Answers to: Java 8 Update 201 Authentication window on Startup

Answer by Andreas Rusch

Andreas Rusch — Fri, 22 Feb 2019 10:33:27 -0500

After a lot of research I finally found the cause of the problem:

With jre8_201 Oracle introduced (without mentioning it in the release notes, thanks very much!) a new authentication parameter (as security property) jdk.http.ntlm.transparentAuth in the JRE configuration file <jre_home>/lib/net.properties. It also sets the default value to disabled (other possible values are allHosts and trustedHosts), therefore completely disabling transparent authentication on Windows.

Possible solutions: So far I found two ways to get around the problem:

The obvious one is to change the setting in the net.properties file to allHosts (former default) or trustedHosts (a better recommendation).
The less obvious solution is to configure your jre8_201 runtime in the Java Control Panel in the Java tab -> View... Here you can add e.g. -Djdk.http.ntlm.transparentAuth=trustedHosts to the Runtime Parameters section.

Note that these are only client side solutions. I haven't found a solution to override this behavior from the server (in the JNLP file). I am not even sure if we can do that as this is a security property and there are more restrictions on setting them than normal system properties.

Hope it helps.

Comment by Reguel Wermelinger on Zueger's question

Reguel Wermelinger — Fri, 22 Feb 2019 10:08:04 -0500

I think @Andreas Rusch has already found a solution for this problem. ... le'ts wait for the publication of his answer :)

Comment by Zueger on Zueger's question

Zueger — Thu, 21 Feb 2019 07:16:45 -0500

It's Windows Auth. only and enabled Providers are only NTLM

Comment by Reguel Wermelinger on Zueger's question

Reguel Wermelinger — Fri, 15 Feb 2019 05:14:23 -0500

Can you share your authentication provider settings? https://developer.axonivy.com/doc/latest/EngineGuideHtml/integration.html#integration-single_sign_on Do you have Windows+BasicAuth or only Windows auth? Is negotiation enabled or strictly enforced NTLM?

Comment by Zueger on Zueger's question

Zueger — Thu, 14 Feb 2019 06:55:23 -0500

Yes, when I use the 64-bit Version the same Error appears.

Comment by Andreas Rusch on Zueger's question

Andreas Rusch — Thu, 14 Feb 2019 06:42:15 -0500

I see you are using 32-bit JRE version. Have you tried the 64-bit version?

Comment by Zueger on Zueger's question

Zueger — Mon, 11 Feb 2019 04:59:48 -0500

I Only updatet the Client local Ivy Engine is 6.0

Comment by Andreas Rusch on Zueger's question

Andreas Rusch — Mon, 11 Feb 2019 04:08:49 -0500

Nico, is the only change you did updating the Java version on the client or did you update anything on the Ivy Engine side as well? What version of the Engine are you using?

Comment by Zueger on Zueger's question

Zueger — Fri, 08 Feb 2019 08:36:40 -0500

Addendum: The JAVA Authentication Window only appears if we use SSO.