JDK-6318281 : Selecting Cancel from the Authentication Dailog in Web Start & Plug In does not work as expected
  • Type: Bug
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Affected Version: 5.0,6
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic,windows_98,windows_xp
  • CPU: generic,x86
  • Submitted: 2005-08-31
  • Updated: 2010-04-04
  • Resolved: 2006-01-04
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6
6 b66Fixed
Related Reports
Duplicate :  
Duplicate :  
Relates :  
Description
When accessing Web Start Applications or Applets that require authentication a user can not cancel or close the authentication dialog after it appears, or has to hit cancel multiple times to remove it. 

Issue 1. 

    With Basic Authentication a user has to press cancel multiple times if they do not wish to provide a username or password.  It appears that they have to press cancel for each resoure the Applet loads from the Server.

     Link to reproduce:  http://dispensable.east/BasicSecurity/cicerone/Cicerone.jnlp


Issue 2.
     The close button on the Authentication Dialog does not work.  It causes multiple instances of the dialog to appear.  Using the link above clicking on the 'X' in the top right corner five times will cause five coppies of the dialog to appear.

Issue 3.
     This is the most serious of the use cases.  When a user is doing an "Integrated Windows" Kerberos Authentication they can not close the dialog by pressing cancel.  This implies if the user does not know the username/passowrd/domain information they can not close the Authentication dialog and have to kill the process to regain control.

      Link to reproduce:
      http://129.148.174.126/KerberosSecurity/cicerone/Cicerone.jnlp

Comments
EVALUATION The reason the user is unable to cancel from an Integrated Windows Authentication is caused by Java bug 6357133
30-11-2005