tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Robin Diederen <>
Subject RE: Question on IE zones with Mod_jk
Date Wed, 23 Jun 2010 09:06:59 GMT
Hi dB,


That looks promising and might come in handy for another project I'm doing.. :-)


Best, Robin
-----Original message-----
From: dB. <>
Sent: Tue 08-06-2010 13:58
To: Tomcat Users List <>; 
Subject: RE: Question on IE zones with Mod_jk

I think your conclusion may be a little too quick. You should post the complete HTTP trace
from this session.

PS: If you're on Windows and are using Apache for NTLM only, you may want to take a look at

dB. @ 
Moscow|Geneva|Seattle|New York

-----Original Message-----
From: Robin Diederen [] 
Sent: Tuesday, June 08, 2010 3:16 AM
Subject: Question on IE zones with Mod_jk

Hello all,

We're trying to get a combination of Apache (webserver), Tomcat and mod_jk to work flawlessly
with NTLM authentication.

We're using mod_jk to loadbalance two Tomcat / LifeRay installations. We're using the latest
versions of Apache 2.2, Tomcat 6 and mod_jk.

Our setup works fine on FireFox, but on IE this gives some troubles. When I bypass mod_jk
by connecting directly to a Tomcat node, it all works fine in IE too. The problem appears
on IE 6, 7 and 8.

The problem:
- I surf to http://portal
- IE recognizes the site as trusted / in the intranet zone
- I click the sign in link and get redirected to http://portal/c/portal/login; IE now thinks
I'm in the _internet_zone_ (thus NTLM auth doesn't work)
- From the Apache logs, I find that a 401 error occurred

My guess would be that IE detects the redirect and concludes the wrong zone.

Is there any way to configure this from the server side?

Best, Robin

To unsubscribe, e-mail:
For additional commands, e-mail:

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message