Author: olegk
Date: Wed Jun 15 11:02:44 2005
New Revision: 190785
URL: http://svn.apache.org/viewcvs?rev=190785&view=rev
Log:
PR #34909 (Document the problem with MS impl of digest authentication with older JREs and
stale connection check)
Contributed by Oleg Kalnichevski
Reviewed by Ortwin Glück and Michael Becke
Modified:
jakarta/commons/proper/httpclient/trunk/xdocs/authentication.xml
jakarta/commons/proper/httpclient/trunk/xdocs/sslguide.xml
jakarta/commons/proper/httpclient/trunk/xdocs/troubleshooting.xml
Modified: jakarta/commons/proper/httpclient/trunk/xdocs/authentication.xml
URL: http://svn.apache.org/viewcvs/jakarta/commons/proper/httpclient/trunk/xdocs/authentication.xml?rev=190785&r1=190784&r2=190785&view=diff
==============================================================================
--- jakarta/commons/proper/httpclient/trunk/xdocs/authentication.xml (original)
+++ jakarta/commons/proper/httpclient/trunk/xdocs/authentication.xml Wed Jun 15 11:02:44 2005
@@ -36,6 +36,7 @@
</ul>
</li>
<li><a href="#Examples">Examples</a></li>
+ <li><a href="#Known limitations and problems">Known limitations and
problems</a></li>
<li><a href="#Troubleshooting">Troubleshooting</a></li>
</ul>
</subsection>
@@ -234,6 +235,27 @@
</ul>
</p>
</section>
+
+ <section name="Known limitations and problems">
+
+ <ol>
+ <li>
+ <p>
+ <strong>Authetication schemes that rely on persistent connection state do
not work on Sun's JVMs
+ below 1.4 if SSL is used</strong>
+ </p>
+ <p>
+ For details please refer to the <a href="sslguide.html#Known%20limitations%20and%20problems">Known
+ limitations and problems</a> section of the <a href="sslguide.html">SSL
Guide</a>
+ </p>
+ <p>
+ <strong>Workaround:</strong> Disable stale connection check or upgrade
to Java 1.4 or above.
+ </p>
+ </li>
+ </ol>
+
+ </section>
+
<section name="Troubleshooting">
<p>Some authentication schemes may use cryptographic algorithms. It is recommended
to include the
Modified: jakarta/commons/proper/httpclient/trunk/xdocs/sslguide.xml
URL: http://svn.apache.org/viewcvs/jakarta/commons/proper/httpclient/trunk/xdocs/sslguide.xml?rev=190785&r1=190784&r2=190785&view=diff
==============================================================================
--- jakarta/commons/proper/httpclient/trunk/xdocs/sslguide.xml (original)
+++ jakarta/commons/proper/httpclient/trunk/xdocs/sslguide.xml Wed Jun 15 11:02:44 2005
@@ -240,8 +240,29 @@
</p>
<p>
- <strong>Workaround:</strong> If persistent SSL connections support is
an issue for your
- application we strongly advise you to upgrade to Java 1.4.
+ <strong>Workaround:</strong> Disable stale connection check if upgrade
to Java 1.4 or above is
+ not an option. Please note that HttpClient will no longer be able to detect invalid
connections
+ and some requests may fail due to transport errors. For details on how transport
errors can be
+ recovered from please refer to the <a href="exception-handling.html#Transport%20exceptions">
+ Exception Handling Guide</a>. If persistent SSL connections support and transport
reliability
+ is an issue for your application we strongly advise you to upgrade to Java 1.4.
+ </p>
+ </li>
+ <li>
+ <p>
+ <strong>Authetication schemes that rely on persistent connection state do
not work on Sun's JVMs
+ below 1.4 if SSL is used</strong>
+ </p>
+ <p>
+ This problem is directly related to the problem described above. Certain authentication
schemes or
+ certain implementations of standard authentication schemes are connection based,
that is, the user
+ authentication is performed once when the connection is being established, rather
than every time
+ a request is being processed. Microsoft NTLM scheme and Digest scheme as implemented
in Microsoft
+ Proxy and IIS servers are known to fall into this category. If connections cannot
be kept alive
+ the user authorization is lost along with the persistent connection state
+ </p>
+ <p>
+ <strong>Workaround:</strong> Disable stale connection check or upgrade
to Java 1.4 or above.
</p>
</li>
Modified: jakarta/commons/proper/httpclient/trunk/xdocs/troubleshooting.xml
URL: http://svn.apache.org/viewcvs/jakarta/commons/proper/httpclient/trunk/xdocs/troubleshooting.xml?rev=190785&r1=190784&r2=190785&view=diff
==============================================================================
--- jakarta/commons/proper/httpclient/trunk/xdocs/troubleshooting.xml (original)
+++ jakarta/commons/proper/httpclient/trunk/xdocs/troubleshooting.xml Wed Jun 15 11:02:44
2005
@@ -39,6 +39,12 @@
communication between the client and server to determine where the
problem is occurring.</li>
+ <li>Consult the "Known limitations and problems" section of the
+ <a href="sslguide.html#Known%20limitations%20and%20problems">SSL Guide</a>
+ and the <a href="authentication.html#Known%20limitations%20and%20problems">
+ Authentication Guide</a> to see if this is a known problem and follow the
+ instructions given in these resources</li>
+
<li>Use telnet or netcat to manually send the request to the server.
This is particularly useful once you think you know what the problem is
and you want to easily test that changing what <em>HttpClient</em> sends
will
@@ -50,6 +56,7 @@
<li>Try updating to the latest nightly build of <em>HttpClient</em>.
Bugs
happen and they are generally fixed pretty quickly so testing against
the latest build is often worthwhile.</li>
+
</ol>
</section>
---------------------------------------------------------------------
To unsubscribe, e-mail: commons-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-dev-help@jakarta.apache.org
|