Hello, I am trying to fix digest authentication coded by Peter. We have a big problem with Internet Explorer. In the setup below, you will see a web page requested without first sending the "Authorization:" header. Then the server responds with 401 and tells the client it prefers "Digest" auth by first listing its name. Notice the realms do not match and at the end IE crashes (report to M$).
24.01.2006 13:31:57 Connection Opened 24.01.2006 13:31:57 From Local GET /%3EFastream.com/ HTTP/1.1..Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*..Referer: http://localhost:8080..Accept-Language: tr..Accept-Encoding: gzip, deflate..If-Modified-Since: Sun, 01 Jan 2006 11:43:04 GMT..User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)..Host: localhost:8080..Connection: Keep-Alive..Cookie: PanteraDomain="NAME=BB0171FC575499C903B3A74653E74FCA.... 24.01.2006 13:31:57 From Remote HTTP/1.1 401 Authorization Required..WWW-Authenticate: Digest Basic realm=localhost/%3EFastream.com/, uri="localhost/%3EFastream.com/", qop="auth,auth-int", nonce="MjAwNi0wMS0yNCAxMzozMTo1Nw==", opaque="ETimpfFSr8qhbccexiZCu80UjTzQdMUmMm"..Content-Length: 482..Content-Type: text/html..Connection: Keep-Alive..Server: Fastream NETFile FTP/Web Server....<HTML><HEAD><TITLE>401 Authorization Required</TITLE></HEAD><BODY><FONT FACE="Verdana"><H1>Authorization Required</H1><BR>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g. bad password), or your browser doesn't understand how to supply the credentials required.<P><BR><HR><I><B>Fastream NETFile HTTP Server</B><BR><A HREF="http://www.fastream.com";>www.fastream.com</A></I><HR></FONT></BODY></HTML> 24.01.2006 13:32:00 From Local GET /%3EFastream.com/ HTTP/1.1..Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*..Referer: http://localhost:8080..Accept-Language: tr..Accept-Encoding: gzip, deflate..If-Modified-Since: Sun, 01 Jan 2006 11:43:04 GMT..User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)..Host: localhost:8080..Connection: Keep-Alive..Authorization: Digest username="test", realm="test", qop="auth", algorithm="MD5", uri="/%3EFastream.com/", nonce="MjAwNi0wMS0yNCAxMzozMTo1Nw==", nc=00000001, cnonce="3bb10d07087ad397d618e8334ff036c1", opaque="ETimpfFSr8qhbccexiZCu80UjTzQdMUmMm", response="0e3b8fc75934d491a52e6a8019d94a5c"..Cookie: PanteraDomain="NAME=BB0171FC575499C903B3A74653E74FCA.... 24.01.2006 13:32:02 From Remote HTTP/1.1 200 OK..Content-Length: 1126..Content-Type: text/html..Connection: Keep-Alive..Last-Modified: Sun, 01 Jan 2006 11:43:04 GMT..Server: Fastream NETFile FTP/Web Server....<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">..<html>..<head>..<title>Fastream Technologies</title>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">..<link rel="stylesheet" type="text/css" href="fast.css">....</head>..<body>..<table width="740" border="0" cellspacing="0" cellpadding="0" align="center">.. <tr>.. <td><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0"; width="740" height="500">.. <param name="movie" value="images/main.swf">.. <param name="quality" value="high">.. <param name="wmode" value="transparent">.. <embed src="images/main.swf" width="740" height="500" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer"; type="application/x-shockwave-flash" wmode="transparent"></embed></object></td>.. </tr>.. <tr valign="bottom"> .. <td colspan="3" align="center"><span class="footer">1998 - 2006 FASTREAM TECHNOLOGIES .. ALL RIGHTS RESERVED WORLDWIDE</span></td>.. </tr>..</table>..</body>..</html>.. 24.01.2006 13:32:02 Connection Closed Any idea how to work this around? Mozilla and Opera are fine. Best Regards, SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
