Fastream Technologies wrote: > Hi Arno, > > I also wonder if this could be a lifetime/time zone problem? We are > GMT+200. What is the timeout period of this authentication and did > you consider different time zones?
I do not think so. Function AcceptSecurityContext (NTLM) is documented here: http://windowssdk.msdn.microsoft.com/en-us/library/ms717513.aspx The Timestamp is filled by the security package. Windows 2000/NT and Windows Me/98/95: This parameter is not used. Set this value to NULL. I tested on W2k as well as on XP! > > Best Regards, > > SZ > > ----- Original Message ----- > From: "Fastream Technologies" <[EMAIL PROTECTED]> > To: "ICS support mailing" <twsocket@elists.org> > Sent: Thursday, September 14, 2006 11:31 AM > Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) > > >> It is very strange that when I enabled DEBUG_EXCEPTIONS, it worked >> and gave no errors/exceptions! But I cannot deploy in this form... ;( >> >> SZ >> >> ----- Original Message ----- >> From: "Arno Garrels" <[EMAIL PROTECTED]> >> To: "ICS support mailing" <twsocket@elists.org> >> Sent: Thursday, September 14, 2006 10:49 AM >> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) >> >> >>> I tested with Opera successfully! >>> >>> Change the format string below in order to get a hex display like: >>> raise Exception.CreateFmt('Init context failed: 0x%x', [Sec]); >>> >>> Post the hex value. >>> >>> >>> >>> Fastream Technologies wrote: >>>> Hello, >>>> >>>> With FF, after msg3, >>>> >>>> Sec := FPSFT^.AcceptSecurityContext(@FHCred, >>>> pHCtx, >>>> @InBuffDesc, >>>> >>>> ASC_REQ_SEQUENCE_DETECT, // context requirements >>>> SECURITY_NATIVE_DREP, >>>> @FHCtx, >>>> @OutBuffDesc, >>>> ContextAttr, >>>> Lifetime); >>>> if Sec < 0 then >>>> begin // enters here with Sec = -2^31 >>>> {$IFDEF DEBUG_EXCEPTIONS} >>>> raise Exception.CreateFmt('Init context failed: %d', >>>> [Sec]); {$ELSE} >>>> Result := ''; >>>> FState := lsDoneErr; >>>> Exit; >>>> {$ENDIF} >>>> end; >>>> >>>> Arno, do you have any idea? >>>> >>>> Best Regards, >>>> >>>> SZ >>>> >>>> ----- Original Message ----- >>>> From: "Fastream Technologies" <[EMAIL PROTECTED]> >>>> To: "ICS support mailing" <twsocket@elists.org> >>>> Sent: Thursday, September 14, 2006 8:20 AM >>>> Subject: Re: [twsocket] Fw: Urgent (Another simple NTLM question) >>>> >>>> >>>>> Here is the full log: >>>>> >>>>> FireFox 1.5.0.6: >>>>> >>>>> 13.09.2006 21:50:09 Connection Opened >>>>> >>>>> 13.09.2006 21:50:09 From Local >>>>> GET / HTTP/1.1..Host: fastream.homeip.net:82..User-Agent: >>>>> Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.6) >>>>> Gecko/20060728 Firefox/1.5.0.6..Accept: >>>>> >> > text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5..Accept-Language: >>>>> en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: >>>>> windows-1254,utf-8;q=0.7,*;q=0.7..Keep-Alive: 300..Connection: >>>>> keep-alive.... >>>>> >>>>> 13.09.2006 21:50:09 From Remote >>>>> HTTP/1.1 401 Authorization Required..WWW-Authenticate: >>>>> NTLM..Content- Length: 629..Content-Type: text/html..Connection: >>>>> keep- alive..Server: Fastream IQ Reverse >>>>> Proxy....<HTML><HEAD><TITLE>401 Authorization ... >>>>> >>>>> 13.09.2006 21:50:17 From Local >>>>> GET / HTTP/1.1..Host: fastream.homeip.net:82..User-Agent: >>>>> Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.6) >>>>> Gecko/20060728 Firefox/1.5.0.6..Accept: >>>>> >> > text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5..Accept-Language: >>>>> en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: >>>>> windows-1254,utf-8;q=0.7,*;q=0.7..Keep-Alive: 300..Connection: >>>>> keep-alive..Authorization: NTLM >>>>> TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA=.... >>>>> >>>>> 13.09.2006 21:50:17 From Remote >>>>> HTTP/1.1 401 Authorization Required..WWW-Authenticate: NTLM >>>>> >> > TlRMTVNTUAACAAAADAAMADgAAAAFgooC/difEScUAFYAAAAAAAAAAEwATABEAAAABQEoCgAAAA9MAEEAUABUAE8AUAACAAwATABBAFAAVABPAFAAAQAMAEwAQQBQAFQATwBQAAQADABsAGEAcAB0AG8AcAADAAwAbABhAHAAdABvAHAABgAEAAEAAAAAAAAA..Content-Length: >>>>> 629..Content-Type: text/html..Connection: keep-alive..Server: >>>>> Fastream IQ Reverse Proxy....<HTML><HEAD><TITLE>401 Authorization >>>>> ... >>>>> >>>>> 13.09.2006 21:50:17 From Local >>>>> GET / HTTP/1.1..Host: fastream.homeip.net:82..User-Agent: >>>>> Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.6) >>>>> Gecko/20060728 Firefox/1.5.0.6..Accept: >>>>> >> > text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5..Accept-Language: >>>>> en-us,en;q=0.5..Accept-Encoding: gzip,deflate..Accept-Charset: >>>>> windows-1254,utf-8;q=0.7,*;q=0.7..Keep-Alive: 300..Connection: >>>>> keep-alive..Authorization: NTLM >>>>> >> > TlRMTVNTUAADAAAAGAAYAGIAAAAYABgAegAAAAAAAABAAAAAFgAWAEAAAAAMAAwAVgAAAAAAAAAAAAAABYIIAEcAbwByAGsAZQBtACAAQQB0AGUAcwBsAGEAcAB0AG8AcABc2JyvFDVzpwAAAAAAAAAAAAAAAAAAAABShNO+26e7kFH0QwISJYTrsG5Xb3lYZkM=.... >>>>> >>>>> 13.09.2006 21:50:17 From Remote >>>>> HTTP/1.1 401 Authorization Required..WWW-Authenticate: NTLM >>>>> ..Content-Length: 629..Content-Type: text/html..Connection: >>>>> keep-alive..Server: Fastream IQ Reverse >>>>> Proxy....<HTML><HEAD><TITLE>401 ... >>>>> >>>>> Still asking for password here....Forever... >>>>> >>>>> IE6XP: >>>>> >>>>> 13.09.2006 21:48:06 Connection Opened >>>>> >>>>> 13.09.2006 21:48:06 From Local >>>>> GET / HTTP/1.1..Accept: image/gif, image/x-xbitmap, image/jpeg, >>>>> image/pjpeg, application/x-shockwave-flash, application/vnd.ms- >>>>> excel, application/msword, application/vnd.ms-powerpoint, >>>>> */*..Accept-Language: tr..Accept-Encoding: gzip, deflate..User- >>>>> Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; >>>>> .NET CLR 1.1.4322)..Host: fastream.homeip.net:82..Connection: >>>>> Keep- Alive..Cookie: >>>>> IQDomain="NAME=949BB1BDF325862423C53938CEA5EB6D.... >>>>> >>>>> 13.09.2006 21:48:06 From Remote >>>>> HTTP/1.1 401 Authorization Required..WWW-Authenticate: >>>>> NTLM..Content- Length: 629..Content-Type: text/html..Connection: >>>>> Keep- Alive..Server: Fastream IQ Reverse >>>>> Proxy....<HTML><HEAD><TITLE>401 Authorization ... >>>>> >>>>> 13.09.2006 21:48:06 From Local >>>>> GET / HTTP/1.1..Accept: image/gif, image/x-xbitmap, image/jpeg, >>>>> image/pjpeg, application/x-shockwave-flash, application/vnd.ms- >>>>> excel, application/msword, application/vnd.ms-powerpoint, >>>>> */*..Accept-Language: tr..Accept-Encoding: gzip, deflate..User- >>>>> Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; >>>>> .NET CLR 1.1.4322)..Host: fastream.homeip.net:82..Connection: >>>>> Keep- Alive..Authorization: NTLM >>>>> >> >> TlRMTVNTUAABAAAAB7IIogkACQAuAAAABgAGACgAAAAFASgKAAAAD0xBUFRPUFdPUktHUk9VUA==..Cookie: >> IQDomain="NAME=949BB1BDF325862423C53938CEA5EB6D.... >>>>> >>>>> 13.09.2006 21:48:06 From Remote >>>>> HTTP/1.1 401 Authorization Required..WWW-Authenticate: NTLM >>>>> >> > TlRMTVNTUAACAAAADAAMADgAAAAFwoqi1rIk+abQsBfodhAAAAAAAEwATABEAAAABQEoCgAAAA9MAEEAUABUAE8AUAACAAwATABBAFAAVABPAFAAAQAMAEwAQQBQAFQATwBQAAQADABsAGEAcAB0AG8AcAADAAwAbABhAHAAdABvAHAABgAEAAEAAAAAAAAA..Content-Length: >>>>> 629..Content-Type: text/html..Connection: Keep-Alive..Server: >>>>> Fastream IQ Reverse Proxy....<HTML><HEAD><TITLE>401 Authorization >>>>> ... >>>>> >>>>> 13.09.2006 21:48:06 From Local >>>>> GET / HTTP/1.1..Accept: image/gif, image/x-xbitmap, image/jpeg, >>>>> image/pjpeg, application/x-shockwave-flash, application/vnd.ms- >>>>> excel, application/msword, application/vnd.ms-powerpoint, >>>>> */*..Accept-Language: tr..Accept-Encoding: gzip, deflate..User- >>>>> Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; >>>>> .NET CLR 1.1.4322)..Host: fastream.homeip.net:82..Connection: >>>>> Keep- Alive..Authorization: NTLM >>>>> >> >> TlRMTVNTUAADAAAAAAAAAEgAAAAAAAAASAAAAAAAAABIAAAAAAAAAEgAAAAAAAAASAAAAAAAAABIAAAABcKIogUBKAoAAAAP..Cookie: >> IQDomain="NAME=949BB1BDF325862423C53938CEA5EB6D.... >>>>> >>>>> 13.09.2006 21:48:06 From Remote >>>>> HTTP/1.1 200 OK..Content-Type: text/html..Connection: Keep- >>>>> Alive..Server: Fastream IQ Web/FTP Server..Content-Length: >>>>> 14718..Content-Encoding: gzip..Set-Cookie: >>>>> IQDomain="NAME=949BB1BDF325862423C53938CEA5EB6D; PATH=/; >>>>> EXPIRES=Thu, 01 Jan 2009 21:48:06;"..Via: Fastream IQ Reverse >>>>> Proxy.....<data here> >>>>> >>>>> >>>>> I cut the data sections to obey the ICS list 40kB limit here. >>>>> >>>>> Best Regards, >>>>> >>>>> SZ >>>>> >>>>> -- >>>>> To unsubscribe or change your settings for TWSocket mailing list >>>>> please goto http://www.elists.org/mailman/listinfo/twsocket >>>>> Visit our website at http://www.overbyte.be >>> -- >>> To unsubscribe or change your settings for TWSocket mailing list >>> please goto http://www.elists.org/mailman/listinfo/twsocket >>> Visit our website at http://www.overbyte.be >> >> -- >> To unsubscribe or change your settings for TWSocket mailing list >> please goto http://www.elists.org/mailman/listinfo/twsocket >> Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
