Siteminder is a piece of software that provides authentication for "free". You don't 
need to do any implementation on your own. All you have to do is to create user 
accounts with al privileges and let siteminder know where to find this info. When user 
wants to log in siteminder checks tables to see if this user is valid. How it does it. 
The authentication is done using basic autentication with some kind of encryption. 
Siteminder then encrypts the cookies sends them with the session. So since the cookies 
are encrypted I don't think JMeter can handle this. Also, siteminder adds several 
fields inside of the session's header. Some of those fields values are also encrypted 
(password for sure). I was able to work and test when siteminder cookies encryption 
was turned off. There is an option where you can turn that off. I also wrote my own 
test program to do that. There is a trick where JMeter will chock even when siteminder 
cookies encryption is turned off. 

-----Original Message-----
From: Sosnowski, Andrew P [IT] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 21, 2002 7:53 AM
To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED]
Subject: RE: siteminder


Hello again

I've been playing with this some more.

Siteminder is a product of Netegrity.

When you say deal with the cookie manager what do you mean?
Do I have to enter these cookies into the Cookie Manager manually?
I do see cookies being set.

I have recorded a session and it does record the headers but it still does
not successfully log-in. 
When you record will it record the cookies too? I cannot set them because
the value in set by Siteminder software

TIA
Andy

-----Original Message-----
From: Martin Ramshaw [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 10, 2002 12:49 PM
To: [EMAIL PROTECTED]
Subject: Re: siteminder


>We're trying to get use jmeter on a site protected by siteminder as
>well although it is over http not https.
>
>Has anyone done this?

I have changed the thread, as this really doesn't relate to the previous
subject. I have never heard of siteminder; perhaps someone else has.

>I am a new user of jmeter and so far have not been able to get through
>siteminder. I don;t quite understand how siteminder works but I think
>it sets a cookie; I have a Cookie Manager defined within my test script
>but I haven't done anything to it except add it to the script.

Something to do before you go too far, is to change your browers settings
to 'warn me before accepting cookies' (or whatever the appropriate setting
is for your browser) and then walk through a session. Make a note of all
the cookie values. Then you will be better prepared to deal with the cookie
manager.

>Hopefully the cookies are unique per thread/session?

I think this depends on the browser. I believe IE shares all cookies,
so that all open IE applications share sessions. I believe Netscape
honours session cookies.

But you should check into these things for yourself.

        Regards


--
To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to