server port="8005" shutdown="SHUTDOWN"
maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" redirectPort="8443" acceptCount="100"
connectionTimeout="20000" disableUploadTimeout="true"
useBodyEncodingForURI="true" >
<GlobalNamingResources>
<!-- Used by Manager webapp -->
<Resource name="UserDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="User database that can be updated and saved"
factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
pathname="conf/tomcat-users.xml" />
</GlobalNamingResources>
<Service name="Catalina">
<Connector port="8080"
ProxyName="mycompany.com"
ProxyPort="80"
/>
<!-- This is here for compatibility only, not required -->
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />
<Engine name="Catalina" defaultHost="localhost">
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase" />
<Host name="localhost" appBase="/app/mycompany/webapps"
unpackWARs="true" autoDeploy="true"
xmlValidation="false" xmlNamespaceAware="false"
deployXML="true" />
</Engine>
</Service>
</Server>
After click on a link, I have something like the session described
before between MS-Word and the server with a specific JSESSIONID in
the headers of the protocols and browser session with another cookie
with different JSESSIONID
thanks,
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by André Warnier <aw...@ice-sa.com>.
Pid wrote:
> On 09/06/2010 15:49, antonio giulio wrote:
>> Ok finally I got access to tweak apache, and after different tests it
>> doesn't look be the cause.
>> So I ask you, does it exist a way to force tomcat working with the
>> same JSESSIONID generated for the client session?
>
> I'm not sure this is anything to do with Tomcat.
>
> The logs before showed the "CONNECT" method being used for the broken
> connection, probably indicating that a proxy was in use.
>
> If the proxy doesn't pass the cookie, then you'll get the login form.
>
> The source of the problem seems to be the browser (or whatever client
> you're using) here, not Tomcat. No amount of fiddling with Tomcat will
> get you what you want if the client isn't playing ball.
>
>
> Can you explain in detail what occurs when a user clicks the link in the
> Word doc? Are they already logged into the app?
>
Let me guess :
The user connects to the website with a browser, and logs in to some
application. They then search and get a link to some Word document,
which they click. The Word document is downloaded, and opened on their
workstation, by MS-Word.
The Word document contains a URL link, to the same website.
Now the OP would like that when this user clicks on the link, they
obtain this new (protected) resource, by virtue of having already
logged-in to the website in the browser before.
Is that the correct scenario ?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by Pid <pi...@pidster.com>.
On 09/06/2010 15:49, antonio giulio wrote:
> Ok finally I got access to tweak apache, and after different tests it
> doesn't look be the cause.
> So I ask you, does it exist a way to force tomcat working with the
> same JSESSIONID generated for the client session?
I'm not sure this is anything to do with Tomcat.
The logs before showed the "CONNECT" method being used for the broken
connection, probably indicating that a proxy was in use.
If the proxy doesn't pass the cookie, then you'll get the login form.
The source of the problem seems to be the browser (or whatever client
you're using) here, not Tomcat. No amount of fiddling with Tomcat will
get you what you want if the client isn't playing ball.
Can you explain in detail what occurs when a user clicks the link in the
Word doc? Are they already logged into the app?
p
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
Ok finally I got access to tweak apache, and after different tests it
doesn't look be the cause.
So I ask you, does it exist a way to force tomcat working with the
same JSESSIONID generated for the client session?
Thanks,
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
Hi,
thanks for the reply. From your replies I got a new doubt. Maybe the
problem is in the Apache conf and not (or not only) in the Tomcat
conf.
This is a more concrete log when a link is clicked on the Word file
with relatives client/server communitcation:
# Result Protocol Host URL Body Caching Content-Type User-defined
1 302 HTTP mycompany.com /main/subscription/renewer.cis?action=overview&entry_id=4468 478 text/html;
charset=iso-8859-1
2 200 HTTP CONNECT mycompany.com:443 0
3 302 <HTTPS mycompany.com /main/subscription/renewer.cis?action=overview&entry_id=4468 0 text/plain;
charset=UTF-8
4 200 HTTP CONNECT mycompany.com:443 0
5 200 <HTTPS mycompany.com /main/login.cis 5,102 no-cache Expires:
Thu, 01 Jan 1970 00:00:00 GMT text/html;charset=ISO-8859-1
#3 & #5 have 2 different JSESSIONID generated
Here http://www.apachetutor.org/admin/reverseproxies I found that one
of the possible origins for the "302" response and relative lost of
session could be
/main/subscription/renewer.cis?action=overview&entry_id=4468 returned
incomplete cos of missing (in my case) configuration for
mod_proxy_http. Unfortunely at the moment I have no writing access to
the conf (internal company policies) so I cannot test it.
Could be it a reason of I should "tweak" tomcat anyway?
This is one of the Tomcat file I found configured (server-minimal.xml):
<Server port="8005" shutdown="SHUTDOWN">
<GlobalNamingResources>
<!-- Used by Manager webapp -->
<Resource name="UserDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="User database that can be updated and saved"
factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
pathname="conf/tomcat-users.xml" />
</GlobalNamingResources>
<Service name="Catalina">
<Connector port="8080" />
<!-- This is here for compatibility only, not required -->
<Connector port="8009" protocol="AJP/1.3" />
<Engine name="Catalina" defaultHost="localhost">
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase" />
<Host name="localhost" appBase="webapps" />
</Engine>
</Service>
</Server>
Thanks,
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by André Warnier <aw...@ice-sa.com>.
antongiulio05@gmail.com wrote:
> Hi,
>
> I have a webapp (Spring+Hibernate) running on Tomcat 5.5.15. Tomcat is configured for Single-Sign-On and it works fine with the login system of the application (typical login/password).
>
> Anyway at the moment it's not well working when an external link is executed from a Word file (Microsoft Office 2003/2007 - more info here: http://support.microsoft.com/kb/899927).
> Basically when the link requires a protected page, normally the user is redirected to the login page and, after a successful login, the page should be displayed. But it happens only if the user Copy&Paste the link on the browser URL bar. Instead, if he clicks on the Word file after the login, he is redirected to the default home page.
>
> I debugged the application, browser cookies and http sessions and it looks like another session is created:
>
> 1) when the link is sent ("200") to the application
> 2) it returns "302" http status and JSESSIONID (strangely this value is always the same)
> 2) Word requires connection again ("200")
> 3) A new JSESSIONID cookie is created differently from the 1) and returns "200"
>
> the changed session of course cause of the application fails the redirection after login.
>
> How can I configure Tomcat to make it work with this kind of connection and keeping on work with the usual login via browser?
>
Without really digging deep into it, my first impression is that this
will not work, for the following reason :
Your Word instance is a different process than the browser, and it makes
its own connection to the server, distinct from the connection the
browser makes. The server "senses" this, and creates a new session.
Or else (but similar in the effect), to retrieve this document, Word
calls the browser with this URL, and the browser makes a new connection
to the server to retrieve it.
You could try forcing Tomcat to not use cookies, and put the session-id
in the URL (I forget how to do this, but someone here knows and will
tell us).
But even so, I think that the whole scheme is rather flaky, because its
behaviour will be unstable in front of the various combinations of
workstations and browsers, and how they handle this.
If you describe the application a bit more in detail, someone here might
be able to suggest a scheme that works better.
For example, you mention Microsoft Office. Does that mean that all your
potential users are going to be accessing this from Windows
workstations, all of them logged-in in a Windows domain, and that your
server is also in that Windows domain ?
And are the Word document static documents, or are they being generated
on-the-fly for this one logged-in user ?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by antonio giulio <an...@gmail.com>.
Hi Christopher,
> Can you give us an example of a URL that looks like it should work from
> Word (but doesn't) but does work properly when you copy/paste?
http://mycompany.com/main/subscription/renewer.cis?action=overview&entry_id=4468
first, this kind of URL is intercepted by Apache using mod_rewrite conf:
RewriteEngine on
ReWriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
Julio
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Julio,
On 6/8/2010 3:27 PM, antongiulio05@gmail.com wrote:
> Hi,
>
> I have a webapp (Spring+Hibernate) running on Tomcat 5.5.15. Tomcat is configured for Single-Sign-On and it works fine with the login system of the application (typical login/password).
>
> Anyway at the moment it's not well working when an external link is executed from a Word file (Microsoft Office 2003/2007 - more info here: http://support.microsoft.com/kb/899927).
> Basically when the link requires a protected page, normally the user is redirected to the login page and, after a successful login, the page should be displayed. But it happens only if the user Copy&Paste the link on the browser URL bar. Instead, if he clicks on the Word file after the login, he is redirected to the default home page.
>
> I debugged the application, browser cookies and http sessions and it looks like another session is created:
>
> 1) when the link is sent ("200") to the application
> 2) it returns "302" http status and JSESSIONID (strangely this value is always the same)
> 2) Word requires connection again ("200")
> 3) A new JSESSIONID cookie is created differently from the 1) and returns "200"
>
> the changed session of course cause of the application fails the redirection after login.
>
> How can I configure Tomcat to make it work with this kind of connection and keeping on work with the usual login via browser?
Can you give us an example of a URL that looks like it should work from
Word (but doesn't) but does work properly when you copy/paste?
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkwO4cIACgkQ9CaO5/Lv0PBZ7wCeK+7Kdiz49ejHjKIH7LXcapVU
DGEAnR/AWA6d8nLjuAKHYIx35rqOk7YW
=sN1Q
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: HyperLink Office connection
Posted by Pid <pi...@pidster.com>.
On 08/06/2010 20:27, antongiulio05@gmail.com wrote:
> Hi,
>
> I have a webapp (Spring+Hibernate) running on Tomcat 5.5.15. Tomcat is configured for Single-Sign-On and it works fine with the login system of the application (typical login/password).
You should really make a plan to upgrade Tomcat promptly, that version
is seriously old and there have been another 14 version releases since
then, with many bug and security fixes.
p
> Anyway at the moment it's not well working when an external link is executed from a Word file (Microsoft Office 2003/2007 - more info here: http://support.microsoft.com/kb/899927).
> Basically when the link requires a protected page, normally the user is redirected to the login page and, after a successful login, the page should be displayed. But it happens only if the user Copy&Paste the link on the browser URL bar. Instead, if he clicks on the Word file after the login, he is redirected to the default home page.
>
> I debugged the application, browser cookies and http sessions and it looks like another session is created:
>
> 1) when the link is sent ("200") to the application
> 2) it returns "302" http status and JSESSIONID (strangely this value is always the same)
> 2) Word requires connection again ("200")
> 3) A new JSESSIONID cookie is created differently from the 1) and returns "200"
>
> the changed session of course cause of the application fails the redirection after login.
>
> How can I configure Tomcat to make it work with this kind of connection and keeping on work with the usual login via browser?
>
> Thanks,
> Julio
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>