Daniel Nashed's Blog

Traveler HTTPS Only

We ran into issues with double password dialog when accessing the Traveler homepage (servlet) in a pure HTTPS environment with only authenticated users. So this is mainly a issue with disabled anonymous access.
The server has HTTP disabled and only HTTPS running for security reasons.
Because basic authentication is required in order for mobile devices to detect wrong passwords (they cannot read the forms based login return code used by SSO configurations) no HTTPs cookie is present.

By default the realm used by the server is set to the servlet and the image on the Traveler homepage comes from the /traveler/images directory.
That's why sometimes devices prompt for another authentication.

To avoid this issue you can set a "WEB_REALM_STRING" "/" in TrueSyncServer section of NTSConfig.xml

Example:

<COMPONENT COMPONENT_TYPE="TrueSyncServer"> 
<PROPERTY NAME="WEB_REALM_STRING" VALUE="/"/> 

This will set the realm to the root instead of a sub-directory.

In our configuration this solved the double authentication issue.

-- Daniel

• Comments [2]