locked
Java Endpoint components do not load RRS feed

  • Question

  • Hi all

    i have a problem with the Java endpoint detection component on a brand new installation with Forefront UAG 2010 SP2. The UAG server is localized behind a firewall on the internet side. The Firewall has a rule that allows only HTTPS traffic to the UAG server.

    Some applications are configured with a policy which only allows clients with a active virus scanner to access this application.

    I have no problems with all supported versions of the IE (ActiveX controls) - that work's like a charm.

    BUT - all browsers which use the Java applets (Windows 7 Pro, Windows XP, Mac OSX - browsers are Firefox and Safari) can not access the application. I get the form where i can decide to install the components or not and after checking the install button i get the form with "checking your client compatibility" (or so - i have to translate the german forms). After a short time i can log me into the portal homepage. But all applications, which depends on the policy are not accessible. The systeminformation.asp page states that the Java version could not be detected and therefore the endpoint component could'nt start.

    In the agent log on a OS X machine i detected the following lines:

    ---snip---
    Do Jan 10 09:58:30 2013     ********* Applet started. *********
    Do Jan 10 09:58:30 2013     Version: 4.0.0.1
    Do Jan 10 09:58:30 2013     Reading all input args
    Do Jan 10 09:58:30 2013     Starting...
    Do Jan 10 09:58:30 2013     OS detected: Mac OS X : Setting Report Server: https://portal.customer.de/InternalSite/SetPolicy.asp?site_name=portal&secure=1
    Do Jan 10 09:58:30 2013     Setting cookie: NLSessionSportal=iqCu/r9loN9GSOgrj0Iml99y4jrycmORonDmTGT4A4IzUUOgEq1NpkjSL9rXtwz0Zu4cedQZpPi3dDtx4JNOwoAvSxRyTK/k6MmRU2FubteRJeaVX+R9lKg52zVRsf3h; domain=.customer.de; path=/;
    Do Jan 10 09:58:30 2013     Cookie set.
    Do Jan 10 09:58:30 2013     init
    Do Jan 10 09:58:30 2013     Exec type: INIT started
    Do Jan 10 09:58:43 2013     Installing agent files
    Do Jan 10 09:58:43 2013     Installing file /Users/mhesse/Forefront UAG Remote Access Agent/portalcustomerde/portal1/agent_mac_helper_64.jar
    Do Jan 10 09:58:44 2013     Server sent response code: 200
    Do Jan 10 09:58:44 2013     5123 bytes copied ...
    Do Jan 10 09:58:44 2013     Verifying agent signature.
    Do Jan 10 09:58:44 2013     Fatal error: signature does not exist!
    Do Jan 10 09:58:44 2013     raiseJavascriptEvent
    Do Jan 10 09:58:44 2013     Calling hook with -150
    ---snap---

    As i can see ist there a problem with a missing signature. Configuring the Java runtime to the lowest possible security did not help, the result is the same (btw. i can not force all users to lower their Java security settings..)
    After asking my friends bing and google i got the impression, that these problem can be an old one, but should be solved with the update 1 for the sp 1.

    In the logfiles of a Windows pc i can see a lot of these entries:

    ---snip---
    Do Jan 10 15:56:54 2013     getSiteInfo called
    Do Jan 10 15:56:54 2013     Calling thread
    Do Jan 10 15:56:54 2013     Get site info - sync (1) - before synchronized
    Do Jan 10 15:56:54 2013     Get site info - sync (2) - after synchronized
    Do Jan 10 15:56:54 2013     Get site info - sync (3) - before wait
    Do Jan 10 15:56:54 2013     Waiter thread woke up, firing getSiteInfo
    Do Jan 10 15:56:54 2013     Running ProxyProcess_Client with C:\Users\mhesse\Forefront UAG Remote Access Agent/portalcustomerde/portal1\ProxyProcess_Client.exe -d portal.customer.de
    Do Jan 10 15:56:55 2013     GetSiteInfo: Error: Failed to send data to portal.customer.de
    Do Jan 10 15:56:55 2013     Get site info - sync (4) - after wait
    ---snap---


    Can you please help me ? My old friends bing an google have no answers for me this time, so it can be, that it is just a configuration mistake ore something similar. The setup was done according to the installation guide from Microsoft.

    Thanks in advance

    Michael
    Thursday, January 10, 2013 3:25 PM