Error 467 and Kerberos SSO

asked 2013-07-10 09:14:13 +0800

alepiccolo gravatar image alepiccolo

Good morning, We have developed an application with ZK 6.5.1 and integrated the SSO Kerberos for access to DFS Documentum. Often we get the error "The server is temporarily out of service. Would you like to try again? (467: Incomplete Request)". I have read some posts where they talk about the message but do not have a real solution. It 'possible that there is a link between the integration of ZK and SSO and that error? In order to set the SSO token use this code: String spnegoTkn = request.getHeader("Authorization"); if (spnegoTkn == null) { response.setStatus(401); response.setHeader("WWW-Authenticate", "Negotiate"); }

Thanks in advance for your help

delete flag offensive retag edit

1 Answer

Sort by ยป oldest newest most voted

answered 2013-07-14 08:40:47 +0800

benbai gravatar image benbai
2228 6

It probably caused by the au request is redirected to SSO framework and then redirected back with ~/zkau (au request without params), you can confirm this with fiddler.

If it is the case, you can try some possible workaround:

  1. To keeping authentication valid, you can try to write a pure html page that can handle whole authenticate process, then use an hidden iframe link to that html page periodically, move this process out of zkau ajax request.

  2. If they (ZK project and SSO server) are the same domain, you can try handle the process flow with cookies at client side.

  3. Check whether there are any Web Service API provided by Kerberos that you can control with java/javascript programmatically.

link publish delete flag offensive edit
Your answer
Please start posting your answer anonymously - your answer will be saved within the current session and published after you log in or create a new account. Please try to give a substantial answer, for discussions, please use comments and please do remember to vote (after you log in)!

[hide preview]

Question tools




Asked: 2013-07-10 09:14:13 +0800

Seen: 8 times

Last updated: Jul 14 '13

Support Options
  • Email Support
  • Training
  • Consulting
  • Outsourcing
Learn More