HTTP Status 401 when trying to access dinamically generated URLs

Mar 16, 2011 at 5:45 AM

 

I'm using the Waffle Spring filter in a project based in the Ozone framework (GOTS  software). I can access jsp pages not having a ? in the URL but I get the 401 - This request requires HTTP authentication when the URL has a ? mark (dinamicaly generated URL) like for example: 

/owf/prefs/dashboard?_=1300248593791&version=3.3.0-GA-v1
 
I can see all my roles and my user principal name in the index.jsp I have inside the owf folder. In the Tomcat log I see that I'm successfully authenticated. My sewcurity context is 
exactly like the example for the Spring filter. Is this a bug inside Waffle or is a problem inside the Ozone framework?
Thanks, 
Alberto
<!--l version="1.0" encoding="UTF-8-->
 
This is the output from the Tomcat 6.0.32 log:
rd, contentlength: -1
2011-03-16 01:11:32,103: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/, contentleng
th: -1
2011-03-16 01:11:32,103: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/, contentleng
th: -1
2011-03-16 01:11:32,103: INFO  [waffle.servlet.spi.NegotiateSecurityFilterProvider][http-8080-3] security
package: Negotiate, connection id: 0:0:0:0:0:0:0:1:49425
2011-03-16 01:11:32,103: INFO  [waffle.servlet.spi.NegotiateSecurityFilterProvider][http-8080-3] token buf
fer: 55 byte(s)
2011-03-16 01:11:32,103: INFO  [waffle.servlet.spi.NegotiateSecurityFilterProvider][http-8080-3] continue
token: TlRMTVNTUAACAAAABgAGADgAAAAVwoniLWDNDcAxlexYvREAAAAAALYAtgA+AAAABgByFwAAAA9BAEIAUwACAAYAQQBCAFMAAQA
YAEEAQgBTAEQARABFAFYANQA4ADQAOABIAAQAHgBhAGIAcwAuAHUAcwAuAGEAcgBtAHkALgBtAGkAbAADADgAQQBCAFMARABEAEUAVgA1A
DgANAA4AEgALgBhAGIAcwAuAHUAcwAuAGEAcgBtAHkALgBtAGkAbAAFAB4AYQBiAHMALgB1AHMALgBhAHIAbQB5AC4AbQBpAGwABwAIAMf
2Ip2Y48sBAAAAAA==
2011-03-16 01:11:32,103: INFO  [waffle.servlet.spi.NegotiateSecurityFilterProvider][http-8080-3] continue
required: true
2011-03-16 01:11:32,103: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/, contentleng
th: -1
2011-03-16 01:11:32,103: INFO  [waffle.servlet.spi.NegotiateSecurityFilterProvider][http-8080-3] security
package: Negotiate, connection id: 0:0:0:0:0:0:0:1:49425
2011-03-16 01:11:32,103: INFO  [waffle.servlet.spi.NegotiateSecurityFilterProvider][http-8080-3] token buf
fer: 88 byte(s)
2011-03-16 01:11:32,119: INFO  [waffle.servlet.spi.NegotiateSecurityFilterProvider][http-8080-3] continue
required: false
2011-03-16 01:11:39,023: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] *********successfully
logged in user: ABS\Alberto.Acevedo
2011-03-16 01:11:39,054: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/js-lib/ext-2.
2/resources/css/ext-all.css, contentlength: -1
2011-03-16 01:11:39,070: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/css/blueExt_i
e6.css, contentlength: -1
2011-03-16 01:11:39,070: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/css/main.css,
 contentlength: -1
2011-03-16 01:11:39,085: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-2] GET /owf/css/blueExt.c
ss, contentlength: -1
2011-03-16 01:11:39,132: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/js/config/con
fig.js, contentlength: -1
2011-03-16 01:11:39,148: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-2] GET /owf/js-min/owf-se
rver-min.js, contentlength: -1
2011-03-16 01:11:39,382: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/js-lib/mxgrap
h/css/common.css, contentlength: -1
2011-03-16 01:11:39,382: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-2] GET /owf/js-lib/mxgrap
h/css/explorer.css, contentlength: -1
2011-03-16 01:11:39,397: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/js-lib/mxgrap
h/js/resources/graph.properties, contentlength: -1
2011-03-16 01:11:39,397: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-2] GET /owf/js-lib/mxgrap
h/js/resources/graph_en.properties, contentlength: -1
2011-03-16 01:11:39,413: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/js-lib/mxgrap
h/js/resources/editor.properties, contentlength: -1
2011-03-16 01:11:39,413: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-2] GET /owf/js-lib/mxgrap
h/js/resources/editor_en.properties, contentlength: -1
2011-03-16 01:11:39,428: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/js/lang/ozone
-lang-null.js, contentlength: -1
2011-03-16 01:11:39,444: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-2] GET /owf/js-lib/ext-2.
2/source/locale/ext-lang-null.js, contentlength: -1
2011-03-16 01:11:39,491: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-2] GET /owf/prefs/prefere
nce/owf/language, contentlength: -1
2011-03-16 01:11:39,725: INFO  [waffle.spring.NegotiateSecurityFilter][http-8080-3] GET /owf/prefs/dashboa
rd, contentlength: -1
 
 

Output from IEHttpHeaders:

GET /owf/ HTTP/1.1
Accept: */*
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Content-Type: text/html; UTF-8
Transfer-Encoding: chunked
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/css/blueExt.css HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:18 GMT
If-None-Match: W/"84803-1284143958000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"84803-1284143958000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/css/blueExt_ie6.css HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:28 GMT
If-None-Match: W/"17502-1284143968000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"17502-1284143968000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/js-lib/ext-2.2/resources/css/ext-all.css HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:14 GMT
If-None-Match: W/"82604-1284143954000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"82604-1284143954000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/css/main.css HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:40:20 GMT
If-None-Match: W/"2713-1284144020000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"2713-1284144020000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/js/config/config.js HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Content-Type: text/javascript
Transfer-Encoding: chunked
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/js-min/owf-server-min.js HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:40:38 GMT
If-None-Match: W/"1549461-1284144038000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"1549461-1284144038000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/js-lib/mxgraph/css/common.css HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:40:08 GMT
If-None-Match: W/"2657-1284144008000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"2657-1284144008000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/js-lib/mxgraph/css/explorer.css HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:40 GMT
If-None-Match: W/"524-1284143980000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"524-1284143980000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/images/blue/window/left-corners.gif HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:10 GMT
If-None-Match: W/"574-1284143950000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"574-1284143950000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/images/blue/window/right-corners.gif HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:41:08 GMT
If-None-Match: W/"581-1284144068000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"581-1284144068000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/images/blue/window/top-bottom.png HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:12 GMT
If-None-Match: W/"209-1284143952000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"209-1284143952000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/images/blue/window/left-right.png HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:41:00 GMT
If-None-Match: W/"184-1284144060000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"184-1284144060000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/images/blue/button/btn-sprite.gif HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:40:18 GMT
If-None-Match: W/"286-1284144018000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"286-1284144018000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/images/blue/panel/tool-sprites.gif HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:52 GMT
If-None-Match: W/"4523-1284143992000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"4523-1284143992000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/js-lib/ext-2.2/resources/images/default/qtip/bg.gif HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:40:14 GMT
If-None-Match: W/"1091-1284144014000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"1091-1284144014000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/js-lib/ext-2.2/resources/images/default/progress/progress-bg.gif HTTP/1.1
Accept: */*
Referer: http://localhost:8080/owf/
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
If-Modified-Since: Fri, 10 Sep 2010 18:39:00 GMT
If-None-Match: W/"834-1284143940000"
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
ETag: W/"834-1284143940000"
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/prefs/preference/owf/language?_=1300248593604&version=3.3.0-GA-v1 HTTP/1.1
x-requested-with: XMLHttpRequest
Accept-Language: en-us
Referer: http://localhost:8080/owf/
Accept: */*
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
Content-Type: text/html
Content-Length: 954
Date: Wed, 16 Mar 2011 04:09:53 GMT

GET /owf/prefs/dashboard?_=1300248593791&version=3.3.0-GA-v1 HTTP/1.1
x-requested-with: XMLHttpRequest
Accept-Language: en-us
Referer: http://localhost:8080/owf/
Accept: */*
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Host: localhost:8080
Connection: Keep-Alive
Cookie: JSESSIONID=602BE78C6CB3E6B5AD27BDAAD7DDE974

HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
Content-Type: text/html
Content-Length: 954
Date: Wed, 16 Mar 2011 04:09:53 GMT

Coordinator
Mar 16, 2011 at 12:21 PM

This last 401 doesn't come from Waffle (or you would have Authorization headers in the response). The only thing I am noticing is that it's an XMLHttpRequest, meaning that its an Ajax call from Javascript or something like that. Something else is saying 401 Access Denied, track that down.