Hi,

I have a proxy server configured in front of 2 managed servers.

The managed servers have secure pages and are using form auth and the
proxy server is working properly. In other words, I point my browser
at the proxy and I end up being services by one of the managed servers.
If I attempt to access a secure page via the proxy I am sent to the form
login page via the proxy.

Now for the problem:

If I configure the proxy server to use basic auth, and secure all
pages in the proxy, I must provide my userid/password to the proxy
server (this is working fine) before I can get to one of the managed
servers. I can get to the welcome page of the managed server (which is
not secure) There is a link to a secure page on the welcome page. When
I click on the link to the secure page, I am sent to the form auth by
the managed server. I authenticate, but I can never see the secure
page. I end up being redirected to the form login page endlessly.

Both the proxy server and the managed server are usign the default
JSESSIONID.

Here is a section of the web.xml for the proxy server:


HttpClusterServlet

weblogic.servlet.proxy.HttpClusterServlet

WebLogicCluster
${ProxyConfig}


SecureProxy
ON


Debug
ON


DebugConfigInfo
ON


CookieName
JSESSIONID


CookieName
_wl_authcookie_



HttpClusterServlet
gcmgui/*


HttpClusterServlet
applauncher/*


HttpClusterServlet
ssoadmin/*


HttpClusterServlet
default/*


HttpClusterServlet
domainadmin/*


HttpClusterServlet
gsc/*


HttpClusterServlet
psr/*


HttpClusterServlet
broadcastclient/*


HttpClusterServlet
nra/*


Here is the proxy debug:

: ===New Request===GET
/applauncher/jsp/AppLaunche
r.jsp HTTP/1.1

: Found cookie: Sf4VoFtpQwG]dTNEh9Yq
: #### Trying to connect with server
-213061352!10
..68.10.87!1080!10443
: Remove idle for '30' secs:
ProxyConnection(isSec
ureProxy=true): 10.68.10.87:10443, keep-alive='30'secs
: Create connection:
ProxyConnection(isSecureProxy
=true): 10.68.10.87:10443, keep-alive='30'secs
: In-bound headers:
: Accept: image/gif, image/x-xbitmap,
image/jpeg,
image/pjpeg, application/vnd.ms-excel, application/msword,
application/vnd.ms-po
werpoint, */*
: Accept-Language: en-us
: Accept-Encoding: gzip, deflate
: User-Agent: Mozilla/4.0 (compatible;
MSIE 6.0; W
indows NT 4.0; H010818)
: Host: localhost:18002
: Connection: Keep-Alive
: Cookie:
JSESSIONID=1PEosMJQ9ZJrewjj1t5nZfNtYe1e5
pWYbjyBGvZ1ExEY8YoueKTG!-213061352!NONE;
_wl_authcookie_=Sf4VoFtpQwG]dTNEh9Yq
: Authorization: Basic
cmFwcGVsYmE6b3V0Mmx1bmNo
: HTTP/1.1 302 Moved Temporarily
: Out-bound headers:
: Date: Fri, 11 Jul 2003 18:40:07 GMT
: Location:
https://localhost:18002/applauncher/un
restricted/jsp/FormLogin.jsp
: Server: WebLogic WebLogic Server 8.1
Thu Mar 20
23:06:05 PST 2003 246620
: Transfer-Encoding: Chunked
: ===New Request===GET
/applauncher/unrestricted/j
sp/FormLogin.jsp HTTP/1.1

: Found cookie: UZ]OrXsBP6uEEa[0veSz
: Request successfully processed
: #### Trying to connect with server
-213061352!10
..68.10.87!1080!10443
: Requeue connection:
ProxyConnection(isSecureProx
y=true): 10.68.10.87:10443, keep-alive='30'secs
: Recycle connection:
ProxyConnection(isSecureProx
y=true): 10.68.10.87:10443, keep-alive='30'secs
: Request successfully processed
: In-bound headers:
: Accept: image/gif, image/x-xbitmap,
image/jpeg,
image/pjpeg, application/vnd.ms-excel, application/msword,
application/vnd.ms-po
werpoint, */*
: Accept-Language: en-us
: Accept-Encoding: gzip, deflate
: User-Agent: Mozilla/4.0 (compatible;
MSIE 6.0; W
indows NT 4.0; H010818)
: Host: localhost:18002
: Connection: Keep-Alive
: Authorization: Basic
cmFwcGVsYmE6b3V0Mmx1bmNo
: Cookie:
JSESSIONID=1PEHvo1gQIbwOMuVsU9pJnnvlGBSP
74ZUcSHwazE7domCL8UlVA2!-937872307; _wl_authcookie_=UZ]OrXsBP6uEEa[0veSz
: HTTP/1.1 200 OK
: Out-bound headers:
: Date: Fri, 11 Jul 2003 18:40:08 GMT
: Server: WebLogic WebLogic Server 8.1
Thu Mar 20
23:06:05 PST 2003 246620
: Content-Length: 4238
: Set-Cookie:
JSESSIONID=1PEIxJ21oT5H3Z2ilQjPqpq1V
kdOhEnNbbz9wviTtTTZj6IBp29b!-213061352!NONE; path=/
: Request successfully processed
: Requeue connection:
ProxyConnection(isSecureProx
y=true): 10.68.10.87:10443, keep-alive='30'secs
: Request successfully processed
: Trigger remove idle for '35' secs:
ProxyConnecti
on(isSecureProxy=true): 10.68.10.87:10443, keep-alive='30'secs


Thanks,

Rob