Web Start/JNLP in a Single-Sign On environment

Hello,

I'm deploying a Swing application using Web Start in a single-sign on
environment. (In my particular case I'm using JOSSO and Tomcat). When a
user is authenticated a SSO session ID cookie is created. Therefore I
can protect the URL to the JSP that generates the JNLP file. The
problem I'm having is that when javaws attempts to download the
application jar files, it fails because the web server redirects the
HTTP GET to a login page. The reason is that I'm not using basic
authentication and so the security agent on the web server is expecting
to find the SSO session ID cookie with the HTTP request. Javaws doesn't
have this cookie so the HTTP GET returns the HTML of the login page,
not the JAR file itself and the application fails to launch.

I've searched through Sun's forums on the topic and found only
solutions using basic authentication. Another approach is to put the
JAR files in a non-secure location so that no authentication is
required to download them.

I don't have the option of using different implementations of javaws.
The application must be launched by clicking a link in a browser. There
is no offline allowed and I don't include the href attribute in the
JNLP file.

Has anyone deployed a web start app in a SSO environment and if so,
how? Or is it not possible?

Thank you,
Steve A.

.

Relevant Pages

  • Re: Allow jar files to be served without authentification?
    ... I need to be able to allow .jar files to be served up without ... Configure .jar files to only have Anonymous authentication. ... are on a per-URL scope, ... trying to tell IIS "only anonymous authentication for .jar files". ...
    (microsoft.public.inetserver.iis.security)
  • Re: Allowing authorized remote users
    ... > MAC Address Authentication? ... Depending on your threat environment, ... > Access Control address that is burnt into each the Network ... > certs, smartcards, or RSA SecurID one-time password tokens, with ...
    (microsoft.public.security)
  • Re: How to securely publish a Click Once application
    ... if you are deploying offline applications (ClickOnce deployments ... Windows NT authentication is unsupported. ... for any updates - but because the update location doesn't allow ...
    (microsoft.public.dotnet.framework)
  • Re: javamail code in servlet works locally, but not when uploaded to host
    ... Martin Gregorie wrote: ... how do you know that they are valid in the deployment ... Would seem odd to me to have authentication information that is valid ... environment. ...
    (comp.lang.java.programmer)
  • Re: GNOME Login Problem
    ... the environment then. ... How about network connectivity? ... authentication system but put the home directory local on the ... On Aug 26, 2004, at 10:46 AM, Oliver Aaltonen wrote: ...
    (RedHat)