J'ai fait quelques tests là-dessus aujourd'hui (serveur de cache ESI + authentification NTLM sur Jahia). Les jetons d'authentification sont bien transmis par le serveur de cache (en NTLM comme en Basic Authentication). Une fois connecté, la page s'affiche donc correctement.
Par contre, si j'attends qu'un fragment expire dans le cache, puis que je réactualise la page, j'ai sytématiquement l'erreur suivante à la place du fragment en question : Error: Cannot retrieve the requested page. There was no response from the application web server for the page you requested. Please notify the site's webmaster and try your request again later. - Click here for Details : *ESI ERROR: Could not fetch the object with urlKey [GET_Url_http://REMOTEmyServer3/jahia/?__esi_fragment=5&user=pTK5e9dNSi6prc2BCprc2FCkprc2FLJHjwprc3Dprc3D] due to error: - Http Status Code Non-Autoris? - for client request: http://localhost:8081/jahia/* Exception: org.jahia.esi.exceptions.TransferFailedException: Not authorized. ------------------------------ Jahia ESI Cache Server - version 0.9 Y aurait-il un réglage que j'aurais manqué? La log du serveur Jahia ne bouge pas, comme si il n'avait pas été contacté. Voici ce qui se trouve dans log du serveur de cache : 2007-02-02 17:53:31,843 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:31,843 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:31,843 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:31,937 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:31,937 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:31,937 WARN FetcherTask.run - 68 - TransferFailed Exception : <b>ESI ERROR: Could not fetch the object with urlKey [GET_Url_http://REMOTEmySer ver3/jahia/?__esi_fragment=5&user=pTK5e9dNSi6prc2BCprc2FCkprc2FLJHjwprc3Dprc3D] due to error: - Http Status Code Non-Autoris? - for client request: http://loca lhost:8081/jahia/</b> <br><br>Exception: org.jahia.esi.exceptions.TransferFaile dException: Not authorized. 2007-02-02 17:53:31,937 INFO MainCache.addUnfectched - Couldn't fetch [GET_Url_ http://REMOTEmyServer3/jahia/?__esi_fragment=5&user=pTK5e9dNSi6prc2BCprc2FCkprc2 FLJHjwprc3Dprc3D]. Http Response Code: 401. 2007-02-02 17:53:31,953 INFO ProxyFilter.doFilter - GET[ http://localhost:8081/ jahia/] [pid=2 siteId=2 mode=normal user=a013533] served in [110ms] 2007-02-02 17:53:32,265 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,265 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,265 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,296 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,312 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,312 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,343 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,343 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,343 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,359 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,359 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,359 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,484 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,484 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,484 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,500 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,500 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,500 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,531 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,531 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,531 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,562 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,562 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,562 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,578 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,578 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,578 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,593 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,593 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,593 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,609 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,609 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,609 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,640 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,640 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,640 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,656 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,656 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,656 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,671 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,671 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,671 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,703 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,703 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,703 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,718 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,718 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,718 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,734 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,750 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,750 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,781 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,781 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,781 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,781 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,781 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,781 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,781 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,781 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,859 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,859 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,859 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,859 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,859 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,859 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,859 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,890 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,890 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,890 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,890 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,890 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,906 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,906 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,906 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,906 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,906 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,906 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,921 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,921 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,921 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,921 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,921 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,921 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,921 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,937 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,937 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,937 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,937 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,937 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,937 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,937 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,937 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,937 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:32,953 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:32,953 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:32,953 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,031 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,031 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,031 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,031 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,031 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,031 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,046 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,046 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,046 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,046 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,046 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,046 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,046 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,046 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,046 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,093 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,093 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,093 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,109 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,109 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,109 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? 2007-02-02 17:53:33,109 INFO AuthChallengeProcessor.selectAuthScheme - ntlm aut hentication scheme selected 2007-02-02 17:53:33,109 INFO HttpMethodDirector.processWWWAuthChallenge - No cr edentials available for NTLM <any realm>@localhost:8080 2007-02-02 17:53:33,109 ERROR ResponseHandlerBase.retrieveUserInfo - userGroupMe mbershipFetcherMethod failed : HTTP/1.1 401 Non-Autoris? Le 29/01/07, Boris Maras <[EMAIL PROTECTED]> a écrit :
Quelqu'un a-t-il déjà testé l'utilisation d'un serveur de cache ESI avec une authentification NTLM sur le serveur Jahia? Il faudrait que le serveur de cache transmette correctement les challenge/response NTLM entre le serveur Jahia et le client. Je suppose a priori que ça fonctionne, mais je serais rassuré si quelqu'un avait déjà testé... J'aurais également besoin que cela fonctionne avec une authentification Basic, mais je suppose que ça ne pose pas de problème dans la mesure où le login/mot de passe est transmis à chaque requête dans l'en-tête HTTP
