This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 146720 - GF cannot punch through authenticating proxy to run a WS client
Summary: GF cannot punch through authenticating proxy to run a WS client
Status: VERIFIED INVALID
Alias: None
Product: serverplugins
Classification: Unclassified
Component: Sun Appserver 9 (show other bugs)
Version: 6.x
Hardware: All Windows Vista
: P3 blocker (vote)
Assignee: Vince Kraemer
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-09-09 23:29 UTC by Lukas Jungmann
Modified: 2009-02-19 23:03 UTC (History)
1 user (show)

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments
error dialogs (289.51 KB, image/png)
2008-09-09 23:31 UTC, Lukas Jungmann
Details
ide's proxy settings (31.92 KB, image/png)
2008-09-09 23:33 UTC, Lukas Jungmann
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Lukas Jungmann 2008-09-09 23:29:50 UTC
-download and install ie. CC Proxy from http://www.youngzsoft.net/ccproxy/ (or any other Mac/*nix alternative)
-set it so it requires username/password authentication for _all_ connections - including those for localhost etc. (to
simulate connection to remote server which is behind secured proxy server)
-verify proxy setup ie. in a browser or IDE's welcome screen (use Tools->Options to route all connections through proxy)

(you might want to disconnect from the network and disable all running firewalls at this point)

-start IDE with fresh userdir
-register GlassFish server in the IDE
-start it from the IDE

=> IDE waits for around 2 minutes then shows few irrelevant dialogs which you'll have to close and finally after ~2
minutes starts the server but then IDE cannot detect its state (= should be running, right?)

see attached screenshot for all funny dialogs which appears
Comment 1 Lukas Jungmann 2008-09-09 23:31:53 UTC
Created attachment 69465 [details]
error dialogs
Comment 2 Lukas Jungmann 2008-09-09 23:33:26 UTC
Created attachment 69467 [details]
ide's proxy settings
Comment 3 Vince Kraemer 2008-09-10 00:47:50 UTC
thanks for setting up the test environment.  What is the IP of your proxy server?
Comment 4 Vince Kraemer 2008-09-10 00:56:33 UTC
I guess I need the user name and password, too....
Comment 5 Vince Kraemer 2008-09-10 03:10:40 UTC
please attach the server and ide log files.
Comment 6 Lukas Jungmann 2008-09-10 10:32:26 UTC
why this is incomplete? there's enough info about how to reproduce in this report, you only have to spend ~10mins on
setting up environment as is described here...

part of the server log is shown in the screenshot, ide log shows nothing interesting. I'll try to find them somewhere on
the disk
Comment 7 Vince Kraemer 2008-09-10 15:33:21 UTC
this has been "broken" for quite some time.  I have not seen a user generated report about this kind of issue... but I
may have missed it.

The configuration described in this issue is pretty obscure in development situations. Lowering to p3.
Comment 8 Lukas Jungmann 2008-09-10 16:31:23 UTC
obscure in development? perhaps yes, really, why would one want to try to connect to some remote server through some
secure proxy to get newer version of the app there... Wasn't NetBeans supposed to be a deploy tool for GlassFish?

was issue 135838 filed by a Sun employee?
Comment 9 _ ludo 2008-09-12 00:18:32 UTC
Would be interesting to also know if GlassFish asadmin commands are working in such an environment...(deploy, stop,
undeploy, etc)
If not, fixing on the NetBeans side would be useless for now.

What about the javascript debugger module in NetBeans? Or the http monitor with Tomcat?


Comment 10 Lukas Jungmann 2008-09-12 07:40:43 UTC
That's true. From the IDE perspective - my assumption is that everything will work correctly - ie. IDEs welcome screen
works fine - if there won't be GF plugin installed in the IDE and this my opinion is based on the lines 70-72 in
NbAuthenticator class, javadoc for java.net.Authenticator (method setDefault) and rfc2068 (or other similar document
talking about definitions of HTTP, particularly about HTTP headers) - but I can misunderstand that - anyway I haven't
tried asadmin command itself yet - can try next week.

And as I already said (in private conversation) - if there'll be added at least some logging to be able to say what's
really happening, I'll have no problem to lower this to P3.
Comment 11 Vince Kraemer 2008-09-16 15:41:48 UTC
It looks like there are a couple configurations that are worth verifying...

1. the IDE and app server on a local machine with a proxy as the only "gateway" to some external resource.
   a. no authentication at the proxy.
   b. authentication at the proxy.

2. the IDE working with a remote server with a proxy in between the two.
   a. the IDE is in the proxied environment.
   b. the server is in the proxied environment.

One of the folks from the Sun Proxy Server QA team set up a server with authentication, so we should be able to simulate
most all of these configurations...
Comment 12 Lukas Jungmann 2008-09-16 15:49:49 UTC
this is great news Vince!
Comment 13 Vince Kraemer 2008-09-16 21:06:23 UTC
1a. seems to be working.

1b. server side issue: https://glassfish.dev.java.net/issues/show_bug.cgi?id=6128... I would assume that the http
monitor will not work also... but that due to the same server side issue.

2a. appears to be working correctly. I was able to browse the tree below the server node and deploy/run an app from the
IDE (behind an auth proxy) to the AS (not behind the proxy)

2b. this appears to work...  The IDE can connect directly to the server's http port... The user can browse through the
runtime tree and deploy/run an app... as long as the app doesn't run into the issue associated with 1a.

The config that was created when this issue was opened is not a realistic configuration and it is not a surprise that it
did not work.  based on the testing I have done, I am going to change the summary on this issue to reflect the current
situation (server side issue) and lower the priority to p3.
Comment 14 Lukas Jungmann 2008-09-17 21:03:35 UTC
Thanks!

now I can see:

WARNING [org.netbeans.modules.j2ee.sun.ide.editors.AdminAuthenticator]: No authentication set while requesting
https://localhost:4848/web1/remotejmx

in the IDE's log which I hope will help me to find what's wrong in my "obscure" environment

BTW: see desc #5 in issue 86877, not sure it's related to this proxy & auth. magic
Comment 15 rmatous 2008-10-09 13:20:22 UTC
*** Issue 149620 has been marked as a duplicate of this issue. ***
Comment 16 Vince Kraemer 2008-10-25 05:25:17 UTC
I need to work on the server team some more for this. I hope v2.1 has a strategy to resolve this.
Comment 17 Vince Kraemer 2008-11-14 21:59:45 UTC
the "bug" is in the GF server code. not the plugin.  the issue is filed. marking as server-side in the whiteboard and
INVALID here, since NO AMOUNT of plugin code can resolve the fact that the server doesn't have the necessary
infrastructure to support resolving this.
Comment 18 Lukas Jungmann 2008-11-18 10:51:13 UTC
Thanks for your work on this, v.