I inherited some Java code that does Single Server Sign for the BMC Remedy AR System. The code works by pulling the Kerberos ticket from the headers and then validates it by making calls to domain controllers.
The Remedy server makes a call to a method:
public UserCredentials getAuthenticatedCredentials(HttpServletRequest request,HttpServletResponse response) throws IOException
Within that method the Authorization header is extracted. For both IE and Chrome this works correctly.
The next step is to get the users timezone using a custom JSP page which is called via the following:
RequestDispatcher reqDisp = request.getRequestDispatcher(Login.CUSTOM_TIMEZONE_URL);
if (reqDisp != null) {
try {
reqDisp.forward(request, response);
} catch (Exception e) {
System.out.println("Error");
e.printStackTrace();
}
}
This is working correctly in IE8 and IE11 but not in Chrome. For IE the header still contains the Authorization values after the time zone call so I can perform the Kerberos check but for Chrome the Authorization headers are missing.
(I can post the complete headers if that would help)
Thank you
