IIRF proxy for NTLM Single Sign On (SSO) Java Web App

Topics: Developer Forum
Aug 8, 2011 at 9:19 PM
Edited Aug 8, 2011 at 9:23 PM

Hi all,

I have a Java Web Application which using NTLM SSO and it works fine when internal web client hits the Application Server directly.  But the SSO won't work if I use IIRF on IIS as proxy.  Application also works fine with the proxy if I turn off SSO.   My IIRF.ini setting is pretty simple:

RewriteCond    %{HTTP_HOST}    ^app\.company\.com$

ProxyPass    ^/AppRoot/(.*)$              http://AppServer:port/AppRoot/$1  [I]
ProxyPassReverse    /AppRoot   http://app.company.com/AppRoot

My questions are:

1. Does IIRF support SSO with NTLM?

2.  If it does, did I config it wrong OR how should I config it?

Thanks in advance. 

 

Coordinator
Aug 8, 2011 at 11:54 PM

I think IIRF *should* work for what you want.   I don't know that much about SSO with NTLM, but ... IIRF should relay the HTTP traffic appropriately.

Your configuration looks reasonable.

What version of IIRF are you using?

Can you show me the IIRF log for a single SSO transaction? and also describe how it fails.

You may also need to use ProxyPreserveHost.  Not sure though.

Aug 9, 2011 at 5:39 PM
Edited Aug 10, 2011 at 3:24 PM

Hi Cheeso,

Thanks in advance!

We are using  IIRF version 2.1.  And I tried to set ProxyPreserveHost to ON, but it didn't help.

My application is designed to do the NTLM negotiation first for Single sign on, if it fails, it will use the fail over form authentication (using Spring framework).   What I saw was:

1. if I access the app Server directly, single sign on works and I can access the app.

2. If I access ths app server through IIRF proxy, it will popup log in dialog for the first time.  This auth will fail even for correct user ID and password (NTLM negotiation fails). Then, because NTLM fails, my Spring App form Auth will kick in and I can log in from there with no problem. 

Following please find the log:

Tue Aug 09 11:06:13 -  3056 - -------------------------------------------------------
Tue Aug 09 11:06:13 -  3056 - Ionic ISAPI Rewriting Filter (IIRF) 2.1.1.25 x64 RELEASE
Tue Aug 09 11:06:13 -  3056 - IIRF was built on: Jan  7 2011 07:30:50
Tue Aug 09 11:06:13 -  3056 - Cached: DLL_PROCESS_ATTACH
Tue Aug 09 11:06:13 -  3056 - Cached: Process ID: 3104
Tue Aug 09 11:06:13 -  3056 - Cached: ReadServerConfig: C:\Program Files\Ionic Shade\IIRF 2.1\IirfGlobal.ini(23): Filter Priority is now: HIGH (0x80000)
Tue Aug 09 11:06:13 -  3056 - Cached: ReadServerConfig: C:\Program Files\Ionic Shade\IIRF 2.1\IirfGlobal.ini(46): NotifyLog setting is now: OFF
Tue Aug 09 11:06:13 -  3056 - Cached: ReadServerConfig: C:\Program Files\Ionic Shade\IIRF 2.1\IirfGlobal.ini(63): RewriteEngine setting is now: ON
Tue Aug 09 11:06:13 -  3056 - Cached: DLL_PROCESS_ATTACH - complete
Tue Aug 09 11:06:13 -  3056 - Cached: GetFilterVersion
Tue Aug 09 11:06:13 -  3056 - GetLogFile: app:'/LM/W3SVC/2/ROOT'  new log:'D:\Logs\IIRF-APPS\.3104.log'
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: actual log file 'D:\Logs\IIRF-APPS\.3104.log'
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: ini file: 'D:\Inetpub\wwwroot\APPS\Iirf.ini'
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: ini file timestamp: 2011/08/09 09:31:58 Central Daylight Time
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: cfg(0x022CFD00)
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: LogLevel = 5
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: pass 2
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(8): IterationLimit 10
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(9): MaxMatchCount 10
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(10): RewriteEngine will be enabled.
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(11): StatusInquiry ON (--) (--)
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(11): IIRF Status Inquiry is enabled at path '/iirfStatus' for local requests only.
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(19): ProxyTimeouts 30 30 30 600
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(19): Proxy Timeout Values IN SECONDS are now: Resolve=30, Connect=30, Send=30, Receive=600
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(30): RewriteCond   %{HTTP_HOST}  ^APPS\.COMPANY\.com$ '(null)'
Tue Aug 09 11:06:13 -  3056 - ParseRuleModifierFlags: '[I]'
Tue Aug 09 11:06:13 -  3056 - ParseRuleModifierFlags: token 'I'
Tue Aug 09 11:06:13 -  3056 - rule: Case Insensitive match
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(33): ProxyPassReverse   /  http://APP-SERVER-NAME/
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(39): ProxyPass (rule 2)  '^/APP-ROOT/(.*)$'  'http://APP-SERVER-NAME:8083/APP-ROOT/$1'      [I]
Tue Aug 09 11:06:13 -  3056 - ParseRuleModifierFlags: '[I]'
Tue Aug 09 11:06:13 -  3056 - ParseRuleModifierFlags: token 'I'
Tue Aug 09 11:06:13 -  3056 - rule: Case Insensitive match
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: D:\Inetpub\wwwroot\APPS\Iirf.ini(40): ProxyPassReverse   /APP-ROOT  http://APPS.COMPANY.com/APP-ROOT
Tue Aug 09 11:06:13 -  3056 - ReadVdirConfig: Done reading INI for the root vdir, found 2 rules (0 errors, 0 warnings) on 42 lines
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_AUTH_COMPLETE
Tue Aug 09 11:06:13 -  3056 - DoRewrites
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'url'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 21 bytes   ptr:0x001AA2A0
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'url' = '/APP-ROOT/'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'QUERY_STRING'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 1 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'method'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 4 bytes   ptr:0x001AA3C0
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'method' = 'GET'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: New Url, before decoding: '/APP-ROOT/'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Url (no decoding): '/APP-ROOT/'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: depth=0
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'SCRIPT_NAME'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 21 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result '/APP-ROOT/'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: no RewriteBase
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 1: -1 (No match)
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: pattern: ^/APP-ROOT/(.*)$  subject: /APP-ROOT/
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: 2 matches
Tue Aug 09 11:06:13 -  3056 - ReplaceServerVariables: alloc 54 bytes
Tue Aug 09 11:06:13 -  3056 - ReplaceServerVariables: in='http://APP-SERVER-NAME:8083/APP-ROOT/$1' out='http://APP-SERVER-NAME:8083/APP-ROOT/$1'
Tue Aug 09 11:06:13 -  3056 - GenerateReplacementString: alloc 53 bytes
Tue Aug 09 11:06:13 -  3056 - GenerateReplacementString: result 'http://APP-SERVER-NAME:8083/APP-ROOT/'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Result (length 51): http://APP-SERVER-NAME:8083/APP-ROOT/
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: returning 999
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Proxy to: 'http://APP-SERVER-NAME:8083/APP-ROOT/'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'REQUEST_METHOD'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 4 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'GET'
Tue Aug 09 11:06:13 -  3056 - IirfProxy_SendRequest: http://APP-SERVER-NAME:8083/APP-ROOT/
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'REMOTE_ADDR'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 12 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'INTERNAL-IP'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'LOCAL_ADDR'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 13 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'EXTERNAL-IP'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_REFERER'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 128 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_USER_AGENT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 219 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_ACCEPT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 327 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'SERVER_NAME'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 16 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'APPS.COMPANY.com'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'ALL_RAW'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 1408 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'Connection: Keep-Alive

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Accept-Encoding: gzip, deflate

Accept-Language: en-us

Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAPjBmPX8hjyvAAAAAAAAAAAAAAAAAAAAADMg5gXSl8IuJIdrIVYf0nmB1pZD1B/6uA==

Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470

Host: APPS.COMPANY.com

If-Modified-Since: Fri, 05 Aug 2011 16:29:46 GMT

If-None-Match: W/"86-1312561786527"

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)

'
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: host(APP-SERVER-NAME)  path+query(/APP-ROOT/)
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: Connection: Keep-Alive

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Accept-Encoding: gzip, deflate

Accept-Language: en-us

Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAPjBmPX8hjyvAAAAAAAAAAAAAAAAAAAAADMg5gXSl8IuJIdrIVYf0nmB1pZD1B/6uA==

Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470

Host: APPS.COMPANY.com

If-Modified-Since: Fri, 05 Aug 2011 16:29:46 GMT

If-None-Match: W/"86-1312561786527"

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)

Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Connection: Keep-Alive
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept-Encoding: gzip, deflate
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept-Language: en-us
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAPjBmPX8hjyvAAAAAAAAAAAAAAAAAAAAADMg5gXSl8IuJIdrIVYf0nmB1pZD1B/6uA==
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Host: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr If-Modified-Since: Fri, 05 Aug 2011 16:29:46 GMT
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr If-None-Match: W/"86-1312561786527"
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: found 10 headers
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: rh(0x022CF570) nh(APP-SERVER-NAME) sn(APPS.COMPANY.com) la(EXTERNAL-IP) ra(INTERNAL-IP) ts(0)
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Host: APP-SERVER-NAME
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Via: 1.1 EXTERNAL-IP (IIRF v2.1)
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-Server: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-For: INTERNAL-IP
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Connection: Keep-Alive
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept-Encoding: gzip, deflate
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept-Language: en-us
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAPjBmPX8hjyvAAAAAAAAAAAAAAAAAAAAADMg5gXSl8IuJIdrIVYf0nmB1pZD1B/6uA==
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-Host: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header If-Modified-Since: Fri, 05 Aug 2011 16:29:46 GMT
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header If-None-Match: W/"86-1312561786527"
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpConnect APP-SERVER-NAME 8083
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpOpenRequest: GET /APP-ROOT/
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpAddRequestHeaders
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpSendRequest
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpReceiveResponse
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpQueryHeaders
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpQueryHeaders: status 304
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'SERVER_PORT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 3 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result '80'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'HTTPS'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 4 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result 'off'
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: starting status 304
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: status NOT 200, not TIMEOUT
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: status string '304'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: Allocate  104
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Date: Tue, 09 Aug 2011 16:06:13 GMT'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'ETag: W/"86-1312561786527"'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: exclude    'Server: GlassFish Server Open Source Edition 3.1'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: exclude    'X-Powered-By: Servlet/3.0 JSP/2.2 (GlassFish Server Open Source Edition 3.1 Java/Sun Microsystems Inc./1.6)'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: add        'Via: 1.1 EXTERNAL-IP (IIRF v2.1)'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: all Date: Tue, 09 Aug 2011 16:06:13 GMT

ETag: W/"86-1312561786527"

Via: 1.1 EXTERNAL-IP (IIRF v2.1)

 

Tue Aug 09 11:06:13 -  3056 - ProxyRequest: chunks(0) totalBytes(0)
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Proxy complete: 0 chunks, 0 bytes'
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_AUTH_COMPLETE
Tue Aug 09 11:06:13 -  3056 - DoRewrites
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'url'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 13 bytes   ptr:0x001AA3C0
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'url' = '/favicon.ico'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'QUERY_STRING'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 1 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'method'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 4 bytes   ptr:0x001AA330
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'method' = 'GET'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: New Url, before decoding: '/favicon.ico'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Url (no decoding): '/favicon.ico'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: depth=0
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'SCRIPT_NAME'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 13 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result '/favicon.ico'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: no RewriteBase
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 1: -1 (No match)
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: pattern: ^/APP-ROOT/(.*)$  subject: /favicon.ico
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: -1 (No match)
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: returning 0
Tue Aug 09 11:06:13 -  3056 - DoRewrites: No Rewrite
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_AUTH_COMPLETE
Tue Aug 09 11:06:13 -  3056 - DoRewrites
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'url'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 28 bytes   ptr:0x001AA2A0
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'url' = '/APP-ROOT/spring/'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'QUERY_STRING'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 1 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'method'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 4 bytes   ptr:0x001AA3C0
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'method' = 'GET'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: New Url, before decoding: '/APP-ROOT/spring/'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Url (no decoding): '/APP-ROOT/spring/'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: depth=0
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'SCRIPT_NAME'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 28 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result '/APP-ROOT/spring/'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: no RewriteBase
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 1: -1 (No match)
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: pattern: ^/APP-ROOT/(.*)$  subject: /APP-ROOT/spring/
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: 2 matches
Tue Aug 09 11:06:13 -  3056 - ReplaceServerVariables: alloc 54 bytes
Tue Aug 09 11:06:13 -  3056 - ReplaceServerVariables: in='http://APP-SERVER-NAME:8083/APP-ROOT/$1' out='http://APP-SERVER-NAME:8083/APP-ROOT/$1'
Tue Aug 09 11:06:13 -  3056 - GenerateReplacementString: alloc 60 bytes
Tue Aug 09 11:06:13 -  3056 - GenerateReplacementString: result 'http://APP-SERVER-NAME:8083/APP-ROOT/spring/'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Result (length 58): http://APP-SERVER-NAME:8083/APP-ROOT/spring/
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: returning 999
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Proxy to: 'http://APP-SERVER-NAME:8083/APP-ROOT/spring/'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'REQUEST_METHOD'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 4 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'GET'
Tue Aug 09 11:06:13 -  3056 - IirfProxy_SendRequest: http://APP-SERVER-NAME:8083/APP-ROOT/spring/
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'REMOTE_ADDR'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 12 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'INTERNAL-IP'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'LOCAL_ADDR'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 13 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'EXTERNAL-IP'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_REFERER'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 128 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_USER_AGENT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 219 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_ACCEPT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 327 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'SERVER_NAME'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 16 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'APPS.COMPANY.com'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'ALL_RAW'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 1321 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'Connection: Keep-Alive

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Accept-Encoding: gzip, deflate

Accept-Language: en-us

Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAF3lY7W8hgrTAAAAAAAAAAAAAAAAAAAAANmIzPeZYyWwQZc6802JAI5lR/kDskpo/w==

Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470

Host: APPS.COMPANY.com

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)

'
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: host(APP-SERVER-NAME)  path+query(/APP-ROOT/spring/)
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: Connection: Keep-Alive

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Accept-Encoding: gzip, deflate

Accept-Language: en-us

Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAF3lY7W8hgrTAAAAAAAAAAAAAAAAAAAAANmIzPeZYyWwQZc6802JAI5lR/kDskpo/w==

Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470

Host: APPS.COMPANY.com

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)

Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Connection: Keep-Alive
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept-Encoding: gzip, deflate
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept-Language: en-us
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAF3lY7W8hgrTAAAAAAAAAAAAAAAAAAAAANmIzPeZYyWwQZc6802JAI5lR/kDskpo/w==
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Host: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: found 8 headers
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: rh(0x022CF570) nh(APP-SERVER-NAME) sn(APPS.COMPANY.com) la(EXTERNAL-IP) ra(INTERNAL-IP) ts(0)
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Host: APP-SERVER-NAME
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Via: 1.1 EXTERNAL-IP (IIRF v2.1)
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-Server: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-For: INTERNAL-IP
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Connection: Keep-Alive
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept-Encoding: gzip, deflate
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept-Language: en-us
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKAF3lY7W8hgrTAAAAAAAAAAAAAAAAAAAAANmIzPeZYyWwQZc6802JAI5lR/kDskpo/w==
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-Host: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpConnect APP-SERVER-NAME 8083
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpOpenRequest: GET /APP-ROOT/spring/
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpAddRequestHeaders
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpSendRequest
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpReceiveResponse
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpQueryHeaders
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpQueryHeaders: status 302
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'SERVER_PORT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 3 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result '80'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'HTTPS'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 4 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result 'off'
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: starting status 302
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: status NOT 200, not TIMEOUT
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: status string '302'
Tue Aug 09 11:06:13 -  3056 - ConstructPprHeader: compare loc(http://APP-SERVER-NAME/APP-ROOT/spring_security_login) pprurl(http://APP-SERVER-NAME/) len(27)
Tue Aug 09 11:06:13 -  3056 - ConstructPprHeader: match
Tue Aug 09 11:06:13 -  3056 - ConstructPprHeader: default port. hdrName(Location) scheme(http) s(APPS.COMPANY.com) L1(27) port(80) path(/) trim(APP-ROOT/spring_security_login)
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: Allocate  241
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Date: Tue, 09 Aug 2011 16:06:13 GMT'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Content-Length: 217'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Content-Type: text/html;charset=ISO-8859-1'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Content-Language: en-US'
Tue Aug 09 11:06:13 -  3056 - ConstructPprHeader: compare loc(http://APP-SERVER-NAME/APP-ROOT/spring_security_login) pprurl(http://APP-SERVER-NAME/) len(27)
Tue Aug 09 11:06:13 -  3056 - ConstructPprHeader: match
Tue Aug 09 11:06:13 -  3056 - ConstructPprHeader: default port. hdrName(Location) scheme(http) s(APPS.COMPANY.com) L1(27) port(80) path(/) trim(APP-ROOT/spring_security_login)
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: transform old 'Location: http://APP-SERVER-NAME/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders:           new 'Location: http://APPS.COMPANY.com/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: exclude    'Server: GlassFish Server Open Source Edition 3.1'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: exclude    'X-Powered-By: Servlet/3.0 JSP/2.2 (GlassFish Server Open Source Edition 3.1 Java/Sun Microsystems Inc./1.6)'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: add        'Via: 1.1 EXTERNAL-IP (IIRF v2.1)'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: all Date: Tue, 09 Aug 2011 16:06:13 GMT

Content-Length: 217

Content-Type: text/html;charset=ISO-8859-1

Content-Language: en-US

Location: http://APPS.COMPANY.com/APP-ROOT/spring_security_login

Via: 1.1 EXTERNAL-IP (IIRF v2.1)

 

Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpReadData 217
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpReadData nRead= 217
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: chunks(1) totalBytes(217)
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Proxy complete: 1 chunks, 217 bytes'
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:13 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:13 -  3056 - HttpFilterProc: SF_NOTIFY_AUTH_COMPLETE
Tue Aug 09 11:06:13 -  3056 - DoRewrites
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'url'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 42 bytes   ptr:0x001AA2A0
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'url' = '/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'QUERY_STRING'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 1 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: getting 'method'
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 4 bytes   ptr:0x001AA3C0
Tue Aug 09 11:06:13 -  3056 - GetHeader_AutoFree: 'method' = 'GET'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: New Url, before decoding: '/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Url (no decoding): '/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: depth=0
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'SCRIPT_NAME'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 42 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result '/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: no RewriteBase
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 1: -1 (No match)
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: pattern: ^/APP-ROOT/(.*)$  subject: /APP-ROOT/spring_security_login
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Rule 2: 2 matches
Tue Aug 09 11:06:13 -  3056 - ReplaceServerVariables: alloc 54 bytes
Tue Aug 09 11:06:13 -  3056 - ReplaceServerVariables: in='http://APP-SERVER-NAME:8083/APP-ROOT/$1' out='http://APP-SERVER-NAME:8083/APP-ROOT/$1'
Tue Aug 09 11:06:13 -  3056 - GenerateReplacementString: alloc 74 bytes
Tue Aug 09 11:06:13 -  3056 - GenerateReplacementString: result 'http://APP-SERVER-NAME:8083/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: Result (length 72): http://APP-SERVER-NAME:8083/APP-ROOT/spring_security_login
Tue Aug 09 11:06:13 -  3056 - EvaluateRules: returning 999
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Proxy to: 'http://APP-SERVER-NAME:8083/APP-ROOT/spring_security_login'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'REQUEST_METHOD'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 4 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'GET'
Tue Aug 09 11:06:13 -  3056 - IirfProxy_SendRequest: http://APP-SERVER-NAME:8083/APP-ROOT/spring_security_login
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'REMOTE_ADDR'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 12 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'INTERNAL-IP'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'LOCAL_ADDR'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 13 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'EXTERNAL-IP'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_REFERER'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 128 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_USER_AGENT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 219 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'HTTP_ACCEPT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 327 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'SERVER_NAME'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 16 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'APPS.COMPANY.com'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: getting 'ALL_RAW'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: 1321 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable_AutoFree: result 'Connection: Keep-Alive

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Accept-Encoding: gzip, deflate

Accept-Language: en-us

Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKANf9JfSPA4EcAAAAAAAAAAAAAAAAAAAAAG4x950frYCz1QOotoXYed0nB4fSYMzxEw==

Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470

Host: APPS.COMPANY.com

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)

'
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: host(APP-SERVER-NAME)  path+query(/APP-ROOT/spring_security_login)
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: Connection: Keep-Alive

Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Accept-Encoding: gzip, deflate

Accept-Language: en-us

Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKANf9JfSPA4EcAAAAAAAAAAAAAAAAAAAAAG4x950frYCz1QOotoXYed0nB4fSYMzxEw==

Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470

Host: APPS.COMPANY.com

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)

Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Connection: Keep-Alive
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept-Encoding: gzip, deflate
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Accept-Language: en-us
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKANf9JfSPA4EcAAAAAAAAAAAAAAAAAAAAAG4x950frYCz1QOotoXYed0nB4fSYMzxEw==
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr Host: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: hdr User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)
Tue Aug 09 11:06:13 -  3056 - ParseAllRaw: found 8 headers
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: rh(0x022CF570) nh(APP-SERVER-NAME) sn(APPS.COMPANY.com) la(EXTERNAL-IP) ra(INTERNAL-IP) ts(0)
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Host: APP-SERVER-NAME
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Via: 1.1 EXTERNAL-IP (IIRF v2.1)
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-Server: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-For: INTERNAL-IP
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Connection: Keep-Alive
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-silverlight-2-b2, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept-Encoding: gzip, deflate
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Accept-Language: en-us
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAHYAAAAYABgAjgAAAAwADABIAAAACgAKAFQAAAAYABgAXgAAAAAAAACmAAAABYKIogUBKAoAAAAPUwBBAEYAVwBBAFkAdABvAG4AZwBiAFMATgBNAFgATAA4ADAANwAwAEQASgBKANf9JfSPA4EcAAAAAAAAAAAAAAAAAAAAAG4x950frYCz1QOotoXYed0nB4fSYMzxEw==
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header Cookie: JSESSIONID=f43d4461b0824d07f0f526c471ec; __utma=76403351.1160168415.1289403544.1310477443.1310675930.17; __utmz=76403351.1310675930.17.6.utmcsr=safnetportal.COMPANY.com|utmccn=(referral)|utmcmd=referral|utmcct=/wps/myportal/safnet; __kti=1289403548943,http%3A%2F%2Fwww.COMPANY.com%2F,; __ktv=e917-852b-8222-57ab12c3670c50f; _mkto_trk=id:563-XAN-459&token:_mch-COMPANY.com-1291741025249-99470
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header X-Forwarded-Host: APPS.COMPANY.com
Tue Aug 09 11:06:13 -  3056 - GenProxyRequestHeadersString: header User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.3; MS-RTC LM 8)
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpConnect APP-SERVER-NAME 8083
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpOpenRequest: GET /APP-ROOT/spring_security_login
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpAddRequestHeaders
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpSendRequest
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpReceiveResponse
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpQueryHeaders
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpQueryHeaders: status 200
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'SERVER_PORT'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 3 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result '80'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: getting 'HTTPS'
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: 4 bytes
Tue Aug 09 11:06:13 -  3056 - GetServerVariable: result 'off'
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: starting status 200
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: status OK
Tue Aug 09 11:06:13 -  3056 - Proxy_SetResponseHeaders: status string '200 OK'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: Allocate  136
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Date: Tue, 09 Aug 2011 16:06:13 GMT'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Content-Length: 562'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: keep       'Content-Type: text/html;charset=UTF-8'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: exclude    'Server: GlassFish Server Open Source Edition 3.1'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: exclude    'X-Powered-By: Servlet/3.0 JSP/2.2 (GlassFish Server Open Source Edition 3.1 Java/Sun Microsystems Inc./1.6)'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: add        'Via: 1.1 EXTERNAL-IP (IIRF v2.1)'
Tue Aug 09 11:06:13 -  3056 - ProcessResponseHeaders: all Date: Tue, 09 Aug 2011 16:06:13 GMT

Content-Length: 562

Content-Type: text/html;charset=UTF-8

Via: 1.1 EXTERNAL-IP (IIRF v2.1)

 

Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpReadData 562
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: WinHttpReadData nRead= 562
Tue Aug 09 11:06:13 -  3056 - ProxyRequest: chunks(1) totalBytes(562)
Tue Aug 09 11:06:13 -  3056 - DoRewrites: Proxy complete: 1 chunks, 562 bytes'
Tue Aug 09 11:06:13 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:14 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:14 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:14 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:14 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:14 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:14 -  3056 - IsIniFileUpdated: D:\Inetpub\wwwroot\APPS\Iirf.ini NO
Tue Aug 09 11:06:14 -  3056 - GetVdirConfig: Obtain  vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=1) (Expired=0) (ptr=0x022CFD00)...
Tue Aug 09 11:06:14 -  3056 - HttpFilterProc: SF_NOTIFY_URL_MAP
Tue Aug 09 11:06:14 -  3056 - HttpFilterProc: cfg= 0x022CFD00
Tue Aug 09 11:06:14 -  3056 - HttpFilterProc: SF_NOTIFY_AUTH_COMPLETE
Tue Aug 09 11:06:14 -  3056 - DoRewrites
Tue Aug 09 11:06:14 -  3056 - GetHeader_AutoFree: getting 'url'
Tue Aug 09 11:06:14 -  3056 - GetHeader_AutoFree: 13 bytes   ptr:0x001AA2A0
Tue Aug 09 11:06:14 -  3056 - GetHeader_AutoFree: 'url' = '/favicon.ico'
Tue Aug 09 11:06:14 -  3056 - GetServerVariable_AutoFree: getting 'QUERY_STRING'
Tue Aug 09 11:06:14 -  3056 - GetServerVariable_AutoFree: 1 bytes
Tue Aug 09 11:06:14 -  3056 - GetServerVariable_AutoFree: result ''
Tue Aug 09 11:06:14 -  3056 - GetHeader_AutoFree: getting 'method'
Tue Aug 09 11:06:14 -  3056 - GetHeader_AutoFree: 4 bytes   ptr:0x001AA3C0
Tue Aug 09 11:06:14 -  3056 - GetHeader_AutoFree: 'method' = 'GET'
Tue Aug 09 11:06:14 -  3056 - DoRewrites: New Url, before decoding: '/favicon.ico'
Tue Aug 09 11:06:14 -  3056 - DoRewrites: Url (no decoding): '/favicon.ico'
Tue Aug 09 11:06:14 -  3056 - EvaluateRules: depth=0
Tue Aug 09 11:06:14 -  3056 - GetServerVariable: getting 'SCRIPT_NAME'
Tue Aug 09 11:06:14 -  3056 - GetServerVariable: 13 bytes
Tue Aug 09 11:06:14 -  3056 - GetServerVariable: result '/favicon.ico'
Tue Aug 09 11:06:14 -  3056 - EvaluateRules: no RewriteBase
Tue Aug 09 11:06:14 -  3056 - EvaluateRules: Rule 1: -1 (No match)
Tue Aug 09 11:06:14 -  3056 - EvaluateRules: Rule 2: pattern: ^/APP-ROOT/(.*)$  subject: /favicon.ico
Tue Aug 09 11:06:14 -  3056 - EvaluateRules: Rule 2: -1 (No match)
Tue Aug 09 11:06:14 -  3056 - EvaluateRules: returning 0
Tue Aug 09 11:06:14 -  3056 - DoRewrites: No Rewrite
Tue Aug 09 11:06:14 -  3056 - ReleaseOrExpireVdirConfig: vdir '/LM/W3SVC/2/ROOT' (era=0) (rc=0) (Expired=0) (ptr=0x022CFD00)...

 

Coordinator
Aug 11, 2011 at 3:49 PM

I don't see an NTLM challenge/response in that log file.

I don't know If I understand NTLM correctly, but I expect to see a 401 Unauthorized response, somewhere in there, indicating the beginning of a NTLM authentication transaction.  I don't see it.  Through the proxy I see a 304 (not Modified) response.  I See a 302 (redirected) response.    And I see a 200 (OK) response.  This all looks pretty vanilla to me. 

I haven't dug too far into it though - not sure if the 304 302 and 200 are really just the successful login to your spring app or not.

In the best case, you will give me a log showing an NTLM auth transaction, and nothing else.   In the one you sent, I don't see an auth transaction, and I see lots of other stuff.

At least that's what I think i see.

Make it easy for me .. . .