[twsocket] TWSocket sending UDP

2006-01-20 Thread Shane Mitchell
Hey. I'm trying to use TWSocket to send UDP messages to many different hosts. I want to create the TWSocket dynamically, and I don't want to have to use Connect/Close every time I send a UDP message. I thought I could use the SendTo() procedure to do this, but I have had no success. This is

Re: [twsocket] Weird problem sending http stream

2006-01-20 Thread Paul
Francois, Just found the problem. There were lots of messages generated due to a wrong reference. Paul - Original Message - From: "Francois PIETTE" <[EMAIL PROTECTED]> To: "ICS support mailing" Sent: Friday, January 20, 2006 7:47 PM Subject: Re: [twsocket] Weird problem sending htt

Re: [twsocket] Weird problem sending http stream

2006-01-20 Thread Francois PIETTE
> I have a routine to send a stream with http (Post). > The first time I send a stream, there is a delay of about 20 seconds > between the PostAsync instruction end the triggering of the > onRequestdone event. > No errors detected > During this time, there is no traffic. When is the stream data se

Re: [twsocket] THttpServer Digest Auth implemented with ICS

2006-01-20 Thread Francois PIETTE
That's an interesting contribution ! Thank you. -- [EMAIL PROTECTED] http://www.overbyte.be - Original Message - From: "Fastream Technologies" <[EMAIL PROTECTED]> To: "ICS support mailing" Sent: Friday, January 20, 2006 1:50 PM Subject: [twsocket] THttpServer Digest Auth implemented with

Re: [twsocket] ICS stack buffer overflow?

2006-01-20 Thread Roberto Della Pasqua
TNX Roberto Della Pasqua Http: www.dellapasqua.com Email/Msn: [EMAIL PROTECTED] Aol/Yahoo: DellaPasquaR Icq: 164672275 - This e-mail and any attachment contain information which is privileged and confidential and is intended for the addressee only. If you have

[twsocket] Weird problem sending http stream

2006-01-20 Thread Paul
I run into something weird. I have a routine to send a stream with http (Post). The first time I send a stream, there is a delay of about 20 seconds between the PostAsync instruction end the triggering of the onRequestdone event. No errors detected During this time, there is no traffic. If this f

Re: [twsocket] ICS stack buffer overflow?

2006-01-20 Thread Francois PIETTE
> Is the latest ICS sure for overflow attacks? Yes, it is. But some application may not be secure if not correctly developed ! The application programmer _muust_ take care of many problems the component can't do for him. For example, if your application receive data and buffer incomming data wa

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Arno Garrels
Arno Garrels wrote: > Maurizio Lotauro wrote: >> Scrive Arno Garrels <[EMAIL PROTECTED]>: >> >> [...] >> >>> I think they arn't so smart, but just calling LogOnUser() note >>> that [EMAIL PROTECTED] valid, not only for FTP-proxies. >> >> I don't think that the server use LogOnUser to authenticat

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Arno Garrels
Maurizio Lotauro wrote: > Scrive Arno Garrels <[EMAIL PROTECTED]>: > > [...] > >> I think they arn't so smart, but just calling LogOnUser() note >> that [EMAIL PROTECTED] valid, not only for FTP-proxies. > > I don't think that the server use LogOnUser to authenticate the request > because with N

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Stadin, Benjamin
Arno Garrels schrieb: > > Stadin, Benjamin wrote: > > > I think it should be handled without > > a new property. > > Why not just copy what NTLM implementation as well as function > LogonUser() already provide? Even Internet Explorer pops up a > dialog with an additional Domain-field upon NTLM auth

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Maurizio Lotauro
Scrive Arno Garrels <[EMAIL PROTECTED]>: [...] > I think they arn't so smart, but just calling LogOnUser() note > that [EMAIL PROTECTED] valid, not only for FTP-proxies. I don't think that the server use LogOnUser to authenticate the request because with NTLM it will not receive the password i

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Maurizio Lotauro
Scrive Tibor Csonka <[EMAIL PROTECTED]>: > I would like to correct the bug report I posted before: [...] > A new property for the domain can be added for proxy auth and > separatelly for web auth or a property in which users can set the domain > name separator this can be one for each of the

[twsocket] ICS stack buffer overflow?

2006-01-20 Thread Roberto Della Pasqua
Hi dear developers, Please check the thread in borland.public.delphi.non-technical (borland nntp server) First post: "Hi all, We know that by using the standart VCL functions it is impossible to create a stack overflow condition in delphi-written applications.But how about Heap Based overflo

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Maurizio Lotauro
Scrive Francois PIETTE <[EMAIL PROTECTED]>: > > That is what I ment also. Now the question is that should or should not > > ICS allow other separators than backslash? > > Should ICS be responsible for domain/user parsing out of a single property > or should a new property with domain added ? I

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Maurizio Lotauro
Scrive Paul <[EMAIL PROTECTED]>: > You can't know what the proxy wants, > so you have to test all possible situations and > pick the one that works > As Maurizio said, some users have to add the domain > and some not (on the same proxy!) Is it possible for you to test with proxy that need [EMAIL

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Maurizio Lotauro
Scrive Tibor Csonka <[EMAIL PROTECTED]>: [...] > >You have a similar situation with IIS? I mean, if you don't include the > domain > >you will be authenticated? > > > > > It seemes to me that you have the same problem as me. Try to separe the > user and the domain. If it works let me know so

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Arno Garrels
Stadin, Benjamin wrote: > I think it should be handled without > a new property. Why not just copy what NTLM implementation as well as function LogonUser() already provide? Even Internet Explorer pops up a dialog with an additional Domain-field upon NTLM authentications. With two new Domain-prope

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Stadin, Benjamin
At my former working place we had an MS Exchange email server and several NT Domains. The domains had different trustships between each other. In the exchange webmail you are only asked for username and password. Users who don't belong to the main domain but one of the trusted domains had to use "d

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Paul
> Yes, but those are not NTLM proxies imo. > They are just transparent FTP proxies. I have run into problems with Http NTLM proxies Paul - Original Message - From: "Francois PIETTE" <[EMAIL PROTECTED]> To: "ICS support mailing" Sent: Friday, January 20, 2006 12:51 PM Subject: Re: [twso

[twsocket] THttpServer Digest Auth implemented with ICS

2006-01-20 Thread Fastream Technologies
Hello Francois and Everybody, We (me and Peter Nikolow) worked on Digest authentication for ICS THttpServer. We used Delphi and ICS v5 (unit version 1.38) for the httpsrv.pas and C++ for the test unit. We (fastream.com) want to donate the code to our very community. I urge you (Francois) to mak

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Arno Garrels
Arno Garrels wrote: > >> From MSDN: > > "lpszUsername > [in] A pointer to a null-terminated string that specifies the name of the > user. This is the name of the user account to log on to. If you use the > user principal name (UPN) format, [EMAIL PROTECTED], the lpszDomain > parameter must be NUL

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Arno Garrels
Francois PIETTE wrote: >>> Should ICS be responsible for domain/user parsing out of a single >>> property >>> or should a new property with domain added ? >> >> I think not, unless the component itself test for the combination that >> works. > > That's not logical. The NTLM message has two differ

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Tibor Csonka
I would like to correct the bug report I posted before: There is no way to set domain for NTLM authentication neither for web server or proxy in ICS HttpProt. A mechanism should be included in the future releases. A new property for the domain can be added for proxy auth and separatelly for web

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Francois PIETTE
>>Should ICS be responsible for domain/user parsing out of a single property >>or should a new property with domain added ? >> >> > I can see your point here. For me is more simpler for now to leave it > like that, but I think ICS _should not_ handle the separation; it is > much better to expose se

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Francois PIETTE
>> Should ICS be responsible for domain/user parsing out of a single >> property >> or should a new property with domain added ? > > I think not, unless the component itself test for the combination that > works. That's not logical. The NTLM message has two different parts for domain name and us

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Francois PIETTE
>> Paul, can you give me examples, where you can configure Proxy/Web server >> with NTLM in the way you pointed out? > > You won't find this strange format in M$ proxies, but there lots of > proxies > available. > The ones that requires [EMAIL PROTECTED] are mostly used with ftp Yes, but those ar

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Tibor Csonka
>Should ICS be responsible for domain/user parsing out of a single property >or should a new property with domain added ? > > I can see your point here. For me is more simpler for now to leave it like that, but I think ICS _should not_ handle the separation; it is much better to expose separa

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Tibor Csonka
Anyway the user tweaks like this separation character should not be the concern of ICS but of the application with the functionality. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.ov

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Paul
> Should ICS be responsible for domain/user parsing out of a single property > or should a new property with domain added ? I think not, unless the component itself test for the combination that works. PAul - Original Message - From: "Francois PIETTE" <[EMAIL PROTECTED]> To: "ICS suppo

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Paul
> Personally I didn't saw usernames like [EMAIL PROTECTED] until now in windows. > Paul, can you give me examples, where you can configure Proxy/Web server > with NTLM in the way you pointed out? You won't find this strange format in M$ proxies, but there lots of proxies available. The ones that r

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Francois PIETTE
> That is what I ment also. Now the question is that should or should not > ICS allow other separators than backslash? Should ICS be responsible for domain/user parsing out of a single property or should a new property with domain added ? > And the second question that on the proxy authenticatio

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Tibor Csonka
That is what I ment also. Now the question is that should or should not ICS allow other separators than backslash? And the second question that on the proxy authentication part should we use the same technique? Personally I didn't saw usernames like [EMAIL PROTECTED] until now in windows. Paul,

Re: [twsocket] using Api form with message loop

2006-01-20 Thread Francois PIETTE
> is it possible to create a form with a message loop with api > and still use the http async methods ? > > This will shrink the total application size with almost 300K as I understand, what you want/need is not a form (a form is a Delphi object derived from TForm). It is a window (It is a Window

Re: [twsocket] NTLM authentication reloaded

2006-01-20 Thread Francois PIETTE
> It seemes to me that you have the same problem as me. Try to separe the > user and the domain. If it works let me know so I can patch the proxy > part of NTLM auth too. > Without domain the user will not be authenticated, I tried. I think you are right. Since NtlmGetMessage3 has provision for do

Re: [twsocket] HttpCli + Timeout How To??

2006-01-20 Thread Wilfried Mestdagh
Hello Mac, > How i implement a timeout control in HttpCli... Use async call's and a timer. when timer expires call abort, when request is done disable timer. > I using HttpCli in sync mode, because i need to run it in Thread.. You can use async mode in a thread as well. There is no differen