In logs tcpdump for CDT is trying to make a call to the design-services:dbservice. we can see the options but no header info is passed...i.e. no authentication. Therefore, design-services:dbservice redirects resulting in the 302 response seen in Karaf.