Welcome to ISAserver.org

Java Application Fails

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Java Application Fails

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

Java Application Fails - 30.Jan.2007 3:22:05 PM

strickle88

Posts: 10
Joined: 17.Jan.2007
Status: offline

I have a web site that runs Oracle Portal and sits behind an ISA 2006 (Evaluation Copy) firewall. The web site is fully functional using FireFox, however, Internet Explorer v 6+ fail on certain Java portions of the web site.

Are there any fixes or patches for ISA 2006 that may fix this problem or does anyone know why IE would fail while FF works?

Thank You.

Post #: 1

RE: Java Application Fails - 2.Feb.2007 11:21:21 AM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

If Firefox works, what makes you think it's an ISA FIREWALL problem?

Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to strickle88)

Post #: 2

RE: Java Application Fails - 2.Feb.2007 11:44:41 AM

strickle88

Posts: 10
Joined: 17.Jan.2007
Status: offline

The only thing I have to go on is that if I remove ISA from the equation everything works fine. Unfortunately it could also be the code in the portal application itself but I have no control or faith in our developers to give me any guidance there.

I've also found in my web logs the FF will report INET 200 status while IE reports INET 302, 304 and 2148074263 errors on the same page hits.

Thanks for your help.

(in reply to tshinder)

Post #: 3

RE: Java Application Fails - 2.Feb.2007 11:51:38 AM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

OK, then that would provide some evidence.

Are you using a Web or Server Publishing Rule?

Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to strickle88)

Post #: 4

RE: Java Application Fails - 2.Feb.2007 12:02:07 PM

strickle88

Posts: 10
Joined: 17.Jan.2007
Status: offline

Web.

(in reply to strickle88)

Post #: 5

RE: Java Application Fails - 2.Feb.2007 12:17:48 PM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

OK, then the next step is to take packet traces to figure out where the application fails.

Take them on the client and both sides of the ISA Firewall.

Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to strickle88)

Post #: 6

RE: Java Application Fails - 2.Feb.2007 1:49:02 PM

strickle88

Posts: 10
Joined: 17.Jan.2007
Status: offline

I've analyzed the packets with ethereal at the client, poartal server and ISA server and found that with IE there are a lot of TCP ZEROWINDOW messages and DUP ACK messages. With FF I see a few DUP ACK but no TCP ZEROWINDOW messages.

Thanks.

(in reply to tshinder)

Post #: 7

RE: Java Application Fails - 3.Feb.2007 1:33:05 PM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

Hmmm. Not very useful. Nothing at the application layer?

Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to strickle88)

Post #: 8

RE: Java Application Fails - 7.Feb.2007 11:39:49 AM

strickle88

Posts: 10
Joined: 17.Jan.2007
Status: offline

Analyzing the ISA logs further, with IE the "referring server" entry in the log is blank, while in FF the referring server entry contains what I assume is the proper URL to make the application work.

Does this give insight into anything?

Thanks for your help.

(in reply to tshinder)

Post #: 9

RE: Java Application Fails - 8.Feb.2007 8:44:00 AM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

Are both browsers configured as a Web proxy client?

Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to strickle88)

Post #: 10

RE: Java Application Fails - 8.Feb.2007 9:34:30 AM

strickle88

Posts: 10
Joined: 17.Jan.2007
Status: offline

Yes.

(in reply to tshinder)

Post #: 11

RE: Java Application Fails - 23.Feb.2007 10:38:24 PM

shaneyoder

Posts: 6
Joined: 27.Jul.2004
Status: offline

I have a very similar issue. I have an ISA 2006 (eval) with Web Publishing Rule to internal web server. The web page calls up a java .jar file. With a HTML FBA the java applet won't load with IE 6 and above. It does work with FireFox 2.0.

However, if I switch to HTTP Authentication (Basic) the java applet will load just fine (after an extra authentication prompt). So, there seems to be a connection with java, IE, and HTML FBA.

Any thoughts?

Shane

(in reply to strickle88)

Post #: 12

RE: Java Application Fails - 15.Mar.2007 9:21:49 PM

shaneyoder

Posts: 6
Joined: 27.Jul.2004
Status: offline

Bump.

Anyone have any advice on this issue?

Thanks,

Shane

(in reply to shaneyoder)

Post #: 13

RE: Java Application Fails - 20.Mar.2007 12:03:22 PM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

Try using delegation of basic authentication -- that should get rid of the second prompt.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to shaneyoder)

Post #: 14

RE: Java Application Fails - 29.Mar.2007 4:03:56 PM

sveelen

Posts: 4
Joined: 29.Mar.2007
Status: offline

Try changing the user agent; the java runtime engine advirtises itself as:
Mozilla/4.0 (Windows XP 5.1) Java/1.6.0-rc (example)
And ISA has a user agent rule like this:

** User-Agent "*Mozilla*"
-- Description :
-- Enabled : Yes
-- FBAFormsType: HTML4

If you add *Java* and use FBAFormsType: HTTPBASIC it will switch to basic authentication.

(in reply to tshinder)

Post #: 15

RE: Java Application Fails - 18.Apr.2007 6:08:30 PM

rcitguy

Posts: 5
Joined: 18.Apr.2007
Status: offline

Hello sveelen,
in your reply id# 10 you say change the user agent? Where is this perfromed?

any help would be greatl;y appreciated.

rcitguy

(in reply to sveelen)

Post #: 16

RE: Java Application Fails - 21.Apr.2007 6:21:53 AM

sveelen

Posts: 4
Joined: 29.Mar.2007
Status: offline

Hi rcitguy,

I downloaded the Fix Symbian script from http://isatools.org/tools.asp?Context=ISA2006 and used the functions in the script to add the user agent in the ISA configuration. It was original intended to fix the misspelled Sybain user agent but the functions are clear enough to understand and use them for your situation. For ISA standard it saves it to the registry and for enterprise in the CSS (Adam). You have to add a User Agent first, move it in the order you want and save it.

Goodluck

sveelen

(in reply to rcitguy)

Post #: 17

RE: Java Application Fails - 22.Apr.2007 1:10:56 PM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

Nice tip!

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to sveelen)

Post #: 18

RE: Java Application Fails - 24.Apr.2007 10:05:09 AM

rcitguy

Posts: 5
Joined: 18.Apr.2007
Status: offline

Hello sveelen,
1st off I want to thank you very much for replying. Secondly, I've downloaded the fix, read about it's purpose and applied this to rectify the symbain/symbian issue on my 2006 ISA Server.

The part were I get lost at is your reference to CSS and more importantly, exactly were do I add the new user-agent values for Java etc.

Any further assistance you could provide would be greatly appreciated.

Bets Regards,
Rcitguy

(in reply to tshinder)

Post #: 19

RE: Java Application Fails - 14.May2007 4:36:53 PM

sveelen

Posts: 4
Joined: 29.Mar.2007
Status: offline

Hi rcitguy,

sorry for my late response.
I changed the Main function something like the following:

function main()
{
    var oISA    = new ActiveXObject( "FPC.Root" );
    var cArrays = oISA.Arrays;
    var eArrays = new Enumerator( cArrays );
    for( ; !eArrays.atEnd(); eArrays.moveNext() )
    {
        var oArray = eArrays.item();
        WScript.StdOut.WriteLine( "\r\nWorking in Array \"" + oArray.Name + "\"...");
        var cUserAgents = oArray.RuleElements.UserAgentMappings;
       AddUserAgent( cUserAgents, "*Java*", 3, "JavaRuntime" );
       SaveUserAgents( cUserAgents );
       var oJava       = GetUserAgent( cUserAgents, "*Java*" );
       MoveDown( cUserAgents, 7 );
       var oJava       = GetUserAgent( cUserAgents, "*Java*" );
       UpdateUserAgent( oJava, "*Java*", 3, "JavaRuntime", true)
       SaveUserAgents( cUserAgents );
       EnumUserAgents( cUserAgents );
        WScript.StdOut.WriteLine( "++ Done with array \"" + oArray.name + "\"." );
    }
}

When calling saveuseragents function it is saved to CSS or the registry.

Hopefully you can work with this information.

Regards,

Stephan

(in reply to rcitguy)

Post #: 20