Http header referer being destroyed

Help... Ihave apiece of JSP code that looks for the referer in the
          header...but because the page is being created in a new popup window the
          reference too the referer is being destroyed.. In instances where the
          calling page is a regular page I can spoof it with another parameter... But
          my nav is being created from xml files and this link can be accessed from
          any where on the site there's no way to spoof the parameter....

Hi,
If you set a name/value pair cs.contenttype=text/xml in the SiteCatalog entry of your outermost SiteEntry/Template Sites will set the contenttype to text/xml.
Chapter 37 of the Sites11g Developers Guide, under section Creating a WebCenter Sites Page, explains this in more detail.
Dolf

Similar Messages

Load Balancing with ACE using HTTP Header information

Hello,
I am trying to setup a class-map using http loadbalance match-all.
What I want to do is check for the HTTP Host and if it doesnot match the http referer than go to server farm A. if it does match then go to server farm B.
My problem is the host can be serveral different values as well as the referer. Can you setup varibales in the ACE so I can store the value from http host and compare it against http referer?
Thanks
Mike C.

It should be like this (If you want to use separate class maps for referrer & Host).
class-map type http loadbalance match-any site1-HostHDR
2 match http header Host header-value ".*site1.com"
class-map type http loadbalance match-any site1-Referer
2 match http header Referer header-value "http://site1.*"
class-map type http loadbalance match-any site2-HostHDR
2 match http header Host header-value ".*site2.com"
class-map type http loadbalance match-any site2-Referer
2 match http header Referer header-value "http://site2.*"
class-map type http loadbalance match-all Site1-policy
2 match class-map site1-HostHDR
3 match class-map site1-Referer
class-map type http loadbalance match-all Site2-policy
2 match class-map site2-HostHDR
3 match class-map site2-Referer
policy-map type loadbalance http first-match Site1
class Site1-policy
serverfarm SFarm-A
class Site2-policy
serverfarm SFarm-A
class class-default
serverfarm SFARm-B
Syed Iftekhar Ahmed

Feature Request : provide a way to create access policies or identities with matching condition based on the HTTP header's "Referer" field

Hello,
I have a use-case I would like to share with you. When a customer configures its WSA with highly restrictive internet access like in the example below, it may trigger some issues :
1- allow internet access only for URLs defined in whitelist.
2- block ALL other requests.
Let's take the following example :
1- the customer only allow requests to www.siteA.com. siteA.com is the only URL included in its whitelist.
2- www.siteA.com contains many embedded objects (such as facebook like tags, youtube videos, links to partners sites, ...)
In this configuration, the end user will be allowed to reach siteA but the page will not be fully displayed. All the embedded objects not directly located on siteA will be missing.
With WSA, the easiest way I can imagine to solve the issue is to list all the embedded objects present on siteA, get back their URL and also add these URLs to the whitelist. But this solution if of course far to be really convenient since it involves to know exactly how each HTTP page you want to consult is built.
With other proxies, such as Bluecoat proxies or McAfee Web Gateway proxies for example, I used to solve this kind of issue by using the HTTP referer field (the URL you come from). For example with Bluecoat :
<Proxy>
ALLOW request.header.Referer.url.domain=//www.siteA.com/
=> All requested objects from siteA.com will be automatically allowed by the proxy, even if they are not part of my whitelist.
- Do you have a better suggestion than the one I'm currently using with WSA (adding each sites in whitelist) ?
- Would it be possible to add the field HTTP referer as a matching condition for Identities and access policies in your next release ?
Thanks in advance
Best regards

As far as I'm aware this functionality is still not available... would be an awesome feature to have, but could also be abused at the same time by a user writing their own "middleware" proxy and setting the referrer header to that allowed site.. could be done in like ~15 lines of perl / python.
Either way... would still be a cool feature to have.

Cannot a get JSP page instance from a page being destroyed

We have a J2EE app, using Struts + Tiles (build 1.1-b3), running on Win2KPro, Ora9ias v9.0.3. The application is roles-based, and different users see different versions of the same page based on their role authorizations. Occasionally, when multiple users in different roles are requesting the same page, the app returns the following exception:
OracleJSP:
JSP Error:
Request URI:/fast/WEB-INF/jsp/tiles/layouts/baseLayout.jsp
Exception:
javax.servlet.ServletException: Cannot a get JSP page instance from a page being destroyed
     at oracle.jsp.runtimev2.JspPageInstFacade.getInstance(JspPageInstFacade.java:147)
     at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:303)
     at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:465)
     at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:379)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
     at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
     at com.gal.fast.portal.web.SessionInitializedFilter.doFilter(SessionInitializedFilter.java:105)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:556)
     at com.evermind.server.http.ServletRequestDispatcher.include(ServletRequestDispatcher.java:119)
     at org.apache.struts.tiles.TilesUtilStrutsModulesImpl.doInclude(TilesUtilStrutsModulesImpl.java:124)
     at org.apache.struts.tiles.TilesUtil.doInclude(TilesUtil.java:161)
     at org.apache.struts.taglib.tiles.InsertTag.doInclude(InsertTag.java:703)
     at org.apache.struts.taglib.tiles.InsertTag$InsertHandler.doEndTag(InsertTag.java:818)
     at org.apache.struts.taglib.tiles.InsertTag.doEndTag(InsertTag.java:467)
     at web2d_inf._jsp._tiles._layouts._baseLayout._jspService(_baseLayout.java:445)
     [SRC:/WEB-INF/jsp/tiles/layouts/baseLayout.jsp:149]
     at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)
     at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:317)
     at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:465)
     at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:379)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
     at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
     at com.gal.fast.portal.web.SessionInitializedFilter.doFilter(SessionInitializedFilter.java:105)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:556)
     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:306)
     at com.evermind.server.http.ServletRequestDispatcher.forward(ServletRequestDispatcher.java:209)
     at org.apache.struts.action.RequestProcessor.doForward(RequestProcessor.java:1033)
     at org.apache.struts.tiles.TilesRequestProcessor.doForward(TilesRequestProcessor.java:269)
     at org.apache.struts.tiles.TilesRequestProcessor.processTilesDefinition(TilesRequestProcessor.java:249)
     at org.apache.struts.tiles.TilesRequestProcessor.processForwardConfig(TilesRequestProcessor.java:303)
     at org.apache.struts.action.RequestProcessor.processActionForward(RequestProcessor.java:401)
     at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:279)
     at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1422)
     at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:505)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
     at com.gal.fast.portal.web.FastActionServlet.service(FastActionServlet.java:110)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
     at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
     at com.gal.fast.portal.web.SessionInitializedFilter.doFilter(SessionInitializedFilter.java:105)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:556)
     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:306)
     at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:767)
     at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:148)
     at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:72)
     at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:803)
     at java.lang.Thread.run(Thread.java:536)
All the code in the two custom classes above ( com.gal.fast.portal.web.SessionInitializedFilter and com.gal.fast.portal.web.FastActionServlet ) has been commented out to the point that they are NOOP stubs.
We only see this with multiple near-simultaneous requests for the same page with differet roles. It smells like a threading issue to me, but I'm no expert (hence this post). Any thoughts?
--matt

We have a J2EE app, using Struts + Tiles (build 1.1-b3), running on Win2KPro, Ora9ias v9.0.3. The application is roles-based, and different users see different versions of the same page based on their role authorizations. Occasionally, when multiple users in different roles are requesting the same page, the app returns the following exception:
OracleJSP:
JSP Error:
Request URI:/fast/WEB-INF/jsp/tiles/layouts/baseLayout.jsp
Exception:
javax.servlet.ServletException: Cannot a get JSP page instance from a page being destroyed
     at oracle.jsp.runtimev2.JspPageInstFacade.getInstance(JspPageInstFacade.java:147)
     at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:303)
     at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:465)
     at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:379)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
     at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
     at com.gal.fast.portal.web.SessionInitializedFilter.doFilter(SessionInitializedFilter.java:105)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:556)
     at com.evermind.server.http.ServletRequestDispatcher.include(ServletRequestDispatcher.java:119)
     at org.apache.struts.tiles.TilesUtilStrutsModulesImpl.doInclude(TilesUtilStrutsModulesImpl.java:124)
     at org.apache.struts.tiles.TilesUtil.doInclude(TilesUtil.java:161)
     at org.apache.struts.taglib.tiles.InsertTag.doInclude(InsertTag.java:703)
     at org.apache.struts.taglib.tiles.InsertTag$InsertHandler.doEndTag(InsertTag.java:818)
     at org.apache.struts.taglib.tiles.InsertTag.doEndTag(InsertTag.java:467)
     at web2d_inf._jsp._tiles._layouts._baseLayout._jspService(_baseLayout.java:445)
     [SRC:/WEB-INF/jsp/tiles/layouts/baseLayout.jsp:149]
     at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)
     at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:317)
     at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:465)
     at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:379)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
     at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
     at com.gal.fast.portal.web.SessionInitializedFilter.doFilter(SessionInitializedFilter.java:105)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:556)
     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:306)
     at com.evermind.server.http.ServletRequestDispatcher.forward(ServletRequestDispatcher.java:209)
     at org.apache.struts.action.RequestProcessor.doForward(RequestProcessor.java:1033)
     at org.apache.struts.tiles.TilesRequestProcessor.doForward(TilesRequestProcessor.java:269)
     at org.apache.struts.tiles.TilesRequestProcessor.processTilesDefinition(TilesRequestProcessor.java:249)
     at org.apache.struts.tiles.TilesRequestProcessor.processForwardConfig(TilesRequestProcessor.java:303)
     at org.apache.struts.action.RequestProcessor.processActionForward(RequestProcessor.java:401)
     at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:279)
     at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1422)
     at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:505)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
     at com.gal.fast.portal.web.FastActionServlet.service(FastActionServlet.java:110)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
     at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
     at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:16)
     at com.gal.fast.portal.web.SessionInitializedFilter.doFilter(SessionInitializedFilter.java:105)
     at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:556)
     at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:306)
     at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:767)
     at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:148)
     at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:72)
     at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:803)
     at java.lang.Thread.run(Thread.java:536)
All the code in the two custom classes above ( com.gal.fast.portal.web.SessionInitializedFilter and com.gal.fast.portal.web.FastActionServlet ) has been commented out to the point that they are NOOP stubs.
We only see this with multiple near-simultaneous requests for the same page with differet roles. It smells like a threading issue to me, but I'm no expert (hence this post). Any thoughts?
--matt

What happens to the HTTP header parameters I put there?

Our tool puts some parameters into the HTTP header. But, it appears that the Dispatcher is not passing them to the WAS. Could this be?
Is there a way to tell the Dispatcher to not drop our HTTP header stuff? Perhaps a configuration setting? I didn't find any.
When I set a break in my servlet running on NW WAS, I see:
referer:
Cookie:
etc.
but I don't see the parameters we put there.
This is the NW SneakPreview download.

Hi Farokh,
I think there should be much problem passing parameters through the Url. I am sorry however that I have not worked much on the Servlet but on WebDynpro, which I can share with you if its of any use to you.
Regards
Noufal

How do I set the Http Header POST URL in SAAJ?

Hi ,
I am a newbie in the field of web services. I was trying to create a SOAP request with Http Header POST information having a POST url like
the following:
POST /OMASTI.xml HTTP/1.1
Content-Type: multipart/related; boundary="eladeladeladeladeladeladeladeladelad"; type=text/xml; start=11814460
Content-Length: 54596
Host: unspecified
SOAPAction: ""
to that effect I did the following in the SAAJ client:
MimeHeaders md = message.getMimeHeaders();
md.setHeader("SOAPAction" ,"\"\"");
md.setHeader("POST" ,"/OMASTI.xml");
However what I got was :
POST / HTTP/1.1
Accept: text/xml, text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
SOAPAction: ""
POST: /OMASTI.xml
Content-Type: multipart/related; type="text/xml"; boundary="----=_Part_2_32124414.1153146262750"
Content-Length: 3352
Cache-Control: no-cache
Pragma: no-cache
User-Agent: Java/1.5.0_07
Host: www.google.com
Connection: keep-alive
I have two POSTs in the header. How do I fix it? Please Help ASAP.
Regards,
Zeus

Hi,
Please forgive my ignorance. I did the same as you said. and then checked the Http request being sent out using ethreal software... it was the same as I had told earlier. Is only POST supported by the connection object? And the does the URL that comes in the Mime header as POST refer to the URL to which the request was sent? what I mean is that if the mime header says
POST /OMASTI.xml HTTP 1.1, does it mean that the URL that was passed to the connection object was "/OMASTI.xml" ? I had given the url as http://www.google.com to test the request being sent.. I only have a sample SOAP request which shows a HTTP header with the post url as I said before. I need to create a SOAP request with the same sort of Http header and the body needs to follow a certain OMA-STI protocol. My experience in the SOAP domain is almost nil. So please enlighten me.
Thanks in advance,
zeus

Error in setting up HTTP Header Variable Authentication

Hi,
I am trying to set-up SSO for SAP Biller Direct aplication (deployed on SAP J2EE 7.0) using HTTP Header variable authentication.
As per SAP documentation I have created a new login module "HeaderVariableLoginModule" pointing to class "com.sap.security.core.server.jaas.HeaderVariableLoginModule".
Then I have added this new login module to Statck "Ticket" and the new config looks as below. HTTP header when UID is passed is USI_LOP.
Name                                                                                Flag                                            Options
com.sap.security.core.server.jaas.HeaderVariableLoginModule    Sufficient                                    ume.configuration.active= tue,
                                                                                Header=USI_LOP
BasicPasswordLoginModule                                                           Optional
CreateTicketLoginModule                                                                 Optional                                         ume.configuration.active= tue
EvaluateTicketLoginModule                                                              Sufficient                                      ume.configuration.active= tue
The problem I am now having is that the authentication through HTTP_HEADEr does not work. Even though I ahve increased the trace level for JAAS module to debug, there is not any type of information generated in the log.
Each time I call the Biller Direct URL from the extrenal web server which also passes the HEADER variable for Authntication, the authrisation just fails and I am being shown a Logon Screen to pust UID/PASSWORD.
Can someone please guide me, how I can debug this? There is very no information whether anyone tried to login with HEADER varibale and that has failed...
Also, I am not pretty sure whether I am using the right Authentication Stack, which is is Ticket in my case..
But when I enter the application without any URL redirects and enter UID and password directly for Biller Direct, I get the following in log file, which makes me believe that I am using the right stack.
LOGIN.OK
User: CONDLG
Authentication Stack: ticket
Login Module                                                               Flag        Initialize Login      Commit     Abort      Details
1. com.sap.security.core.server.jaas.HeaderVariableLoginModule             SUFFICIENT ok          false      false
2. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   OPTIONAL    ok          true       true
3. com.sap.security.core.server.jaas.CreateTicketLoginModule               OPTIONAL    ok          true       true
4. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT ok          false      false
Central Checks                                                                                true
Any help will be very much apprecated..
Thanks,
Vikrant Sud

Vikrant,
The reason why it is not working is because your login modules in ticket stack are in wrong order and with wrong flags. The first one should be EvaluateTicketLoginModule with flag=SUFFICIENT, then the Header Variable login module, with flag=OPTIONAL, then CreateTicketLoginModule with flag=SUFFICIENT, then BasicPasswordLoginModule with flag=REQUISITE, and lastly CreateTicektLoginModule with flag=OPTIONAL
Thanks,
Tim

To block iplanet webserver version in http header

Please let me know how to block the iplanet version being displayed in http header.
I am using iplanet webserver 4.1 sp12

Please refer to http://docs.sun.com/source/817-0533-10/rn41sp12.html#39181
Hope this helps.

HTTP header question

I have a servlet app that works with HTML pages. Right now the login page which is post, gets cached in the browser so backing up can cause a re-login, after logout.
What HTTP header command can prevent this from being cached (in Netscape and IE, various versions)?
Any help appreciated.
--John Putnam

Thanks, That looks like just the thing I was looking for.
--JP

Mapviewer SVG and Content-Type http header

Hello,
We have a Mapviewer installation that seems to be serving up the wrong Content-Type header for the SVG charts. The map is being created correctly and we can get GIF's and such.
The wrong Content-Type causes the Adobe SVG viewer to never render the SVG map successfully. When I save the SVG file to the desktop it opens perfectly or if I statically link it in to the web page from the sever it also opens perfectly. Is there some configuration that is missing somewhere on the mapviewer or the application server to correctly set the Content-Type ?
Notice the content type of the failing map compared to a working SVG chart we have.
HTTP/1.x 200 OK
Content-Length: 41979
Cache-Control: private
Content-Type: application/octet-streamConnection: Keep-Alive
Keep-Alive: timeout=5, max=999
Server: Oracle-Application-Server-10g/10.1.2.0.0 Oracle-HTTP-Server OracleAS-Web-Cache-10g/10.1.2.0.0 (N;ecid=92576875655,0)
Last-Modified: Wed, 16 Aug 2006 20:31:58 GMT
Date: Wed, 16 Aug 2006 20:32:01 GMT
Accept-Ranges: bytes
instead of a working SVG graphic
HTTP/1.x 200 OK
Date: Wed, 16 Aug 2006 20:35:32 GMT
Server: Oracle9iAS/9.0.2 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.3
Content-Length: 3831
Content-Type: image/svg+xml; charset=utf-8Connection: Keep-Alive
Keep-Alive: timeout=5, max=999
This seems to be the last sticking point in successfully rolling out this mapviewer implementation. Any help would be greatly appreciated.
Thanks, in advance.
Thanks,
Carl

Hello,
Thanks for the reply I've tried both SVG_URL and SVGZ_URL and used a http header sniffer to watch what's getting served up and the urls associated with MapViewer SVG are definitely getting served up with that wrong Content-Type.
Our front end is an Oracle APEX environment were we use APEX's SVG charting on the same page and they are getting served up with the correct Content-Type and display correctly, which is nice cause I can watch the header difference's side by side, and we know the mapping itself is working right because we can get image files back
Is there a sever config file or something like the httpd.conf for apache that needs to be set?
Thanks for any help or insight
Carl

Problems with http header "Content-Location"

Does anyone know how to override the
"Content-Location" http header. We are having issues with search engines and this header being returned from Apache/oc4j. In a nutshell, I have a site that uses the
Struts framework, where the actual urls submitted would be for example
(http://mysite/home.do), where ".do" is just a servlet mapping. When we have
tried to follow the one link that has been spidered, it actually contains
the full path that appears in the "Content-Location" header (i.e.
http://mysite/web-inf/jsps/bogus.jsp) which in this case can't even be
accessed. The feedback we get from third-party utilities that try to spider
the site is that it is stopping because it has already indexed "bogus.jsp",
which in reality will always appear since it is a template, where the actual
urls will be different as is above.
Because the "Content-Location" header is being returned to any
client hitting the site, search engine spiders stop indexing at the first page because the value in "Content-Location" is the same.
Solutions tried:
mod_headers in Apache - have tried "Header unset"
HttpServletResponse.setHeader()
Any help would be appreciated

Hi there,
i'm having a similar problem to this when trying to run some web page speed optimisation software...
i think the issue also causes problems with the Opera browser (although this may have been fixed in the latest version).
anybody any ideas how to stop the header being sent in the response?
many thanks,
Andy

What happened to my HTTP header parameters??

The dispatcher in front of the NW WAS is eating the HTTP header parameters that our tool puts in the HTTP header before sending the request. Is there a way to tell the dispatcher to not drop our stuff? Perhaps a configuration setting? I didn't find any.
Our tool puts some parameters into the HTTP header. When I set a break in my servlet running on NW WAS, I see:
    referer:
    Cookie:
    etc.
but I don't see the parameters we put there.
This is the NW SneakPreview download.

Hi Farokh,
I think there should be much problem passing parameters through the Url. I am sorry however that I have not worked much on the Servlet but on WebDynpro, which I can share with you if its of any use to you.
Regards
Noufal

ACE One-Arm Source-NAT HTTP Header Insert

Hellow ACE Gurus,
This is probably a dumb question but I'm looking for info on HTTP Header Insert for SSL sessions. Does the HTTP header re-write action list work for SSL traffic? I guess I'm not clear on whether or not the header is encrypted and if the ACE can modify on an HTTPS session. Any input would be greatly appreciated.
/r
Rob

Hi Rob,
When using HTTPS, all the data is encrypted, including the HTTP headers.
In such a situation, if you want to insert headers (or do any other kind of L7 processing), you will have to configure the ACE to do SSL termination. Once the connection is decrypted, the ACE can do any processing it needs before sending the connection towards the server either in clear text or again using HTTPS.
I would recommend you to have a look at the link below. This is an example of how to configure an ACE for end-to-end SSL (so, HTTPS on both sides of the ACE). In the example, the only L7 processing that is being done is matching on the URL, but it would be enough to replace that part with whatever header insertion commands you need
http://www.cisco.com/en/US/partner/products/hw/modules/ps2706/products_configuration_example09186a00809c6f37.shtml
If you still need more help to understand any of the points involved in the process, please, do not hesitate to contact me again.
Regards
Daniel

I`m trying to develop an optimistic concurency based on the Etag Header. This header is being sent OK on every GET request, but NOT being sent on a POST. Why?

I`m trying to implement an optimistic concurrency control over a web application entities.
I`m attaching an Etag HTTP Header to every URI that represents an entity.
On successive GET requests this header is being sent back as If-None-Match (witch is OK)
The PROBLEM is on a POST request, the ETAG is not being sent back (neither If-None-Match, If-Match, etc..).
My question is : Is this the desired behavior? The browser omits this on purpose on a Http POST?

Hi Daniel,
Do you still have this problem ?
(If you found a solution a link to that may help others)

Servlet instances being destroyed?

Hi,
          I converted my web app from 5.1 to 6.0 and tried hitting a jsp page. All of
          a sudden, I get the following:
          <[WebAppServletContext kiko] *.html: destroy>
          ####<Nov 7, 2000 4:44:37 PM PST> <Info> <HTTP> <> <myserver> <main> <guest>
          <> <101142>
          <Error unregistering servlet runtime
          mydomain:Name=myserver_kiko_kiko_weblogic.servlet.FileServlet_170,Location=m
          yserver,Type=ServletRuntime>
          javax.management.InstanceNotFoundException:
          mydomain:Name=myserver_kiko_kiko_weblogic.servlet.FileServlet_170,Location=m
          yserver,Type=ServletRuntime
          at
          javax.management.MBeanServer.unregisterMBean(MBeanServer.java:866)
          at
          weblogic.management.internal.RemoteMBeanServerImpl.unregisterMBean(RemoteMBe
          anServerImpl.java:106)
          at
          weblogic.management.runtime.RuntimeMBeanDelegate.unregister(RuntimeMBeanDele
          gate.java:96)
          at
          weblogic.servlet.internal.ServletStubImpl.destroyServlet(ServletStubImpl.jav
          a:442)
          at
          weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.jav
          a:526)
          at
          weblogic.servlet.internal.ServletStubImpl.checkForReload(ServletStubImpl.jav
          a:464)
          at
          weblogic.servlet.internal.ServletStubImpl.getServlet(ServletStubImpl.java:29
          8)
          at
          weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
          :201)
          at
          weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
          ntext.java:1114)
          at
          weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
          :1388)
          at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:133)
          at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:116)
          --------------- nested within: ------------------
          weblogic.management.ManagementException: - with nested exception:
          [javax.management.InstanceNotFoundException:
          mydomain:Name=myserver_kiko_kiko_weblogic.servlet.FileServlet_170,Location=m
          yserver,Type=ServletRuntime]
          at
          weblogic.management.runtime.RuntimeMBeanDelegate.unregister(RuntimeMBeanDele
          gate.java:98)
          at
          weblogic.servlet.internal.ServletStubImpl.destroyServlet(ServletStubImpl.jav
          a:442)
          at
          weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.jav
          a:526)
          at
          weblogic.servlet.internal.ServletStubImpl.checkForReload(ServletStubImpl.jav
          a:464)
          at
          weblogic.servlet.internal.ServletStubImpl.getServlet(ServletStubImpl.java:29
          8)
          at
          weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
          :201)
          at
          weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
          ntext.java:1114)
          at
          weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
          :1388)
          at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:133)
          at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:116)
          Why is the FileServlet instance being destroyed by WL?
          Gene Chuang
          Join Kiko.com!


I suspect that what is happening here is that when the jsp gets compiled, the
          code that detects changes in the applications directory notices that the app
          has changed and tries to reload it. This seems like a bug to me. I have
          entered CR038194 to track this problem.
          mark
          Gene Chuang wrote:
          > Hi,
          >
          > I converted my web app from 5.1 to 6.0 and tried hitting a jsp page. All of
          > a sudden, I get the following:
          >
          > <[WebAppServletContext kiko] *.html: destroy>
          > ####<Nov 7, 2000 4:44:37 PM PST> <Info> <HTTP> <> <myserver> <main> <guest>
          > <> <101142>
          > <Error unregistering servlet runtime
          > mydomain:Name=myserver_kiko_kiko_weblogic.servlet.FileServlet_170,Location=m
          > yserver,Type=ServletRuntime>
          > javax.management.InstanceNotFoundException:
          > mydomain:Name=myserver_kiko_kiko_weblogic.servlet.FileServlet_170,Location=m
          > yserver,Type=ServletRuntime
          > at
          > javax.management.MBeanServer.unregisterMBean(MBeanServer.java:866)
          > at
          > weblogic.management.internal.RemoteMBeanServerImpl.unregisterMBean(RemoteMBe
          > anServerImpl.java:106)
          > at
          > weblogic.management.runtime.RuntimeMBeanDelegate.unregister(RuntimeMBeanDele
          > gate.java:96)
          > at
          > weblogic.servlet.internal.ServletStubImpl.destroyServlet(ServletStubImpl.jav
          > a:442)
          > at
          > weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.jav
          > a:526)
          > at
          > weblogic.servlet.internal.ServletStubImpl.checkForReload(ServletStubImpl.jav
          > a:464)
          > at
          > weblogic.servlet.internal.ServletStubImpl.getServlet(ServletStubImpl.java:29
          > 8)
          > at
          > weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
          > :201)
          > at
          > weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
          > ntext.java:1114)
          > at
          > weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
          > :1388)
          > at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:133)
          > at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:116)
          > --------------- nested within: ------------------
          > weblogic.management.ManagementException: - with nested exception:
          > [javax.management.InstanceNotFoundException:
          > mydomain:Name=myserver_kiko_kiko_weblogic.servlet.FileServlet_170,Location=m
          > yserver,Type=ServletRuntime]
          > at
          > weblogic.management.runtime.RuntimeMBeanDelegate.unregister(RuntimeMBeanDele
          > gate.java:98)
          > at
          > weblogic.servlet.internal.ServletStubImpl.destroyServlet(ServletStubImpl.jav
          > a:442)
          > at
          > weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.jav
          > a:526)
          > at
          > weblogic.servlet.internal.ServletStubImpl.checkForReload(ServletStubImpl.jav
          > a:464)
          > at
          > weblogic.servlet.internal.ServletStubImpl.getServlet(ServletStubImpl.java:29
          > 8)
          > at
          > weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
          > :201)
          > at
          > weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
          > ntext.java:1114)
          > at
          > weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
          > :1388)
          > at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:133)
          > at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:116)
          >
          > Why is the FileServlet instance being destroyed by WL?
          >
          > --
          > Gene Chuang
          > Join Kiko.com!

Http header referer being destroyed

Similar Messages

Maybe you are looking for