AW: AW: ISAPI Redicect - Request Entitiy too large
Yes, that´s it. We changed the size to 12k and everything works fine. It is a lot tricky, that the default value is not fitting in a default environment. Thanks to all for your help. BR Alex -Ursprüngliche Nachricht- Von: cjder...@gmail.com [mailto:cjder...@gmail.com] Im Auftrag von chris derham Gesendet: Mittwoch, 5. Oktober 2011 12:53 An: Tomcat Users List Betreff: Re: AW: ISAPI Redicect - Request Entitiy too large Alexander, If you are using authorisation header, then you are using SPNGEO. This header encodes the users group membership in the authorisation header. By default tomcat has an 8k maximum header, whilst users belonging to many groups can have an authorisation token that can swell to larger than this size. This explains why you see some people can login and others can't. Just change the maxHttpHeaderSize to something larger than the default 8k and you should be set. We used 32k Chris smime.p7s Description: S/MIME cryptographic signature
AW: AW: ISAPI Redicect - Request Entitiy too large
Hello, Please find below the full loglevel from isapi with level debug for the single request to access a url/jci/ Yes, you are right. In the header will only be the username and domain passed to the application. In the application we make a request to query the NTLM with the given username and the current logged in user credentials. So no password will be transferred from browser to IIS resp. Tomcat. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] jk_set_time_fmt::jk_util.c (459): Pre-processed log time stamp format is '[%a %b %d %H:%M:%S.000 %Y] ' [Fri Sep 30 15:06:06.320 2011] [3456:1540] [info] init_jk::jk_isapi_plugin.c (2602): Starting Jakarta/ISAPI/isapi_redirector/1.2.32 () [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2620): Detected IIS version 7.5 [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2622): Using ini file D:\tecracer\software\tomcat\isapi\isapi_redirect.properties. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2628): Using log file d:\tecracer\software\tomcat\logs\isapi_redirect.log. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2629): Using log level 1. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2630): Using log rotation time 0 seconds. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2631): Using log file size 0 bytes. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2633): Using extension uri /tomcat/isapi_redirect.dll. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2634): Using worker file d:\tecracer\software\tomcat\conf\workers.properties. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2635): Using worker mount file d:\tecracer\software\tomcat\conf\uriworkermap.properties. [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2637): Using rewrite rule file . [Fri Sep 30 15:06:06.320 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2639): Using uri select 3. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2640): Using no chunked encoding. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2642): Using notification event SF_NOTIFY_AUTH_COMPLETE (0x0400) [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2652): Using uri header TOMCATURI00018000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2653): Using query header TOMCATQUERY00018000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2654): Using worker header TOMCATWORKER00018000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2655): Using worker index TOMCATWORKERIDX00018000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2656): Using translate header TOMCATTRANSLATE00018000:. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] init_jk::jk_isapi_plugin.c (2657): Using a default of 250 connections per pool. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/admin/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/manager/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/examples/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] jk_map_read_property::jk_map.c (491): Adding property '/jci/*' with value 'worker1' to map. [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_load::jk_uri_worker_map.c (1102): Loading urimaps from d:\tecracer\software\tomcat\conf\uriworkermap.properties with reload check interval 60 seconds [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/admin/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/manager/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.335 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/examples/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_add::jk_uri_worker_map.c (720): wildchar rule '/jci/*=worker1' source 'uriworkermap' was added [Fri Sep 30 15:06:06.351 2011] [3456:1540] [debug] uri_worker_map_dump::jk_uri_worker_map.c (171): uri map dump after file load: index=0 file='d:\tecracer\software\tomcat\conf\uriworkermap.properties' reject_unsafe=0 reload=60 modified=1317371602 checked=1317387966 [Fri Sep 30 15:06:06.351 2011]
