Setting up waffle-mixed on Tomcat

Jul 28, 2010 at 11:55 AM
I'm trying to implement the waffle-mixed demo on my Tomcat server, and have followed the tutorial to a T but am still getting a 401 error on the Windows credentials button, indicating that the authorization header isn't being sent back correctly. What really silly setting am I missing here?
Coordinator
Jul 28, 2010 at 11:58 AM
Edited Jul 28, 2010 at 11:59 AM

I would try the waffle-mixed demo that comes with Waffle first. Just make sure it works for your login and that it's not a problem outside of Waffle (browser settings, etc.). Then review the CHM that comes with the released version, the tutorial was posted a while ago, so maybe some things have changed.

Enable waffle logging (see troubleshooting in the docs) and post the output here.

Jul 28, 2010 at 3:16 PM
Edited Jul 28, 2010 at 3:16 PM
No luck - log follows: INFO: Server startup in 1171 ms 28-Jul-2010 15:14:03 waffle.apache.MixedAuthenticator authenticate FINE: GET /waffle-mixed/index.jsp, contentlength: -1 28-Jul-2010 15:14:03 waffle.apache.MixedAuthenticator authenticate FINE: negotiateCheck: false (<none>) 28-Jul-2010 15:14:03 waffle.apache.MixedAuthenticator authenticate FINE: securityCheck: false (<none>) 28-Jul-2010 15:14:03 waffle.apache.MixedAuthenticator authenticate FINE: authorization: <none>, ntlm post: false 28-Jul-2010 15:14:03 waffle.apache.MixedAuthenticator redirectTo FINE: redirecting to: /login.jsp 28-Jul-2010 15:14:05 waffle.apache.MixedAuthenticator authenticate FINE: POST /waffle-mixed/index.jsp, contentlength: 0 28-Jul-2010 15:14:05 waffle.apache.MixedAuthenticator authenticate FINE: negotiateCheck: true (j_negotiate_check) 28-Jul-2010 15:14:05 waffle.apache.MixedAuthenticator authenticate FINE: securityCheck: false (j_negotiate_check) 28-Jul-2010 15:14:05 waffle.apache.MixedAuthenticator authenticate FINE: authorization: <none>, ntlm post: false 28-Jul-2010 15:14:05 waffle.apache.MixedAuthenticator authenticate FINE: authorization required Also, I downloaded the .chm, but kept getting "Navigation to the webpage was canceled" errors in the default Windows viewer (managed to read it by decompiling it, though)
Coordinator
Jul 28, 2010 at 4:42 PM

If you download the CHM directly, you must save it to a local folder, right click on it, choose Properties and hit Unblock. Then open it.

Your browser is not trying to do NTLM/Kerberos. So I would concentrate on that first. Take a stock demo waffle-filter application which doesn't try to do anything fancy, and make that work.

Most likely your browser doesn't believe that the site is in the intranet (on IE you need to add localhost explicitly for example). The CHM has a whole page of known things about browsers and how to make sure they want to do NTLM.