Using Preemptive Proxy Authentication

If Web Transfer Client (WTC) users receive a JavaScript error or a Java error in the Java Console stating “Authentication state already initialized,” then they most likely are experiencing an issue with preemptive proxy authentication.  The WTC Java Applet uses preemptive basic proxy authentication behind the scenes, which means that it always sends the "Proxy-Authorization: Basic auth header," anticipating that the proxy server might require credentials for authentication. This provides a negligible performance improvement when basic authentication is used; however, if the proxy server is using NTLM authentication, it will not be satisfied with the basic auth header from the Applet and will respond with a 407 error (Proxy authentication required). If the 407 error occurs, once the Applet receives the response from the proxy it will be confused and try to reinitialize its authentication state which then, by design, throws an exception. The preemptive authentication is designed to work with basic authentication not NTLM.

In order to work around this issue, you can turn off the preemptive authentication from the WTC. If some users are behind a proxy and are having authentication problems, they can turn this setting off, while other users can continue to take advantage of the optimization. The setting defaults to on (selected), but if users experience problems, they can clear the check box and turn this setting off.

In general, when tasks are performed with the WTC that issue requests to the EFT Server (e.g., refreshing the remote pane, creating a new folder, uploading a file), the proxy server may require authentication, depending on the configuration of the proxy server and the browser. For example, when a user uploads files, each PUT request to upload a file may require authentication with the proxy server. So if we transfer 50 files at once with the WTC, by using preemptive authentication, we can essentially reduce the number of round trips by fifty assuming that we would have been prompted for credentials by the proxy server for each file upload.

To turn preemptive proxy authentication on or off

  1. Click Proxy. The Web Transfer Client - Proxy Settings  dialog box appears. 

  2. The Use Preemptive Proxy Authentication check box is selected by default.

  3. Click Accept to save the changes.

Refer to Accessing EFT Server Through a Proxy for other proxy settings.