Fastream Technologies wrote: > Ok but let's say the server is running on multiple domains using a > domain > controller.
Then I guess that the default authenticating authority will be the DC, someone needs to test that, anybody out there with a domain environment? > At simplest, a normal domain and the local domain. I've never heard of a local domain, either your webserver box is a member of a domain or it is a standalone box (in this case you have to ensure that any account is locally, physically available on the webserver box). > How > does the > client decides which one of them to log on to? The client cannot know that in the firstplace, it only gets the WWW-Authenticate headers, they do not include any domain information. And why don't you fill > in the > domain field in the NTLM msg 1? I don't fill it in, the client fills it in!! > > Regards, > > SZ > > ----- Original Message ----- > From: "Arno Garrels" <[EMAIL PROTECTED]> > To: "ICS support mailing" <twsocket@elists.org> > Sent: Wednesday, September 13, 2006 7:25 PM > Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) > > > Fastream Technologies wrote: >> Ok, thank you for tolerating my insistence. I am trying to >> understand. >> >> There is just one issue left: under IE6XP, when I log in, I am not >> asked of >> any NTLM-domain name! > > Because there's no Domain information anywhere, The server just sends > HTTP header "WWW-Athenticate: NTLM". The client the initiates > NTLM authentication by sending the NTLM message 1 (which has a domain > field, but that's mostly not filled) > > >> And assuming that it is like IE-FTP client, I >> cannot >> find the log in change option in any menu! Does anybody know the >> logic behind this? I have seen the words of Francois but I am opting >> for just the >> opposite--instead of auto logging in, I want the _option_ to be able >> to >> select the NTLM-domain. >> >> Best Regards, >> >> SZ >> >> ----- Original Message ----- >> From: "Arno Garrels" <[EMAIL PROTECTED]> >> To: "ICS support mailing" <twsocket@elists.org> >> Sent: Wednesday, September 13, 2006 6:48 PM >> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) >> >> >> Fastream Technologies wrote: >>> I mean the base64 message not the HTTP header. >> >> I'll give it up soon... >> THIS IS A CLIENT ISSUE!! >> The same happens when you try to access a protected page on >> IIS. >> >>> >>> >>> Again, >>> >>> I think there is a misunderstanding. Yes that's what the page says >>> and I >>> mean: the "msg" contains the domain BUT in your code, the FF >>> displays domain >>> as "" (null). That needs to be fixed. At least "localhost" or >>> "127.0.0.1" >>> should be displayed there. >>> >>> ----- Original Message ----- >>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>> To: "ICS support mailing" <twsocket@elists.org> >>> Sent: Wednesday, September 13, 2006 6:36 PM >>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) >>> >>> >>> Fastream Technologies wrote: >>>> I do not believe the empty domain implementation is correct!! >>> >>> What do you mean by that? A missing Domain HTTP header field? >>> At least in my environment both IE as IIS do not sent any HTTP >>> Domain header. AND M$ invented NTLM, it is undocumented. >>> >>>> Regards, >>>> >>>> SZ >>>> >>>> ----- Original Message ----- >>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>> To: "ICS support mailing" <twsocket@elists.org> >>>> Sent: Wednesday, September 13, 2006 5:59 PM >>>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) >>>> >>>> >>>> Fastream Technologies wrote: >>>>> Hello Arno and Francois, >>>>> >>>>> I cannot debug Arno's demo: It stops at breakpoints but does not >>>>> let me >>>>> inspect: >>>> >>>> AFAIK it's not possible to do that, and BTW I don't believe your >>>> problem >>>> has to do with the ICS server. IE works for you, right? You may try >>>> Netscape >>>> as well. >>>> >>>> >>>>> >>>>> http://www.fastream.com/ics/arnoscreenshot2.png >>>>> >>>>> Best Regards, >>>>> >>>>> SZ >>>>> >>>>> ----- Original Message ----- >>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>> To: "ICS support mailing" <twsocket@elists.org> >>>>> Sent: Wednesday, September 13, 2006 5:10 PM >>>>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) >>>>> >>>>> >>>>> Fastream Technologies wrote: >>>>>> Ok. It is not related with port. One idea: my Windows username >>>>>> includes a space. Could this matter? >>>>> >>>>> Why don't you create a new account w/o a space and try that out by >>>>> yourself? >>>>> I created one including a space as well as including German >>>>> spezific characters above 128 such as so called Umlauts like Ü,ü, >>>>> and ß which is another form of ss. >>>>> >>>>> >>>>>> Should there be made any >>>>>> encoding/decoding? >>>>>> >>>>>> Best Regards, >>>>>> >>>>>> SZ >>>>>> >>>>>> ----- Original Message ----- >>>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>>> To: "ICS support mailing" <twsocket@elists.org> >>>>>> Sent: Wednesday, September 13, 2006 4:53 PM >>>>>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) >>>>>> >>>>>> >>>>>>> Fastream Technologies wrote: >>>>>>>> Did you try a non-80 port? >>>>>>> >>>>>>> No I haven't, have you tried the standard port? >>>>>>> >>>>>>>> Maybe that requires a domain in the header? >>>>>>>> >>>>>>>> ----- Original Message ----- >>>>>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>>>>> To: "ICS support mailing" <twsocket@elists.org> >>>>>>>> Sent: Wednesday, September 13, 2006 4:36 PM >>>>>>>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM >>>>>>>> question) >>>>>>>> >>>>>>>> >>>>>>>>> Fastream Technologies wrote: >>>>>>>>>> Hello Arno and Everybody, >>>>>>>>>> >>>>>>>>>> Could you look at this screenshot carefully: >>>>>>>>>> http://www.fastream.com/ics/arnoscreenshot.png. >>>>>>>>>> >>>>>>>>>> This is Arno's demo compiled with BCB2k6 and running on a >>>>>>>>>> Windows XP Pro with no domain controller and just a work >>>>>>>>>> group. It does not let >>>>>>>>>> me authenticate and there is no domain information--both not >>>>>>>>>> stated ("") and asked for! >>>>>>>>> >>>>>>>>> I tried the same config, both your bin and FF locally on XP >>>>>>>>> Pro successfully. Sure the account must be on the same box. >>>>>>>>> The NTLM 401 doesn't send a domain header, so you see ("") in >>>>>>>>> FF. >>>>>>>>> >>>>>>>>> >>>>>>>>>> >>>>>>>>>> Best Regards, >>>>>>>>>> >>>>>>>>>> SZ >>>>>>>>>> >>>>>>>>>> ----- Original Message ----- >>>>>>>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>>>>>>> To: "ICS support mailing" <twsocket@elists.org> >>>>>>>>>> Sent: Wednesday, September 13, 2006 2:31 PM >>>>>>>>>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM >>>>>>>>>> question) >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Fastream Technologies wrote: >>>>>>>>>>>> I also tested with FF/1.5.0.6! Something's wrong somewhere! >>>>>>>>>>> >>>>>>>>>>> BTW: In FF you may enter a user name like Host\User, though >>>>>>>>>>> this is most likely not the problem here. >>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> ----- Original Message ----- >>>>>>>>>>>> From: "Arno Garrels" <[EMAIL PROTECTED]> >>>>>>>>>>>> To: "ICS support mailing" <twsocket@elists.org> >>>>>>>>>>>> Sent: Wednesday, September 13, 2006 2:15 PM >>>>>>>>>>>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM >>>>>>>>>>>> question) >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> Fastream Technologies wrote: >>>>>>>>>>>>>> >>>>>>>>>>>>> Please check my private message. >>>>>>>>>>>>> >>>>>>>>>>>>> Your EXE works fine using Firefox/1.5.0.6! >>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> Rgrds, >>>>>>>>>>>>>> >>>>>>>>>>>>>> SZ >>>>>>>>>>>>> -- >>>>>>>>>>>>> To unsubscribe or change your settings for TWSocket >>>>>>>>>>>>> mailing list please goto >>>>>>>>>>>>> http://www.elists.org/mailman/listinfo/twsocket Visit our >>>>>>>>>>>>> website at http://www.overbyte.be >>>>>>>>>>> -- >>>>>>>>>>> To unsubscribe or change your settings for TWSocket mailing >>>>>>>>>>> list please goto >>>>>>>>>>> http://www.elists.org/mailman/listinfo/twsocket Visit our >>>>>>>>>>> website at http://www.overbyte.be >>>>>>>>> -- >>>>>>>>> To unsubscribe or change your settings for TWSocket mailing >>>>>>>>> list please goto >>>>>>>>> http://www.elists.org/mailman/listinfo/twsocket Visit our >>>>>>>>> website at http://www.overbyte.be >>>>>>> -- >>>>>>> To unsubscribe or change your settings for TWSocket mailing list >>>>>>> please goto http://www.elists.org/mailman/listinfo/twsocket >>>>>>> Visit our website at http://www.overbyte.be >>>>> -- >>>>> To unsubscribe or change your settings for TWSocket mailing list >>>>> please goto http://www.elists.org/mailman/listinfo/twsocket >>>>> Visit our website at http://www.overbyte.be >>>> -- >>>> To unsubscribe or change your settings for TWSocket mailing list >>>> please goto http://www.elists.org/mailman/listinfo/twsocket >>>> Visit our website at http://www.overbyte.be >>> -- >>> To unsubscribe or change your settings for TWSocket mailing list >>> please goto http://www.elists.org/mailman/listinfo/twsocket >>> Visit our website at http://www.overbyte.be >> -- >> To unsubscribe or change your settings for TWSocket mailing list >> please goto http://www.elists.org/mailman/listinfo/twsocket >> Visit our website at http://www.overbyte.be > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://www.elists.org/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
