JDK 6: requestPasswordAuthentication called multiple times

Hi...

Has anyone else noticed that 'requestPasswordAuthentication' gets called multiple times from HTTPURLConnection in JDK 6? If I create an HTTPURLConnection, and it returns successfully from 'openConnection', if I then do something simple like query for its contentType via 'getContentType', a call to my authenticator requesting password authentication is made MULTIPLE times...

In JDK 1.5, it was only made once in the same scenario.

Have there been changes in the recent release that would require me to make changes to my authenticator or to supply more information?

Thanks!

Kelly

[630 byte] By [keplingea] at [2007-11-27 9:02:46]
# 1

We had a problem with NTLM authentication in 1.5 and Java SE 6, which may be the problem that you are seeing. There were actually two bugs in the same area that were fixed, 6520665 and 6357133.

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6520665

http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6357133

Both these bugs were fixed in the following releases:

jdk 7 b12

jdk 6 u3 http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=2148156

jdk 5u13 http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=2149272

I know that none of these releases are available yet except for jdk7. There is an early access version available from http://download.java.net/jdk7/binaries/ . Maybe you could install it an see if it resolves your problem.

chegara at 2007-7-12 21:33:52 > top of Java-index,Security,Other Security APIs, Tools, and Issues...