Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Fastream Technologies
Hello,

I think using a list/set of TAuthTypes is a cool idea. I am planning in the 
GUI a checkbox scheme. The most complex one should have the biggest priority 
(Digest then Basic instead of Basic then Digest in www-authenticate order 
for example).

Best Regards,

SubZero

- Original Message - 
From: Arno Garrels [EMAIL PROTECTED]
To: ICS support mailing twsocket@elists.org
Sent: Thursday, September 07, 2006 10:56 AM
Subject: Re: [twsocket] Webserv demo authentication


: Hello,
:
: Problem solved, IE wasn't setup for authentication for some reason.
:
: Now to another problem in THttpSrv.
:
: I really like to have an option to select which authentication
: methods the server provides in its 401 response. I mean I want
: to be able to provide any possible combination of the three
: methods basic, digest and ntlm.
:
: I suggest to have a set of TAuthenticationType AuthTypes for that
: purpose. AuthTypes could be published instead of AuthType.
: Internally FAuthType can be used for the current authentication
: method a client selected from the set of methods provided in the
: first 401 response.
:
: What do you think?
:
: ---
: Arno Garrels [TeamICS]
: http://www.overbyte.be/eng/overbyte/teamics.html
:
:
:
: Arno Garrels wrote:
:  Maurizio Lotauro wrote:
:  Scrive Arno Garrels [EMAIL PROTECTED]:
: 
:  Maurizio Lotauro wrote:
:  Scrive Arno Garrels [EMAIL PROTECTED]:
: 
:  Indeed, however I haven't touched that stuff at all, anyway no
:  change: http://www.duodata.de/misc/dumpBasic2.pcap
: 
:  I don't expected that it was the cause of the malfunction. Are you
:  running ethereal on the same pc of the server or of the browser?
: 
:  It runs on the server-side.
: 
:  Try on the client side too.
: 
:  Tomorrow ;-)
: 
: 
: 
: 
:  Bye, Maurizio.
: 
:  
:  This mail has been sent using Alpikom webmail system
:  http://www.alpikom.it
: -- 
: To unsubscribe or change your settings for TWSocket mailing list
: please goto http://www.elists.org/mailman/listinfo/twsocket
: Visit our website at http://www.overbyte.be 

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Arno Garrels
Fastream Technologies wrote:
 Hello,
 
 I think using a list/set of TAuthTypes is a cool idea. I am planning
 in the GUI a checkbox scheme. The most complex one should have the
 biggest priority (Digest then Basic instead of Basic then Digest in
 www-authenticate order for example).

The only problem is that it breaks existing application code. 
However current implementation of Auth is a crap, the server
cannot force a client to use i.e. Digest, since Basic is also
provided when AuthType is atDigest.

Any better idea?

Anyway I will add the NTLM stuff to the V6 server only, if 
someone wants it in V5 he would have to port by himself.

---
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html
   


 
 Best Regards,
 
 SubZero
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Thursday, September 07, 2006 10:56 AM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 Hello,
 
 Problem solved, IE wasn't setup for authentication for some reason.
 
 Now to another problem in THttpSrv.
 
 I really like to have an option to select which authentication
 methods the server provides in its 401 response. I mean I want
 to be able to provide any possible combination of the three
 methods basic, digest and ntlm.
 
 I suggest to have a set of TAuthenticationType AuthTypes for that
 purpose. AuthTypes could be published instead of AuthType.
 Internally FAuthType can be used for the current authentication
 method a client selected from the set of methods provided in the
 first 401 response.
 
 What do you think?
 
 ---
 Arno Garrels [TeamICS]
 http://www.overbyte.be/eng/overbyte/teamics.html
 
 
 
 Arno Garrels wrote:
 Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Indeed, however I haven't touched that stuff at all, anyway no
 change: http://www.duodata.de/misc/dumpBasic2.pcap
 
 I don't expected that it was the cause of the malfunction. Are
 you running ethereal on the same pc of the server or of the
 browser? 
 
 It runs on the server-side.
 
 Try on the client side too.
 
 Tomorrow ;-)
 
 
 
 
 Bye, Maurizio.
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Francois Piette
 What do you think?

Agreed for V6.
--
[EMAIL PROTECTED]
Author of ICS (Internet Component Suite, freeware)
Author of MidWare (Multi-tier framework, freeware)
http://www.overbyte.be

- Original Message - 
From: Arno Garrels [EMAIL PROTECTED]
To: ICS support mailing twsocket@elists.org
Sent: Thursday, September 07, 2006 9:56 AM
Subject: Re: [twsocket] Webserv demo authentication


 Hello,
 
 Problem solved, IE wasn't setup for authentication for some reason.
 
 Now to another problem in THttpSrv.
 
 I really like to have an option to select which authentication
 methods the server provides in its 401 response. I mean I want
 to be able to provide any possible combination of the three
 methods basic, digest and ntlm.
 
 I suggest to have a set of TAuthenticationType AuthTypes for that
 purpose. AuthTypes could be published instead of AuthType.
 Internally FAuthType can be used for the current authentication
 method a client selected from the set of methods provided in the
 first 401 response.
 
 What do you think?
 
 ---
 Arno Garrels [TeamICS]
 http://www.overbyte.be/eng/overbyte/teamics.html
 
  
 
 Arno Garrels wrote:
  Maurizio Lotauro wrote:
  Scrive Arno Garrels [EMAIL PROTECTED]:
  
  Maurizio Lotauro wrote:
  Scrive Arno Garrels [EMAIL PROTECTED]:
  
  Indeed, however I haven't touched that stuff at all, anyway no
  change: http://www.duodata.de/misc/dumpBasic2.pcap
  
  I don't expected that it was the cause of the malfunction. Are you
  running ethereal on the same pc of the server or of the browser?
  
  It runs on the server-side.
  
  Try on the client side too.
  
  Tomorrow ;-)
  
  
  
  
  Bye, Maurizio.
  
  
  This mail has been sent using Alpikom webmail system
  http://www.alpikom.it
 -- 
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Fastream Technologies
No problem for us as well.

- Original Message - 
From: Francois Piette [EMAIL PROTECTED]
To: ICS support mailing twsocket@elists.org
Sent: Thursday, September 07, 2006 1:45 PM
Subject: Re: [twsocket] Webserv demo authentication


: What do you think?
: 
: Agreed for V6.
: --
: [EMAIL PROTECTED]
: Author of ICS (Internet Component Suite, freeware)
: Author of MidWare (Multi-tier framework, freeware)
: http://www.overbyte.be
: 
: - Original Message - 
: From: Arno Garrels [EMAIL PROTECTED]
: To: ICS support mailing twsocket@elists.org
: Sent: Thursday, September 07, 2006 9:56 AM
: Subject: Re: [twsocket] Webserv demo authentication
: 
: 
:  Hello,
:  
:  Problem solved, IE wasn't setup for authentication for some reason.
:  
:  Now to another problem in THttpSrv.
:  
:  I really like to have an option to select which authentication
:  methods the server provides in its 401 response. I mean I want
:  to be able to provide any possible combination of the three
:  methods basic, digest and ntlm.
:  
:  I suggest to have a set of TAuthenticationType AuthTypes for that
:  purpose. AuthTypes could be published instead of AuthType.
:  Internally FAuthType can be used for the current authentication
:  method a client selected from the set of methods provided in the
:  first 401 response.
:  
:  What do you think?
:  
:  ---
:  Arno Garrels [TeamICS]
:  http://www.overbyte.be/eng/overbyte/teamics.html
:  
:   
:  
:  Arno Garrels wrote:
:   Maurizio Lotauro wrote:
:   Scrive Arno Garrels [EMAIL PROTECTED]:
:   
:   Maurizio Lotauro wrote:
:   Scrive Arno Garrels [EMAIL PROTECTED]:
:   
:   Indeed, however I haven't touched that stuff at all, anyway no
:   change: http://www.duodata.de/misc/dumpBasic2.pcap
:   
:   I don't expected that it was the cause of the malfunction. Are you
:   running ethereal on the same pc of the server or of the browser?
:   
:   It runs on the server-side.
:   
:   Try on the client side too.
:   
:   Tomorrow ;-)
:   
:   
:   
:   
:   Bye, Maurizio.
:   
:   
:   This mail has been sent using Alpikom webmail system
:   http://www.alpikom.it
:  -- 
:  To unsubscribe or change your settings for TWSocket mailing list
:  please goto http://www.elists.org/mailman/listinfo/twsocket
:  Visit our website at http://www.overbyte.be
: -- 
: To unsubscribe or change your settings for TWSocket mailing list
: please goto http://www.elists.org/mailman/listinfo/twsocket
: Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Maurizio Lotauro
Scrive Fastream Technologies [EMAIL PROTECTED]:

 In my debugging, I saw that clients favor the order provided that they 
 support the prior method. For example,
 
 www-authenticate: Digest ...
 www-authenticate: Basic ...
 
 If digest is supported, by all three browsers, it is preffered.

The client should use the strongest in any case. The rfc say:

---8---
   A possible man-in-the-middle (MITM) attack would be to add a weak
   authentication scheme to the set of choices, hoping that the client
   will use one that exposes the user's credentials (e.g. password). For
   this reason, the client should always use the strongest scheme that
   it understands from the choices accepted.
---8---

Is seems very reasonable to me. You can try to write a server that send the 
Basic before the Digest and see what happen. I hope that Digest will used, 
otherwise the client should be putted directly into the trashcan.
Of course I don't bet on what IE does :-)


Bye, Maurizio.


This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Arno Garrels
Hi,

Currently I don't need the old property AuthType at all.
I want to exchange AuthType by AuthTypes. That will make
virtually no problems, code can be updated very easy.

---
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html
 

Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Fastream Technologies wrote:
 Hello,
 
 I think using a list/set of TAuthTypes is a cool idea. I am planning
 in the GUI a checkbox scheme. The most complex one should have the
 biggest priority (Digest then Basic instead of Basic then Digest in
 www-authenticate order for example).
 
 The only problem is that it breaks existing application code.
 However current implementation of Auth is a crap, the server
 cannot force a client to use i.e. Digest, since Basic is also
 provided when AuthType is atDigest.
 
 Any better idea?
 
 You can avoid the problem using the trick used by Delphi to
 read/write non published properties into dfm.
 The situation is that you can have AuthType or AuthTypes property
 written in the dfm but not both. So if the read of AuthType is
 triggered then you set the AutTypes property accordingly.
 I never used this technik but I saw it in action and it is very useful
 to keep compability with old application, in particular when the
 form will not recompiled.
 If you want I can write some code as sample how it should work. It is
 a think that I should do soon or later.
 
 
 Bye, Maurizio.
 
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Maurizio Lotauro
Scrive Arno Garrels [EMAIL PROTECTED]:

 Hi,

Hi,

 Currently I don't need the old property AuthType at all.
 I want to exchange AuthType by AuthTypes. That will make
 virtually no problems, code can be updated very easy.

I try to explain it better.
If you drop the AuthType property (or any other published one) and an 
application will recompiled without open the unit that contains the component 
then you get an error at run time when the form will created because in the 
dfm it is still a property with that name.
What I suggested is to avoid this error. Then you can do what you want: use 
the value that is in the dfm to have the same effect (in that case only one 
authentication will used) or simply ignore it.


Bye, Maurizio.


This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Arno Garrels
Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Hi,
 
 Hi,
 
 Currently I don't need the old property AuthType at all.
 I want to exchange AuthType by AuthTypes. That will make
 virtually no problems, code can be updated very easy.
 
 I try to explain it better.
 If you drop the AuthType property (or any other published one) and an
 application will recompiled without open the unit that contains the
 component then you get an error at run time when the form will
 created because in the dfm it is still a property with that name.
 What I suggested is to avoid this error. Then you can do what you
 want: use the value that is in the dfm to have the same effect (in
 that case only one authentication will used) or simply ignore it.

Do we really need that? Working application code must be slightly
adjusted anyway, one rule you learn in the first VCL lessons is
to open any form of a project when components have been updated.
Maybe usefull when the project has plenty of forms?

---
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html
 
 
 
 Bye, Maurizio.
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-07 Thread Maurizio Lotauro
Scrive Arno Garrels [EMAIL PROTECTED]:

 Maurizio Lotauro wrote:

[...]

  I try to explain it better.
  If you drop the AuthType property (or any other published one) and an
  application will recompiled without open the unit that contains the
  component then you get an error at run time when the form will
  created because in the dfm it is still a property with that name.
  What I suggested is to avoid this error. Then you can do what you
  want: use the value that is in the dfm to have the same effect (in
  that case only one authentication will used) or simply ignore it.
 
 Do we really need that?

For this specific case probably not. The AuthType was introduced quite 
recently so changing is should be quite harmless.
But in general I think that what I suggest could be useful when you made some 
changes and the component automatically convert the old properties values into 
the new one. Otherwise the old value will lost.

 Working application code must be slightly
 adjusted anyway, one rule you learn in the first VCL lessons is
 to open any form of a project when components have been updated.

I don't think that lot of developers doing so :-)
In particular you should reopen all forms of all projects. If you don't do it 
then when you reopen an old project and don't remember to reopen all forms 
then you will get an AV at run time.

 Maybe usefull when the project has plenty of forms?

This could be a good reason :-)
As said this is a method that could be used to inizialize a new proerty with 
the value of old one. 
For example, what is the default of AuthTypes?
If it is [] then if is was atNTLM the setting will lost.
If it is all set then if it it was atNone the setting will completly different.

As said, most probably it this specific case doesn't matter.
But I think that it is important to know that exists a method to automatically 
convert an old property.


Bye, Maurizio.


This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Arno Garrels wrote:
 Hello,
 
 Why does none of the authentication methods work
 against IE 6 XP SP2?

To be more specific:
The logon dialog is not coming up.
The Ethereal dump can be grabbed here:
http://www.duodata.de/misc/dump.pcap ~2KB

 
 This is driving me nuts since 1 hour :-O
 Any idea what's going on? I tried locally and remotely.
 Everyting is fine if I use IE6 W2k as well as Netscape 8.0.4.
 
 ---
 Arno Garrels [TeamICS]
 http://www.overbyte.be/eng/overbyte/teamics.html
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Fastream Technologies wrote:
 If the log was Basic or Digest, I could help but I have no idea how
 NTLM works... :(

Anything fails Basic, Digest, and NTLM.

 
 Best Regards,
 
 SZ
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Wednesday, September 06, 2006 8:19 PM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 Arno Garrels wrote:
 Hello,
 
 Why does none of the authentication methods work
 against IE 6 XP SP2?
 
 To be more specific:
 The logon dialog is not coming up.
 The Ethereal dump can be grabbed here:
 http://www.duodata.de/misc/dump.pcap ~2KB
 
 
 This is driving me nuts since 1 hour :-O
 Any idea what's going on? I tried locally and remotely.
 Everyting is fine if I use IE6 W2k as well as Netscape 8.0.4.
 
 ---
 Arno Garrels [TeamICS]
 http://www.overbyte.be/eng/overbyte/teamics.html
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Fastream Technologies
Yes but their logix are different. Why don't you email us the ethereal logs 
for Basic for example?

Regards,

SZ

- Original Message - 
From: Arno Garrels [EMAIL PROTECTED]
To: ICS support mailing twsocket@elists.org
Sent: Wednesday, September 06, 2006 8:26 PM
Subject: Re: [twsocket] Webserv demo authentication


: Fastream Technologies wrote:
:  If the log was Basic or Digest, I could help but I have no idea how
:  NTLM works... :(
:
: Anything fails Basic, Digest, and NTLM.
:
: 
:  Best Regards,
: 
:  SZ
: 
:  - Original Message -
:  From: Arno Garrels [EMAIL PROTECTED]
:  To: ICS support mailing twsocket@elists.org
:  Sent: Wednesday, September 06, 2006 8:19 PM
:  Subject: Re: [twsocket] Webserv demo authentication
: 
: 
:  Arno Garrels wrote:
:  Hello,
: 
:  Why does none of the authentication methods work
:  against IE 6 XP SP2?
: 
:  To be more specific:
:  The logon dialog is not coming up.
:  The Ethereal dump can be grabbed here:
:  http://www.duodata.de/misc/dump.pcap ~2KB
: 
: 
:  This is driving me nuts since 1 hour :-O
:  Any idea what's going on? I tried locally and remotely.
:  Everyting is fine if I use IE6 W2k as well as Netscape 8.0.4.
: 
:  ---
:  Arno Garrels [TeamICS]
:  http://www.overbyte.be/eng/overbyte/teamics.html
:  --
:  To unsubscribe or change your settings for TWSocket mailing list
:  please goto http://www.elists.org/mailman/listinfo/twsocket
:  Visit our website at http://www.overbyte.be
: -- 
: To unsubscribe or change your settings for TWSocket mailing list
: please goto http://www.elists.org/mailman/listinfo/twsocket
: Visit our website at http://www.overbyte.be 

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Maurizio Lotauro
Scrive Arno Garrels [EMAIL PROTECTED]:

 Arno Garrels wrote:
  Hello,
  
  Why does none of the authentication methods work
  against IE 6 XP SP2?
 
 To be more specific:
 The logon dialog is not coming up.
 The Ethereal dump can be grabbed here:
 http://www.duodata.de/misc/dump.pcap ~2KB

It is not related to your problem, but I see that the server answer that only 
NTLM will be accepted. When was added this authentication scheme to the server 
component?

About your problem, are you using different browser on the same pc or on 
different pc?


Bye, Maurizio.


This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Fastream Technologies
This is the bug:

WWW-Authenticate: Basic Realm=DemoBasicAuthContent-Type: text/html

There is no \r\n before content type. Also we use quotes in Realm names.

Regards,

Sz


- Original Message - 
From: Arno Garrels [EMAIL PROTECTED]
To: ICS support mailing twsocket@elists.org
Sent: Wednesday, September 06, 2006 8:37 PM
Subject: Re: [twsocket] Webserv demo authentication


: http://www.duodata.de/misc/dumpBasic.pcap
: http://www.duodata.de/misc/dumpDigest.pcap
: http://www.duodata.de/misc/dumpNtlm.pcap
: 
: Fastream Technologies wrote:
:  Yes but their logix are different. Why don't you email us the
:  ethereal logs for Basic for example?
:  
:  Regards,
:  
:  SZ
:  
:  - Original Message -
:  From: Arno Garrels [EMAIL PROTECTED]
:  To: ICS support mailing twsocket@elists.org
:  Sent: Wednesday, September 06, 2006 8:26 PM
:  Subject: Re: [twsocket] Webserv demo authentication
:  
:  
:  Fastream Technologies wrote:
:  If the log was Basic or Digest, I could help but I have no idea how
:  NTLM works... :(
:  
:  Anything fails Basic, Digest, and NTLM.
:  
:  
:  Best Regards,
:  
:  SZ
:  
:  - Original Message -
:  From: Arno Garrels [EMAIL PROTECTED]
:  To: ICS support mailing twsocket@elists.org
:  Sent: Wednesday, September 06, 2006 8:19 PM
:  Subject: Re: [twsocket] Webserv demo authentication
:  
:  
:  Arno Garrels wrote:
:  Hello,
:  
:  Why does none of the authentication methods work
:  against IE 6 XP SP2?
:  
:  To be more specific:
:  The logon dialog is not coming up.
:  The Ethereal dump can be grabbed here:
:  http://www.duodata.de/misc/dump.pcap ~2KB
:  
:  
:  This is driving me nuts since 1 hour :-O
:  Any idea what's going on? I tried locally and remotely.
:  Everyting is fine if I use IE6 W2k as well as Netscape 8.0.4.
:  
:  ---
:  Arno Garrels [TeamICS]
:  http://www.overbyte.be/eng/overbyte/teamics.html
:  --
:  To unsubscribe or change your settings for TWSocket mailing list
:  please goto http://www.elists.org/mailman/listinfo/twsocket
:  Visit our website at http://www.overbyte.be
:  --
:  To unsubscribe or change your settings for TWSocket mailing list
:  please goto http://www.elists.org/mailman/listinfo/twsocket
:  Visit our website at http://www.overbyte.be
: -- 
: To unsubscribe or change your settings for TWSocket mailing list
: please goto http://www.elists.org/mailman/listinfo/twsocket
: Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Maurizio Lotauro
Scrive Arno Garrels [EMAIL PROTECTED]:

 http://www.duodata.de/misc/dumpBasic.pcap
 http://www.duodata.de/misc/dumpDigest.pcap
 http://www.duodata.de/misc/dumpNtlm.pcap

Why in the basic the Content-Type is not in a line alone?


By, Maurizio.



This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Arno Garrels wrote:
 Hello,
 
 Why does none of the authentication methods work
 against IE 6 XP SP2?
 
 To be more specific:
 The logon dialog is not coming up.
 The Ethereal dump can be grabbed here:
 http://www.duodata.de/misc/dump.pcap ~2KB
 
 It is not related to your problem, but I see that the server answer
 that only NTLM will be accepted. 

Yes, that's true and it needs to be fixed.

 When was added this authentication
 scheme to the server component?

I'm working on that (virtually finished) sponsored by
Fastream Technologies.

---
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html


 
 About your problem, are you using different browser on the same pc or
 on different pc?
 
 
 Bye, Maurizio.
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Maurizio Lotauro
Scrive Arno Garrels [EMAIL PROTECTED]:

[...]

  When was added this authentication
  scheme to the server component?
 
 I'm working on that (virtually finished) sponsored by
 Fastream Technologies.

How do you authenticate the user in that case?


Bye, Maurizio.


This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Indeed, however I haven't touched that stuff at all, anyway no change:
http://www.duodata.de/misc/dumpBasic2.pcap
 
Fastream Technologies wrote:
 This is the bug:
 
 WWW-Authenticate: Basic Realm=DemoBasicAuthContent-Type: text/html
 
 There is no \r\n before content type. Also we use quotes in Realm
 names. 
 
 Regards,
 
 Sz
 
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Wednesday, September 06, 2006 8:37 PM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 http://www.duodata.de/misc/dumpBasic.pcap
 http://www.duodata.de/misc/dumpDigest.pcap
 http://www.duodata.de/misc/dumpNtlm.pcap
 
 Fastream Technologies wrote:
 Yes but their logix are different. Why don't you email us the
 ethereal logs for Basic for example?
 
 Regards,
 
 SZ
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Wednesday, September 06, 2006 8:26 PM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 Fastream Technologies wrote:
 If the log was Basic or Digest, I could help but I have no idea
 how NTLM works... :(
 
 Anything fails Basic, Digest, and NTLM.
 
 
 Best Regards,
 
 SZ
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Wednesday, September 06, 2006 8:19 PM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 Arno Garrels wrote:
 Hello,
 
 Why does none of the authentication methods work
 against IE 6 XP SP2?
 
 To be more specific:
 The logon dialog is not coming up.
 The Ethereal dump can be grabbed here:
 http://www.duodata.de/misc/dump.pcap ~2KB
 
 
 This is driving me nuts since 1 hour :-O
 Any idea what's going on? I tried locally and remotely.
 Everyting is fine if I use IE6 W2k as well as Netscape 8.0.4.
 
 ---
 Arno Garrels [TeamICS]
 http://www.overbyte.be/eng/overbyte/teamics.html
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 [...]
 
 When was added this authentication
 scheme to the server component?
 
 I'm working on that (virtually finished) sponsored by
 Fastream Technologies.
 
 How do you authenticate the user in that case?

SSPI

 
 
 Bye, Maurizio.
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Fastream Technologies
As I wrote earlier, use quotes in Realm:

Realm=MyRealm

Regards,

SZ

- Original Message - 
From: Arno Garrels [EMAIL PROTECTED]
To: ICS support mailing twsocket@elists.org
Sent: Wednesday, September 06, 2006 9:00 PM
Subject: Re: [twsocket] Webserv demo authentication


: Indeed, however I haven't touched that stuff at all, anyway no change:
: http://www.duodata.de/misc/dumpBasic2.pcap
: 
: Fastream Technologies wrote:
:  This is the bug:
:  
:  WWW-Authenticate: Basic Realm=DemoBasicAuthContent-Type: text/html
:  
:  There is no \r\n before content type. Also we use quotes in Realm
:  names. 
:  
:  Regards,
:  
:  Sz
:  
:  
:  - Original Message -
:  From: Arno Garrels [EMAIL PROTECTED]
:  To: ICS support mailing twsocket@elists.org
:  Sent: Wednesday, September 06, 2006 8:37 PM
:  Subject: Re: [twsocket] Webserv demo authentication
:  
:  
:  http://www.duodata.de/misc/dumpBasic.pcap
:  http://www.duodata.de/misc/dumpDigest.pcap
:  http://www.duodata.de/misc/dumpNtlm.pcap
:  
:  Fastream Technologies wrote:
:  Yes but their logix are different. Why don't you email us the
:  ethereal logs for Basic for example?
:  
:  Regards,
:  
:  SZ
:  
:  - Original Message -
:  From: Arno Garrels [EMAIL PROTECTED]
:  To: ICS support mailing twsocket@elists.org
:  Sent: Wednesday, September 06, 2006 8:26 PM
:  Subject: Re: [twsocket] Webserv demo authentication
:  
:  
:  Fastream Technologies wrote:
:  If the log was Basic or Digest, I could help but I have no idea
:  how NTLM works... :(
:  
:  Anything fails Basic, Digest, and NTLM.
:  
:  
:  Best Regards,
:  
:  SZ
:  
:  - Original Message -
:  From: Arno Garrels [EMAIL PROTECTED]
:  To: ICS support mailing twsocket@elists.org
:  Sent: Wednesday, September 06, 2006 8:19 PM
:  Subject: Re: [twsocket] Webserv demo authentication
:  
:  
:  Arno Garrels wrote:
:  Hello,
:  
:  Why does none of the authentication methods work
:  against IE 6 XP SP2?
:  
:  To be more specific:
:  The logon dialog is not coming up.
:  The Ethereal dump can be grabbed here:
:  http://www.duodata.de/misc/dump.pcap ~2KB
:  
:  
:  This is driving me nuts since 1 hour :-O
:  Any idea what's going on? I tried locally and remotely.
:  Everyting is fine if I use IE6 W2k as well as Netscape 8.0.4.
:  
:  ---
:  Arno Garrels [TeamICS]
:  http://www.overbyte.be/eng/overbyte/teamics.html
:  --
:  To unsubscribe or change your settings for TWSocket mailing list
:  please goto http://www.elists.org/mailman/listinfo/twsocket
:  Visit our website at http://www.overbyte.be
:  --
:  To unsubscribe or change your settings for TWSocket mailing list
:  please goto http://www.elists.org/mailman/listinfo/twsocket
:  Visit our website at http://www.overbyte.be
:  --
:  To unsubscribe or change your settings for TWSocket mailing list
:  please goto http://www.elists.org/mailman/listinfo/twsocket
:  Visit our website at http://www.overbyte.be
: -- 
: To unsubscribe or change your settings for TWSocket mailing list
: please goto http://www.elists.org/mailman/listinfo/twsocket
: Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Maurizio Lotauro
Scrive Arno Garrels [EMAIL PROTECTED]:

 Maurizio Lotauro wrote:
  Scrive Arno Garrels [EMAIL PROTECTED]:
  
  [...]
  
  When was added this authentication
  scheme to the server component?
  
  I'm working on that (virtually finished) sponsored by
  Fastream Technologies.
  
  How do you authenticate the user in that case?
 
 SSPI

I would like to know how do you that, but after you solved the mistery :-)


Bye, Maurizio.



This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Arno Garrels wrote:
 Indeed, however I haven't touched that stuff at all, anyway no change:
 http://www.duodata.de/misc/dumpBasic2.pcap

Seems that I missed the quotes but in my source (latest V6) 
Realms are not quoted?


---
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html



 
 Fastream Technologies wrote:
 This is the bug:
 
 WWW-Authenticate: Basic Realm=DemoBasicAuthContent-Type: text/html
 
 There is no \r\n before content type. Also we use quotes in Realm
 names.
 
 Regards,
 
 Sz
 
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Wednesday, September 06, 2006 8:37 PM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 http://www.duodata.de/misc/dumpBasic.pcap
 http://www.duodata.de/misc/dumpDigest.pcap
 http://www.duodata.de/misc/dumpNtlm.pcap
 
 Fastream Technologies wrote:
 Yes but their logix are different. Why don't you email us the
 ethereal logs for Basic for example?
 
 Regards,
 
 SZ
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Wednesday, September 06, 2006 8:26 PM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 Fastream Technologies wrote:
 If the log was Basic or Digest, I could help but I have no idea
 how NTLM works... :(
 
 Anything fails Basic, Digest, and NTLM.
 
 
 Best Regards,
 
 SZ
 
 - Original Message -
 From: Arno Garrels [EMAIL PROTECTED]
 To: ICS support mailing twsocket@elists.org
 Sent: Wednesday, September 06, 2006 8:19 PM
 Subject: Re: [twsocket] Webserv demo authentication
 
 
 Arno Garrels wrote:
 Hello,
 
 Why does none of the authentication methods work
 against IE 6 XP SP2?
 
 To be more specific:
 The logon dialog is not coming up.
 The Ethereal dump can be grabbed here:
 http://www.duodata.de/misc/dump.pcap ~2KB
 
 
 This is driving me nuts since 1 hour :-O
 Any idea what's going on? I tried locally and remotely.
 Everyting is fine if I use IE6 W2k as well as Netscape 8.0.4.
 
 ---
 Arno Garrels [TeamICS]
 http://www.overbyte.be/eng/overbyte/teamics.html
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
 --
 To unsubscribe or change your settings for TWSocket mailing list
 please goto http://www.elists.org/mailman/listinfo/twsocket
 Visit our website at http://www.overbyte.be
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Maurizio Lotauro
Scrive Fastream Technologies [EMAIL PROTECTED]:

 As I wrote earlier, use quotes in Realm:
 
 Realm=MyRealm

This is certainly not the cause (or at least not the first) of the problem. 
NTLM don't has a realm and it doesn't work either.


Bye, Maurizio.

P.S. Should we start a chat? ;)


This mail has been sent using Alpikom webmail system
http://www.alpikom.it

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 [...]
 
 When was added this authentication
 scheme to the server component?
 
 I'm working on that (virtually finished) sponsored by
 Fastream Technologies.
 
 How do you authenticate the user in that case?
 
 SSPI
 
 I would like to know how do you that, but after you solved the
 mistery :-) 

I'll try to get finished soon, so it probably will be included in
the October version. 

 
 
 Bye, Maurizio.
 
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Indeed, however I haven't touched that stuff at all, anyway no
 change: http://www.duodata.de/misc/dumpBasic2.pcap
 
 I don't expected that it was the cause of the malfunction. Are you
 running ethereal on the same pc of the server or of the browser?

It runs on the server-side.

 
 
 Bye, Maurizio.
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] Webserv demo authentication

2006-09-06 Thread Arno Garrels
Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Maurizio Lotauro wrote:
 Scrive Arno Garrels [EMAIL PROTECTED]:
 
 Indeed, however I haven't touched that stuff at all, anyway no
 change: http://www.duodata.de/misc/dumpBasic2.pcap
 
 I don't expected that it was the cause of the malfunction. Are you
 running ethereal on the same pc of the server or of the browser?
 
 It runs on the server-side.
 
 Try on the client side too.

Tomorrow ;-)


 
 
 Bye, Maurizio.
 
 
 This mail has been sent using Alpikom webmail system
 http://www.alpikom.it
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be