I did a little more research and both CF-8 and CF-9 do not provide support for Integrated Windows, NTLM, or Kerebos authentication - only for basic authentication. I am going to check back with the service to confirm which authentication (if any) that they are using. Still curious how a simple form post is able to bypass this security check?
Rick On Wed, Sep 15, 2010 at 10:27 AM, Rick Mason <rhma...@gmail.com> wrote: > I found this earlier post on cfhttp only supporting basic authentication, > this was in 2002. > > http://www.houseoffusion.com/groups/cf-talk/thread.cfm/threadid:10601 > > Do either of you know whether this is sitll the case with CF-8? Does CF-9 > fix this problem? Someone at the CFUG last night said CF-9 fixed problems > he was having with cfhttp, but I can't find in the docs that the tag was > even updated. > > > Rick > > On Wed, Sep 15, 2010 at 10:20 AM, John M Bliss <bliss.j...@gmail.com>wrote: > >> >> Then I agree with Mr. Root: perhaps the remote url is expecting you to >> authenticate. And/or, get with people in charge of payment service, let >> them know what you're sending and what's happening, and see what they >> say... >> >> On Wed, Sep 15, 2010 at 9:16 AM, Rick Mason <rhma...@gmail.com> wrote: >> >> > >> > John, >> > >> > The exact message is 'You are not authorized to access this page'. So >> > somehow it sees a cfhttp post as different than a simple form post of >> the >> > same information. Something doesn't look right and is triggering its >> error >> > mechanism as it calls a pageaccessdenied.aspx. >> > >> > Rick >> > On Wed, Sep 15, 2010 at 10:01 AM, John M Bliss <bliss.j...@gmail.com> >> > wrote: >> > >> > > >> > > > but then tells me I don't have p[ermission to use the system >> > > >> > > What's the exact error message? >> > > >> > > >> > > On Wed, Sep 15, 2010 at 8:59 AM, Rick Mason <rhma...@gmail.com> >> wrote: >> > > >> > > > >> > > > I need to interact with an asp.Net based payment service. I am able >> to >> > > do >> > > > a >> > > > simple form post to the https:// URL with no problems. However I >> > can't >> > > > make >> > > > it work with cfhttp and I've spent days trying. Even after >> importing >> > > their >> > > > SSL cert into CF, it connects (gives me a 200) but then tells me I >> > don't >> > > > have p[ermission to use the system. Here's a short version of the >> code >> > > > that >> > > > I am using: >> > > > >> > > > <cfhttp url =https://myurl.com method = "POST" Port="443" >> > > charset="utf-8" >> > > > UserAgent="Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; >> > > Trident/4.0)" >> > > > multipart="No" timeout = "10000" result="CN"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "NAME" >> value >> > = >> > > > "Rick Mason"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "ADDR" >> value >> > = >> > > > "123 Main"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "CITY" >> value >> > = >> > > > "East Lansing"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "STATE" >> > value >> > > = >> > > > "MI"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "ZIP" >> value = >> > > > "48823"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "COUNTRY" >> > value >> > > = >> > > > "USA"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "EMAIL" >> value >> > = >> > > > rhma...@gmail.com> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = >> "ItemCode1" >> > > > value = "Merchandise"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = >> "ItemCount1" >> > > > value = "1"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "Amount1" >> > > > value = "1"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = >> "refType1" >> > > > value = "sku"> >> > > > <cfhttpparam type = "formfield" encoded = "no" name = "refval1" >> > > > value = "memento"> >> > > > </cfhttp> >> > > > >> > > > <cfdump var="#CN#"> >> > > > >> > > > Alternatively I tried the cfx_http5 tag and it gave me a Windows >> 12006 >> > > > error >> > > > which is defined as the URL scheme could not be recognized or >> > supported. >> > > > I'm pretty certain the problem is a networking one with the Windows >> > 2003 >> > > > server on our end (and the services techs agree) but I've run out of >> > > things >> > > > to try. >> > > > >> > > > Anyone have an answer? >> > > > >> > > > >> > > > Rick >> > > > >> > > > >> > > > >> > > >> > > >> > >> > >> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:337065 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
