|
View:
New views
1 Messages
—
Rating Filter:
Alert me
|
|
|
[ opensta-Bugs-730317 ] Bad Windows Auth handling
by SourceForge.net
::
Rate this Message:
Reply (Restricted by the Administrator) | Reply to Author | View Threaded | Show Only this Message Bugs item #730317, was opened at 2003-04-30 10:24
Message generated for change (Comment added) made by sam_squarewave You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=110857&aid=730317&group_id=10857 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: HTTP Capture Group: Design Status: Open Resolution: None Priority: 5 Private: No Submitted By: Jerome Delamarche (trickyjer) Assigned to: Nobody/Anonymous (nobody) Summary: Bad Windows Auth handling Initial Comment: The script generated by the Modeler when the session requires a login/password cannot be replayed successfully. The Server first challenges for a "Basic" authentification, then it turns this auth. into a NTLM auth. The generated script includes statements such as: BUILD AUTHENTICATION BLOB & FOR BASIC & FROM USER "admin" PASSWORD "" DOMAIN "" & INTO blob_2_1 and further: Load Response_Info Header on 3 & Into blob_3_0 & ,WITH "WWW-Authenticate" BUILD AUTHENTICATION BLOB & FOR NTLM & FROM BLOB blob_3_0 & INTO blob_3_0 But requests are all denied by the Web server. IIS server just require a valid user for itself, it does not belong to a Windows Domain. ---------------------------------------------------------------------- Comment By: samuel greene (sam_squarewave) Date: 2008-08-20 14:22 Message: Logged In: YES user_id=2187702 Originator: NO I would love to see this fixed. I know us windows folks aren't supposed to use open source products though... ---------------------------------------------------------------------- Comment By: Brian Collins (brianavid) Date: 2005-06-23 06:35 Message: Logged In: YES user_id=1214182 Also note that the space declared for NTLM blobs is 256 CHARACTERS, but HTTP www-authenticate responses have been seen larger than this. I manually edit the generated declarations to 512 CHARACTERs to get it to work (mostly). ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=110857&aid=730317&group_id=10857 ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ OpenSTA-devel mailing list OpenSTA-devel@... https://lists.sourceforge.net/lists/listinfo/opensta-devel |
| Free embeddable forum powered by Nabble | Forum Help |