Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4492630

Java is not working behind SQuid Proxy, but it does with IE 5.5

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: P3 P3
    • None
    • 1.3.1
    • deploy
    • x86
    • generic

      From Bugzilla Helper:
      User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:0.9.3) Gecko/20010801
      BuildID: 2001080110

      This Java exeption is shown on the test case:

      java.security.AccessControlException: access denied (java.net.SocketPermission
      proxy.schuler.de resolve)

      at java.security.AccessControlContext.checkPermission(Unknown Source)
      at java.security.AccessController.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkConnect(Unknown Source)
      at java.net.InetAddress.getAllByName0(Unknown Source)
      at java.net.InetAddress.getAllByName0(Unknown Source)
      at java.net.InetAddress.getByName(Unknown Source)
      at
      sun.net.www.protocol.http.HttpURLConnection.getHttpProxyAuthentication(Unknown
      Source)
      at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
      at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
      at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(Unknown Source)
      at sun.plugin.protocol.jdk12.http.HttpURLConnection.checkCookieHeader(Unknown
      Source)
      at sun.plugin.protocol.jdk12.http.HttpURLConnection.getInputStream(Unknown Source)
      at java.net.HttpURLConnection.getResponseCode(Unknown Source)
      at sun.applet.AppletClassLoader.getBytes(Unknown Source)
      at sun.applet.AppletClassLoader.access$100(Unknown Source)
      at sun.applet.AppletClassLoader$1.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at sun.applet.AppletClassLoader.findClass(Unknown Source)
      at sun.plugin.security.PluginClassLoader.findClass(Unknown Source)
      at java.lang.ClassLoader.loadClass(Unknown Source)
      at sun.applet.AppletClassLoader.loadClass(Unknown Source)
      at java.lang.ClassLoader.loadClass(Unknown Source)
      at sun.applet.AppletClassLoader.loadCode(Unknown Source)
      at sun.applet.AppletPanel.createApplet(Unknown Source)
      at sun.plugin.AppletViewer.createApplet(Unknown Source)
      at sun.applet.AppletPanel.runLoader(Unknown Source)
      at sun.applet.AppletPanel.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)


      With MS IE 5.5 there is no problem !!!!

      Bye
        Rainer

      Reproducible: Always
      Steps to Reproduce:
      1. Load the page
      http://www.mozilla.org/quality/browser/debugtc/bft_browser_applet.html behind a
      Squid Proxy / Firewall
      2. --> the Java exeption pops up

      Actual Results: You see the Java exeption.

      Expected Results: The clock should should show up.

      N/A


      ------- Additional Comments From Igor Kushnirskiy 2001-08-05 14:36 -------

      moving to oji


      ------- Additional Comments From ###@###.### 2001-08-08 17:55 -------

      Using JDK1.3.1 and today's trunk worksforme on WINTT.

      I'll have our QA try it on WINME.


      ------- Additional Comments From Oleg Khokhlov 2001-08-09 05:09 -------

      Applet works well behind proxy/firewall on WinME.

      Mozilla 0.9.2 and 0.9.3
      JDK 1.3.1


      ------- Additional Comments From ###@###.### 2001-08-09 05:34 -------

      Hello,
      sorry. The mozilla-win32-installer-sea.exe (20010808) is still not working
      with Windows NT and SQuid. If you turn on user authentication in SQUid
      2.3STABLE3 the Java subsystem is broken. It works works Netscape 4.7x and IE 5.x.

      Bye
        Rainer Tammer

      P.S.: We use two cascaded proxy servers.
      First proxy on the firewall and second proxy on the internal network. The second
      proxy uses user authentication. If I turn off the user authentication it works.


      ------- Additional Comments From ###@###.### 2001-08-09 05:56 -------

      Hello,
      additional info:

      I checked our log files ... if you try to load the clock applet you can see
      that no user info is transmitted. If you use Netscape 4.7x the user info is
      transmitted.

      Mozilla nightly on Win32:

      997361386.492 6 153.3.21.118 TCP_DENIED/407 1519 GET
      http://java.sun.com/openstudio/applets/classes/JavaClock.class - NONE/- -

      Netscape 4.76i on AIX

      997361320.014 188 153.3.21.40 TCP_MISS/200 4349 GET
      http://java.sun.com/openstudio/applets/classes/JavaClock.class tammer
      PARENT_HIT/ifw.schuler.de application/java-vm


      Bye
        Rainer Tammer



      ------- Additional Comments From ###@###.### 2001-08-09 17:27 -------

      Hi Oleg,

      Can you replicate the test environment proposed by tammer? Particularly the
      being able to check the log files for user info being sent or not?


      ------- Additional Comments From Alexei V. Mokeev 2001-08-10 06:33 -------

      Tested today under WinME and RH Linux with jdk1.3.1
      Used squid-2.4.STABLE1 as password protected firewall.
      Under WInME(mozilla 0.9.2 & 0.9.3) results are exactly the same as in bug
      report:
       - Security exception on console
       - Applet isn't loaded
      Under Linux and mozilla 0.9.2 all works fine:
       - Additional authorization window appears during applet startup and
         ask about proxy user/password
       - Applet loads and render well without of any exception.

      Attached please look at part of squid logs for Linux and WinME and note,
      that user isn't transfered for WInME



      ------- Additional Comments From Alexei V. Mokeev 2001-08-10 06:35 -------

      Created an attachment (id=45380)
      Part of squid logs, when connecting from Linux



      ------- Additional Comments From Alexei V. Mokeev 2001-08-10 06:36 -------

      Created an attachment (id=45381)
      Part of squid logs when connecting from WinME



      ------- Additional Comments From ###@###.### 2001-08-10 19:36 -------

      Since the java plugin handles HTTP requests originating from applets, I'm going
      to re-assign this one to JPI.


      ------- Additional Comments From ###@###.### 2001-08-10 19:37 -------

      assign to jmelvin.


      ------- Additional Comments From ###@###.### 2001-08-10 19:37 -------

      reassign to Jim Melvin.


      ------- Additional Comments From ###@###.### 2001-08-10 19:38 -------

      Marking invalid. I'll file this in bugtraq.

            zgu Zhengyu Gu
            ejburns Ed Burns (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: