manifoldcf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Karl Wright (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CONNECTORS-1569) IBM WebSEAL authentication
Date Thu, 10 Jan 2019 15:58:00 GMT

    [ https://issues.apache.org/jira/browse/CONNECTORS-1569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16739541#comment-16739541
] 

Karl Wright commented on CONNECTORS-1569:
-----------------------------------------

I'm not sure what the best approach might be for this since almost everyone wants the expect-continue
in place.  It's essential, in fact, for authenticating properly via POST on many other systems.

Adding a way of disabling this via the UI is plausible but it's significant work all around.
 Still, I think that would be the best approach to meet your needs.  Unfortunately I'm already
booked at least until March, so you may do best by trying to submit a patch that I can integrate
and/or clean up.

> IBM WebSEAL authentication
> --------------------------
>
>                 Key: CONNECTORS-1569
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-1569
>             Project: ManifoldCF
>          Issue Type: Bug
>          Components: Web connector
>    Affects Versions: ManifoldCF 2.11
>         Environment: Manifold 2.11
>  IBM WebSEAL
>            Reporter: Ferdi Klomp
>            Assignee: Karl Wright
>            Priority: Major
>              Labels: ManifoldCF
>
> Hi,
> We have stumbled upon a problem with the Web Connector authentication in relation to
IBM WebSEAL. We were unable to perform a successfully authentication against WebSEAL. After
some time debugging we figured out the web connector sends out a "Expect:100 Continue" header
and this is not supported by WebSEAL.
>  [https://www-01.ibm.com/support/docview.wss?uid=swg21626421
> ]1. Disabling the "Expect:100 Continue" functionality by putting setExpectedContinueEnabled
to false in the "ThrottledFetcher.java" eventually solved the problem. The exact line can
be found here:
>  [https://github.com/apache/manifoldcf/blob/trunk/connectors/webcrawler/connector/src/main/java/org/apache/manifoldcf/crawler/connectors/webcrawler/ThrottledFetcher.java#L508]
> I'm not sure if this option is required for other environment, or that it can be disabled
by default, or made configurable?
> 2. Another option would be to make the timeout configurable, as the WebSEAL docs state
"The browser need to have some kind of timeout to to send the request body before exceeding
intra-connection-timeout.". By default, the web connector request timeout exceeded the intra-connection-timeout
of WebSEAL.
> What is the best way to proceed and get a fixed for this in the web connector?
> Kind regards,
>  Ferdi



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message