Re: [twsocket] THttpCli for NTLM

2011-01-31 Thread Arno Garrels
- Original Message - 
From: "D'Arcy McNally"
To: "Arno Garrels" 
Sent: Monday, January 31, 2011 11:59 AM
Subject: RE: [twsocket] THttpCli for NTLM


> Arno.
> Thanks very much for the prompt response. 
> I will update to ICSv7 and report back to the mailing list should I 
> encounter any problems.

No, the update from v6 to v7 with Ansi compilers should be no problem,
TPopCli got minor interface changes but that's all, AFAIK. 
Only make sure that the compiler/linker doesn't find and mix v6 with
v7 source and .obj files. The installation procedure changed, just read
the readme.

-- 
Arno Garrels

--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] THttpCli for NTLM

2010-06-15 Thread Arno Garrels
Darcy McNally wrote:
> Arno,
> Thanks very much for the prompt reply. One further question. When
> setting HttpCli for NTLM is it also necessary to set/pass the
> username and password, as would be done for a proxy server setup e.g.
> HttpCli->ProxyUsername & HttpCli->ProxyPassword.

If the server behind the proxy requires authentication set properties
Username, Password and ServerAuth. 

If the proxy requires authentication set properties ProxyUsername, 
ProxyPassword and ProxyAuth.

Both proxy and server might support multiple authentication types.
Event BeforeAuth (ICSv7) triggers for each type they support.

Note that NTLM and Digest require persistent connections to work,
forgot to mention that yesterday.
That means properties ProxyConnection and/or Connection should
be set to "keep-alive" at least with HTTP v1.0.
   
> 
> As I'm unable to mimic an NTLM network from my workplace I need to,
> reluctantly, ask one of our our customers to test for us. This is the
> reason I am getting as much info as possible on the HttpCli NTLM
> parameters/setup.   

Server authentication can be tested against the OverbyteIcsWebServ 
demo (Delphi). There are free NTLM proxies downloadable from the 
internet. 

A member of this list suggested this one:
3proxy (http://3proxy.ru/board/?l=EN)
Console app with manually edited conf files, but in part of auth settings are 
quite simple

--
Arno Garrels   
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] THttpCli for NTLM

2010-06-14 Thread Darcy McNally
Arno,
Thanks very much for the prompt reply. One further question. When setting 
HttpCli for NTLM is it also necessary to set/pass the username and password, as 
would be done for a proxy server setup e.g. HttpCli->ProxyUsername & 
HttpCli->ProxyPassword.

As I'm unable to mimic an NTLM network from my workplace I need to, 
reluctantly, ask one of our our customers to test for us. This is the reason I 
am getting as much info as possible on the HttpCli NTLM parameters/setup.

Regards,
D'Arcy

-Original Message-
From: twsocket-boun...@elists.org [mailto:twsocket-boun...@elists.org] On 
Behalf Of Arno Garrels
Sent: 14 June 2010 18:16
To: ICS support mailing
Subject: Re: [twsocket] THttpCli for NTLM

Darcy McNally wrote:
>  if( CommOptionsPtr->HTTPProxyAuth == pxaNTLM ) //*what  
> params to set for this condition*** {
>   HttpCli->ProxyAuth = httpAuthNtlm;
>   HttpCli->Proxy = "*" + CommOptionsPtr->HTTPProxyUser + "*" +
>   CommOptionsPtr->HTTPProxyPass;  }

As far as I recall there is no difference except for the authentication type 
"HttpCli->ProxyAuth = httpAuthNtlm". If that does not work it might help to set 
property Agent to some Microsoft browser. There are proxies around which 
provide NTLM only to MS browsers.

--
Arno Garrels
--
To unsubscribe or change your settings for TWSocket mailing list please goto 
http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


This message (and any associated files) is intended only for the use of the 
individual or entity to which it is addressed and may contain information that 
is confidential, subject to copyright or constitutes a trade secret. If you are 
not the intended recipient you are hereby notified that any dissemination, 
copying or distribution of this message, or files associated with this message, 
is strictly prohibited. If you have received this message in error, please 
notify us immediately by replying to the message and deleting it from your 
computer. Messages sent to and from us may be monitored. Internet 
communications cannot be guaranteed to be secure or error-free as information 
could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses. Therefore, we do not accept responsibility for any errors or 
omissions that are present in this message, or any attachment, that have arisen 
as a result of e-mail transmission. If verification is required, please request 
a hard-copy version. Any views or opinions presented are solely those of the 
author and do not necessarily represent those of the company.
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] THttpCli for NTLM

2010-06-14 Thread Arno Garrels
Darcy McNally wrote:
>  if( CommOptionsPtr->HTTPProxyAuth == pxaNTLM ) //*what
>  params to set for this condition*** {
>   HttpCli->ProxyAuth = httpAuthNtlm;
>   HttpCli->Proxy = "*" + CommOptionsPtr->HTTPProxyUser + "*" +
>   CommOptionsPtr->HTTPProxyPass;
>  }

As far as I recall there is no difference except for the authentication
type "HttpCli->ProxyAuth = httpAuthNtlm". If that does not work it
might help to set property Agent to some Microsoft browser. There are
proxies around which provide NTLM only to MS browsers.

--
Arno Garrels
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


[twsocket] THttpCli for NTLM

2010-06-14 Thread Darcy McNally
Hi,
I have an client weather application that downloads forecast data from our 
server, on request, and need to cater for as many client network configurations 
as possible. The app can successful download using HTTP Proxy, both No 
Authentication and Basic Authentication however I am having problems with NTLM. 
To be frank, I'm not sure which THttpCli params/vars I need to set, on the 
client side, in order to allow the app to connect to the internet and therefore 
our server. In particular what format the username and password should be 
passed.

I have included a basic code snippet below. Any help greatly appreciated.

 if( CommOptionsPtr->UseHTTPProxy )
 {
  if( CommOptionsPtr->HTTPProxyAuth == pxaNone ||
   CommOptionsPtr->HTTPProxyAuth == pxaBasic )
  {
   HttpCli->Proxy   = CommOptionsPtr->HTTPProxy;
   HttpCli->ProxyPort  = CommOptionsPtr->HTTPProxyPort;
  }

  if( CommOptionsPtr->HTTPProxyAuth == pxaBasic )
  {
   HttpCli->ProxyUsername = CommOptionsPtr->HTTPProxyUser;
   HttpCli->ProxyPassword = CommOptionsPtr->HTTPProxyPass;
  }

  if( CommOptionsPtr->HTTPProxyAuth == pxaNTLM ) //*what params to 
set for this condition***
  {
   HttpCli->ProxyAuth = httpAuthNtlm;
   HttpCli->Proxy = "*" + CommOptionsPtr->HTTPProxyUser + "*" +
   CommOptionsPtr->HTTPProxyPass;
  }
 }

This message (and any associated files) is intended only for the use of the 
individual or entity to which it is addressed and may contain information that 
is confidential, subject to copyright or constitutes a trade secret. If you are 
not the intended recipient you are hereby notified that any dissemination, 
copying or distribution of this message, or files associated with this message, 
is strictly prohibited. If you have received this message in error, please 
notify us immediately by replying to the message and deleting it from your 
computer. Messages sent to and from us may be monitored. Internet 
communications cannot be guaranteed to be secure or error-free as information 
could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses. Therefore, we do not accept responsibility for any errors or 
omissions that are present in this message, or any attachment, that have arisen 
as a result of e-mail transmission. If verification is required, please request 
a hard-copy version. Any views or opinions presented are solely those of the 
author and do not necessarily represent those of the company.
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be