*** asofrank has quit (Ping timeout: 252 seconds) | 06:45 | |
*** asofrank (~laszlof@wookie.tvog.net) has joined #wikid | 06:46 | |
*** nowen (~nowen@adsl-74-176-212-133.asm.bellsouth.net) has joined #wikid | 12:49 | |
*** Lake_Lurker (~Just@h16.160.17.98.dynamic.ip.windstream.net) has joined #wikid | 13:03 | |
*** Lake_Lurker has parted #wikid (None) | 13:03 | |
*** KeithDelande_Fir (410584de@gateway/web/freenode/ip.65.5.132.222) has joined #wikid | 17:17 | |
nowen | welcome KeithDelande_Fir, let me know if you have any questions | 17:18 |
---|---|---|
KeithDelande_Fir | Hey Nick -- trying to integrate the HTML5 token into my system | 17:18 |
KeithDelande_Fir | Seem to have it almost working but... | 17:18 |
KeithDelande_Fir | I have dropped the .war file in and tomcat seems to have layed out the necessary structure and I can get to it by http://blah/HTML5Token/ | 17:19 |
KeithDelande_Fir | I did the verify.jsp and it returned results that matched the docs | 17:19 |
KeithDelande_Fir | I've copied HTML5Token.html to HTML5TokenFS.html so I can play with that initial web page and I get the box with the js token in it | 17:20 |
KeithDelande_Fir | so all that is good | 17:20 |
nowen | ok | 17:20 |
KeithDelande_Fir | Now, it does the initial key exchange (where it counts up) and that finishes | 17:20 |
nowen | ok | 17:20 |
KeithDelande_Fir | but then it won't return the page in the html page that tells it where to go - registrationPage | 17:21 |
KeithDelande_Fir | it sits there for about 10-15 seconds then I get | 17:21 |
KeithDelande_Fir | Communication with the server FAILED. The call failed on the server; see server logs for details | 17:21 |
KeithDelande_Fir | I looked in catalina.log and admin.[date].log and I see corresponding errors but nothing specific as to what/why it fails | 17:22 |
*** Embalmed has quit (Remote host closed the connection) | 17:23 | |
KeithDelande_Fir | for a test, I have http://www.wikidsystems.com/simple_reg_form in the page | 17:23 |
KeithDelande_Fir | I even tried copying that down with wget to my local system and pointing the page there but same result | 17:23 |
KeithDelande_Fir | I also tried www.google.com | 17:23 |
nowen | so, the keys get generated. Do you get prompted for a PIN? | 17:24 |
KeithDelande_Fir | no | 17:24 |
nowen | what browser are you using? | 17:24 |
KeithDelande_Fir | It counts up to about 20+ seconds and stops, saying Completed then I get that error about 10-15 seconds later | 17:24 |
KeithDelande_Fir | if I go back, the token box is blank but it has the border and header from the .css sheet, just the contents where it would say the text abut the token is blank | 17:25 |
KeithDelande_Fir | Firefox 6.0.1 | 17:25 |
*** Embalmed (embalmed@204.188.217.2) has joined #wikid | 17:26 | |
nowen | can you try again in a different browser or in private/icognito mode? | 17:26 |
KeithDelande_Fir | Should IE 8 work? | 17:26 |
nowen | I don't think so, but I can't remember - or keep up with the changes | 17:26 |
KeithDelande_Fir | what browsers are supported? | 17:27 |
nowen | I think FF, Chrome and Opera work | 17:29 |
nowen | my guess is that it is something with your registration link | 17:30 |
nowen | what do you have for the serverIP? | 17:30 |
KeithDelande_Fir | same result in IE 8 | 17:31 |
KeithDelande_Fir | registrationPage: "http://x.x.x.x/HTML5Token/simple_reg_form" is what's in my html form (I x'd out our IP) | 17:31 |
KeithDelande_Fir | and simple_reg_form is a direct wget from your site as a test | 17:32 |
KeithDelande_Fir | I can go to that same link directly and get a web page with the form | 17:32 |
nowen | and is the Server IP the IP of your WiKID server? | 17:33 |
KeithDelande_Fir | yes | 17:33 |
nowen | anything in the WiKIDAdmin logs? | 17:36 |
KeithDelande_Fir | where are those stored? I'll take a look | 17:37 |
nowen | in the web ui, on the top right corner is a link | 17:49 |
KeithDelande_Fir | x.x.191.149 - - "POST /HTML5Token/HTML5Token/HTML5TokenService HTTP/1.1" 500 - | 17:53 |
KeithDelande_Fir | that error appears when I attempt it | 17:53 |
KeithDelande_Fir | x.x.191.149 is my client (my laptop's) IP | 17:53 |
nowen | so, are you running the html5 war on the WiKID server? | 17:56 |
KeithDelande_Fir | yes | 18:00 |
nowen | which isn't a problem. we're doing it too | 18:00 |
nowen | are you using 127.0.0.1 as the server IP? | 18:00 |
KeithDelande_Fir | I dropped it in /opt/WiKID/webapps and did a wikidctl stop and start and it created everything in the webapps path under tomcat as expected | 18:01 |
KeithDelande_Fir | no, I was using the public IP | 18:01 |
nowen | try using the localhost ip | 18:01 |
KeithDelande_Fir | also I used www.wikidsystems.com/simple_reg_form and that didnt work either | 18:01 |
nowen | the Server IP field is different | 18:01 |
KeithDelande_Fir | ok, I changed registrationPage to http://127.0.0.1/HTML5Token/simple_reg_form | 18:04 |
KeithDelande_Fir | same result | 18:04 |
KeithDelande_Fir | and I confirmed simple_reg_form is in that dir | 18:04 |
nowen | sorry - not the registration field | 18:05 |
nowen | the Server IP field | 18:05 |
nowen | <script> | 18:05 |
nowen | var WiKIDConfiguration = { | 18:05 |
nowen | domainCode: "127000000001", | 18:05 |
nowen | serverIP: "127.0.0.1", | 18:05 |
nowen | showRegCode: "true", | 18:05 |
nowen | registrationPage: "http://127.0.0.1:8888/register.html" | 18:05 |
nowen | the registration page can be anything, and should be externally route-able. the Server IP is how the html war app communicates with the WiKID server. | 18:09 |
KeithDelande_Fir | ok, trying tha tnow | 18:20 |
KeithDelande_Fir | AH | 18:22 |
KeithDelande_Fir | progress | 18:22 |
nowen | nice | 18:22 |
KeithDelande_Fir | I get some warnings about stopping the script from running, about 4 of them but then I get the PIN entry box | 18:22 |
KeithDelande_Fir | that was in IE | 18:22 |
KeithDelande_Fir | Firefox was much faster and no warnings on script | 18:23 |
KeithDelande_Fir | ok, PIn part worked perfectly | 18:26 |
KeithDelande_Fir | and then it properly took me to your simple_reg_form as expected | 18:26 |
nowen | excellent | 18:26 |
KeithDelande_Fir | so now I know it works and I'll point it back to my copy of simple_reg_form which I'll hack up for my purposes | 18:27 |
KeithDelande_Fir | thanks Nick! | 18:27 |
nowen | no problem :) | 18:27 |
nowen | thanks for using WiKID! | 18:27 |
nowen | KeithDelande_Fir: know that it is still beta | 18:31 |
nowen | and if the user clears their cache, the need to re-register. | 18:31 |
nowen | limitations of html5 | 18:39 |
KeithDelande_Fir | yeah, we assumed as much | 18:39 |
KeithDelande_Fir | figured it had to be storing the key exchagen info somewhere in cache to not be prompting for that process each time | 18:40 |
nowen | still, from an ease-of-use perspective it is an interesting piece of software IMO | 18:40 |
KeithDelande_Fir | yes....we're having problems getting the java token rolled out at locations where we do not control the machine and it's locked down | 18:42 |
nowen | hmm | 18:42 |
KeithDelande_Fir | so we are hoping to possibly introduce the html5 token as a workaround since it doesn't require either java or the token jar to be installed | 18:42 |
KeithDelande_Fir | as long as browser cache is kept persistent, we think it might work | 18:43 |
nowen | could work, hopefully they aren't using IE 6 :) | 18:43 |
KeithDelande_Fir | yeah, and they might be | 18:43 |
nowen | are these partners or customers? | 18:43 |
KeithDelande_Fir | customers | 18:43 |
KeithDelande_Fir | where our employees work out fo | 18:43 |
KeithDelande_Fir | hospitals | 18:44 |
nowen | so - your employee, their computer? | 18:44 |
KeithDelande_Fir | our employees sit onsite at these hospitals and use the hospital's systems but connect back to our mainframe to provide the services we provide as a vendor to the hospital | 18:44 |
nowen | gotcha | 18:45 |
KeithDelande_Fir | and they're very hard to convince we need to load software up | 18:45 |
KeithDelande_Fir | so we provide an extranet today via a web site (think a Juniper appliance) so that allw e need is port 80 access to a single url | 18:45 |
KeithDelande_Fir | that box then negotiates all the internal stuff and provides clientless vpn if required | 18:46 |
KeithDelande_Fir | but now that we need to add 2-factor for PCI compliance, we're back to loading things | 18:46 |
nowen | yeah | 18:47 |
KeithDelande_Fir | thanks again Nick, off to continue to work this out and brand it for further testing | 18:50 |
nowen | cool | 18:50 |
*** KeithDelande_Fir has quit (Quit: Page closed) | 19:08 | |
*** Lake_Lurker (~Just@h16.160.17.98.dynamic.ip.windstream.net) has joined #wikid | 19:50 | |
*** Lake_Lurker has parted #wikid (None) | 19:50 | |
*** Embalmed has quit (Remote host closed the connection) | 21:38 | |
*** Embalmed (embalmed@204.188.217.2) has joined #wikid | 21:39 | |
*** Embalmed has quit (Max SendQ exceeded) | 21:39 | |
*** Embalmed (embalmed@204.188.217.2) has joined #wikid | 21:42 | |
*** CowboyPride_ (~BartSimps@cpe-075-183-170-059.sc.res.rr.com) has joined #wikid | 22:46 | |
*** CowboyPride has quit (Read error: Connection reset by peer) | 22:47 | |
*** nowen has parted #wikid (None) | 22:48 | |
*** Embalmed has quit (Read error: Connection reset by peer) | 23:03 | |
*** Embalmed (embalmed@204.188.217.2) has joined #wikid | 23:04 | |
*** Embalmed has quit (Remote host closed the connection) | 23:12 | |
*** Embalmed (embalmed@204.188.217.2) has joined #wikid | 23:15 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!