Our setup is: Glassfish version 3.1.1 -
We are using Digest Authentication(JDBC Realm).
When Clients(IP is different) has same "cnonce", 401 response occurs.
[NG_ClientA:10.22.49.11] cnonce="fa847aab8968ad3528689641da46467e"
[OK_ClientB:10.22.49.122]cnonce="fa847aab8968ad3528689641da46467e"
If clients(IP is different) has same "cnonce", Glassfish reply always 401 response?
Is there any way to avoid?
server_access_log:
------------------------------
"10.22.49.11""NULL-AUTH-USER""07/Feb/2013:21:12:59 +0900""POST /ss HTTP/1.1" 401 1007 "NULL-HEADER-AUTHORIZATION"
"10.22.49.122""NULL-AUTH-USER""07/Feb/2013:21:12:59 +0900""POST /ss HTTP/1.1" 401 1007 "NULL-HEADER-AUTHORIZATION"
"10.22.49.122""NAKA7""07/Feb/2013:21:12:59 +0900""POST /ss HTTP/1.1" 200 468 "Digest username="NAKA7", realm="ss_realm", nonce="1360239183743:e694d053af1fe4c062f80bce7d9ad8b03f841569333e5af5e6a7d8c373979b60", uri="/ss", response="4bc3696a81764e96d9a50f6379ee7db4", qop=auth, nc=00000001, cnonce="fa847aab8968ad3528689641da46467e", opaque="A698C769B2D235C79997650882224FBD""
"10.22.49.11""NULL-AUTH-USER""07/Feb/2013:21:12:59 +0900""POST /ss HTTP/1.1" 401 1007 "Digest username="SVNODE11", realm="ss_realm", nonce="1360239183742:4703bb9c60b8649d145613f915526d0fd0b1709065389e002967c961cf82c49a", uri="/ss", response="ee8a91a45aa8410f0bacaa100841610e", qop=auth, nc=00000001, cnonce="fa847aab8968ad3528689641da46467e", opaque="A698C769B2D235C79997650882224FBD""
------------------------------