18-Opal

Question

How to disable Java Login in Internet Explorer

Forum|Forum|16 years ago
January 28, 2010
27 replies
8215 views

Hey Y'all:

We are currently on Windchill 9.0 m060, and when we use Internet Explorer to access Windchill, whenever a java applet launches, we have to "login" or Authenticate to get the applet to run. I will attach a screenshot showing the login window.

Funny thing is when you do the same thing using FireFox, no authentication window appears. MUCH nicer. Because of that, I don't think it is the server requiring us to authenticate.

So: How to get rid of the authenticate login?

-marc

CAD / PLM Manager

Other

J

jessh

12-Amethyst

The server requires the same authentication in either case.

The issue is all around how the browser and Java Plug-In share
credentials so you don't have to re-enter them -- or fails to do so as
the case may be.

In the case of Firefox (on Windows at least), this sharing just plain
works -- as you noted.

In the case of Internet Explorer, this will /not /work /unless/ you
check the "Remember my password" checkbox when logging into Windchill at
the browser level. This is due to an architectural shortcoming in
Internet Explorer according to the various folk I've asked (e.g. Sun
engineers).

I've had reports of cases where Internet Explorer and the Java Plug-In
fail to share the password even when this checkbox has been checked, but
have not managed to reproduce this, much less determine why this ever
occurs or how to fix this. This is a failing in Internet Explorer
and/or the Java Plug-In whose nature I've not been able to discover and
which is quite independent of Windchill as best I can tell.

Where possible the best solution is to simply to use Firefox (which is
faster too).

--
Jess Holle

Marc DeBower wrote:
>
> Hey Y'all:
>
> We are currently on Windchill 9.0 m060, and when we use Internet
> Explorer to access Windchill, whenever a java applet launches, we have
> to "login" or Authenticate to get the applet to run. I will attach a
> screenshot showing the login window.
>
> Funny thing is when you do the same thing using FireFox, no
> authentication window appears. MUCH nicer. Because of that, I don't
> think it is the server requiring us to authenticate.
>
> So: How to get rid of the authenticate login?
>
> -marc
>
> CAD / PLM Manager
>

1_blankfilename.txt

M

mdebower

Author

18-Opal

Jess,

Thanks for the info. We do experience the case where IE and Java fail to share the credentials. If you check the "Remember my password" box on the Java Authentication window, it will only remember it for that session. If you log out and back into Windchill you will have to re-enter the credentials every time.

Most of our users here have, and I do myself, have the Remember my Password checkbox selected on the IE log in window too, which does not help either.

Guess we will need to look at moving over to FF "officially".

-marc

In Reply to Jess Holle:

The server requires the same authentication in either case.

The issue is all around how the browser and Java Plug-In share
credentials so you don't have to re-enter them -- or fails to do so as
the case may be.

In the case of Firefox (on Windows at least), this sharing just plain
works -- as you noted.

In the case of Internet Explorer, this will /not /work /unless/ you
check the "Remember my password" checkbox when logging into Windchill at
the browser level. This is due to an architectural shortcoming in
Internet Explorer according to the various folk I've asked (e.g. Sun
engineers).

I've had reports of cases where Internet Explorer and the Java Plug-In
fail to share the password even when this checkbox has been checked, but
have not managed to reproduce this, much less determine why this ever
occurs or how to fix this. This is a failing in Internet Explorer
and/or the Java Plug-In whose nature I've not been able to discover and
which is quite independent of Windchill as best I can tell.

Where possible the best solution is to simply to use Firefox (which is
faster too).

--
Jess Holle

@unknown DeBower wrote:
>
> Hey Y'all:
>
> We are currently on Windchill 9.0 m060, and when we use Internet
> Explorer to access Windchill, whenever a java applet launches, we have
> to "login" or Authenticate to get the applet to run. I will attach a
> screenshot showing the login window.
>
> Funny thing is when you do the same thing using FireFox, no
> authentication window appears. MUCH nicer. Because of that, I don't
> think it is the server requiring us to authenticate.
>
> So: How to get rid of the authenticate login?
>
> -marc
>
> CAD / PLM Manager
>

J

jessh

12-Amethyst

Marc DeBower wrote:
>
> Jess,
>
> Thanks for the info. We do experience the case where IE and Java
> fail to share the credentials. If you check the "Remember my
> password" box on the Java Authentication window, it will only remember
> it for that session. If you log out and back into Windchill you will
> have to re-enter the credentials every time.
>
Yeah -- that checkbox won't help much.
>
> Most of our users here have, and I do myself, have the Remember my
> Password checkbox selected on the IE log in window too, which does not
> help either.
>
I wish I knew why or how to resolve this case. It could be as simple as
some obscure MSIE setting, but so far no one has figured this out.
>
> Guess we will need to look at moving over to FF "officially".
>

D

ddemay

1-Visitor

Yeah there is no easy way to accomplish this. Not impossible though. In the
Java Control Panel, you have a Network Settings box. From there, you can
configure a proxy http server or have a direct connection. Since Apache is
configured to authenticate you could configure the applet URL's to not
authenticate the same way as everything else does. You could hook onto the
session tracking cookie (JSESSIONID usually) and IP Address to indicate the
person is a current valid user. An SSL connection also helps because you
can combine the IP Address, session cookie, and various SSL properties which
should be unique. Don't see many obviously trying this, just thought I'd
post the thought though.

Firefox is just smarter in sharing its connection with the plugins. IE does
it separately.

_____

J

jessh

12-Amethyst

The *connection* is separate in each case. [All recent Java Plug-In's
use Java's own HTTP, JSSE, etc, libraries to form connections.]

The credentials, etc, are certainly shared more intelligently in
Firefox's case, though.

David DeMay wrote:
>
> Yeah there is no easy way to accomplish this. Not impossible though.
> In the Java Control Panel, you have a Network Settings box. From
> there, you can configure a proxy http server or have a direct
> connection. Since Apache is configured to authenticate you could
> configure the applet URL's to not authenticate the same way as
> everything else does. You could hook onto the session tracking cookie
> (JSESSIONID usually) and IP Address to indicate the person is a
> current valid user. An SSL connection also helps because you can
> combine the IP Address, session cookie, and various SSL properties
> which should be unique. Don't see many obviously trying this, just
> thought I'd post the thought though.
>
>
>
> Firefox is just smarter in sharing its connection with the plugins.
> IE does it separately.
>
>
>

D

ddemay

1-Visitor

*connection* is separate - So you saying what the JESSIONID and SSL Keys
would be different or what?

You can still configure apache to disallow authentication by url for the
applets and come up with some other way if you think about it long enough.
Point was not to hammer out the specifics but just to think it wasn't
completely impossible. Just might not be cost effective to figure out.

Was also thinking after sending the last response that once could have the
server side generate a base url reference for the applet to load where it
output into html

V

vmcdaniel

1-Visitor

Has anyone found a solution to this for IE 7?

J

jessh

12-Amethyst

If you mean the dreaded double-authentication, then the solution is Java
6 Update 23 -- due one of these weeks...

J

jessh

12-Amethyst

FYI, Java 6 Update 23 was released today.