browser compatibility issue in safari

[nicetohaveyou]

i was working in a project with j2ee/jsp and asp format
in a MVC model in Websphere application Developer.

well the code started by prompting user to enter user name and password
and then checks against the active directory and then displays the page.
this is a pretty straight forward thing which run well in mozilla, IE, and Netscape navigator.

But, when checked against the safari in mac, after entering user name and password nothing gets displayed.

when i checked IDE it showed some errors.
As i further checked, i found that the variable for username was blank.

what could have gone wrong?

[pbmods]

Heya, nicetohaveyou. Welcome to TSDN!

I'm going to go ahead and move this thread to the Java forum, where our resident Experts will be better able to help you out.

[nicetohaveyou]

Heya, nicetohaveyou. Welcome to TSDN!

I'm going to go ahead and move this thread to the Java forum, where our resident Experts will be better able to help you out.

actually the code checks for the active directory

[r035198x]

actually the code checks for the active directory

You'll need to post the code then.

[nicetohaveyou]

initialy i am using a custom filter.

the code is

public String getLoginUserName(HttpServletRequest request,HttpServletResponse response) throws GetUserIdException
     {
        String loginName = "";
                String auth = request.getHeader("Authorization");
        try
        {
        if (auth == null) {
                response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                response.setHeader("WWW-Authenticate", "NTLM");
                return "";
        }
        else if (auth.startsWith("NTLM ")) {
                 byte[] msg = new sun.misc.BASE64Decoder().decodeBuffer(auth.substring(5));
                int off = 0, length, offset;
                String s;
                 if (msg[8] == 1) {
                     off = 18;
                     byte z = 0;
                    byte[] msg1 = {(byte)'N', (byte)'T', (byte)'L', (byte)'M', (byte)'S',
                                    (byte)'S', (byte)'P', z,
                                    (byte)2, z, z, z, z, z, z, z,
                                    (byte)40, z, z, z, (byte)1, (byte)130, z, z,
                                    z, (byte)2, (byte)2, (byte)2, z, z, z, z, //
                                     z, z, z, z, z, z, z, z};
                    //
                     response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                    response.setHeader("WWW-Authenticate", "NTLM "
                           + new sun.misc.BASE64Encoder().encodeBuffer(msg1).trim());
                    return "";
                }
                  else if (msg[8] == 3) {
                         off = 30;
                        length = msg[off+17]*256 + msg[off+16];
                        offset = msg[off+19]*256 + msg[off+18];
                        s = new String(msg, offset, length);
                }
                 else
                    return "";
                            length = msg[off+1]*256 + msg[off];
                offset = msg[off+3]*256 + msg[off+2];
                loginName = new String(msg, offset, length);
                length = msg[off+9]*256 + msg[off+8];
                offset = msg[off+11]*256 + msg[off+10];
                loginName = new String(msg, offset, length);
                }
        }
                catch(Exception ex)
                {
                    ANSLogger.logInfo("HeaderFilterDef:getLoginUserName::GetUserIdException occured....");
                    ex.printStackTrace();
                    ANSLogger.logInfo(ex.getMessage());
                    throw new GetUserIdException(AnsErrorCode.GET_USERID_EXCEPTION,"");
                }
                return loginName;    }        
 

--------------------------------------------------------------------------------


now, this gives the login name and domain name for all browsers except mac.

So i thought of adding a code which will specifically execute in case it is called from any browser(safari or IE) in a mac.

so i thought of using request.getRemoteUser() but to my misery it was giving null.

when i tried it without custom filter and used a standard ntlmHttpFilter in the DD, it simply worked but as you know. In the filter you need to specify the domain controller.
Now, if the machines from different domains try to access the code, it will not work. However the above code with custom filter works fine for all domains.

So, in order to balance between the two, i though of adding request.getRemoteUser() to the above code which will be executed when the browser is safari or IE for mac.

So, i used String str = request.getHeader("user-agent");

//"Macintosh"
if(str.indexOf("Macintosh") > -1)

and chip in

request.getRemoteUser();

[pbmods]

Moved to the cs forum.

[Plater]

Lets get one thing straight, since this thread is being bounced all over.
You are writing this in java correct? Or is it C#?
It looks like java to me.

If I had to guess why it fails on a MAC computer (and probably on a *nix system) is because NTLM is a microsoft protocol.
Try using one of the standard protocols?

Possibly like this:

response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); 
response.setHeader("WWW-Authenticate", "Negotiate"); 
response.setHeader("WWW-Authenticate", "NTLM"); 
 

Or however you would get both of them in there