<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<br>
<div class="moz-cite-prefix">On 02/03/16 16:14, <a class="moz-txt-link-abbreviated" href="mailto:ssn@ebi.ac.uk">ssn@ebi.ac.uk</a> wrote:<br>
</div>
<blockquote cite="mid:56D71174.4020806@ebi.ac.uk" type="cite">Hi
<br>
<br>
Please can get I some advice how to reconfigure tomcat to not
enable X.509 client authentication on a specific directory (if
possible?), when our IdP is selected a user's web browser might
pop up a message asking for the user's client certificate even
though the user hasn't yet chosen any IdP to login. This happens
because the web browser fetches our logos from
<a class="moz-txt-link-freetext" href="https://idp.ebi.ac.uk">https://idp.ebi.ac.uk</a>
(<a class="moz-txt-link-freetext" href="https://idp.ebi.ac.uk/images/EMBL_EBI_logo_95x30.png">https://idp.ebi.ac.uk/images/EMBL_EBI_logo_95x30.png</a>) - If there
is away to exclude the directory from X.509 authentication this
should solve this issue.
<br>
<br>
Any further clarification please let me know.
<br>
<br>
Thanks
<br>
</blockquote>
<br>
The issue we were experiencing was solved in server.xml Connector
port="9443"<br>
<br>
Having clientAuth=true was causing the client's browser to request a
certificate when accessing logos, with the help of UkF it identified
this needed changing to clientAuth=false<br>
<br>
<Connector port="9443" protocol="HTTP/1.1" SSLEnabled="true"<br>
maxThreads="150" scheme="https" secure="true"<br>
clientAuth="false"<br>
</body>
</html>