Forum Discussion

nmowbray's avatar
nmowbray
Occasional Contributor
6 years ago

ReadyAPI 2.8.0 getting 401 error when attempting to send the request

When we attempt to send a request to an endpoint that requires kerberos authentication I keep getting a 401 error 

Request

RAW: 

POST http://matrix-133-cdi.matrix.sjrb.ad/customers HTTP/1.1
Connection: close
Accept-Encoding: gzip,deflate
X_SHAW_TRANSACTION_ID: 00005557
User-Agent: Fiddler
X_SHAW_ORIGINATING_IP_ADDRESS: 10.15.184.88
X_SHAW_ORIGINAL_MODULE_ID: NetCracker
X_SHAW_ORIGINATING_HOST_NAME: devcoreoeml017.matrix.SJRB.AD
Content-Type: application/vnd.shaw.customer+xml
X_SHAW_ORIGINATING_USER_ID: lruser003
Content-Length: 1697
Host: matrix-133-cdi.matrix.sjrb.ad

<Customer xmlns="http://services.sjrb.ad/customer">
<Identity>
<Title>Mr</Title>
<FirstName>Nate</FirstName>
<MiddleNameInitial>M</MiddleNameInitial>
<LastName>Phone</LastName>
</Identity>
<IsOrganization>False</IsOrganization>
<Status>New</Status>
<SalesLeads>
<SalesLead>1</SalesLead>
</SalesLeads>
<CustomerAlerts>
<CustomerAlert>1</CustomerAlert>
</CustomerAlerts>
<PrivacyRequested>True</PrivacyRequested>
<Credentials>
<Password>1112</Password>
<MembershipNumber>121213</MembershipNumber>
<DriversLicense>233334</DriversLicense>
</Credentials>
<CreditScore>Netural</CreditScore>
<CreditScoreDate>2010-04-14T00:00:00Z</CreditScoreDate>
<BillingPreferences>
<BillingLevelOfDetail>Detail</BillingLevelOfDetail>
<BillingDeliveryMethod>Paper</BillingDeliveryMethod>
<BillingLanguage>English</BillingLanguage>
<BillingDeliveryFormat>Normal</BillingDeliveryFormat>
<BillingEmails>
<BillingEmail>
<Address>hello@here.com</Address>
</BillingEmail>
</BillingEmails>
<BillingAddresses>
<BillingAddress>
<AisId>272272</AisId>
</BillingAddress>
</BillingAddresses>
</BillingPreferences>
<ContactInformation>
<ContactEmail>
<Address>john.doe@domain.ca</Address>
</ContactEmail>
<PhoneNumbers>
<PhoneNumber>
<IsPrimary>True</IsPrimary>
<PhoneType>Home</PhoneType>
<Number>4032223334</Number>
<Extension>78</Extension>
</PhoneNumber>
<PhoneNumber>
<IsPrimary>False</IsPrimary>
<PhoneType>Home</PhoneType>
<Number>4033332222</Number>
<Extension>1</Extension>
</PhoneNumber>
</PhoneNumbers>
</ContactInformation>
<Accounts></Accounts>
</Customer>

 

Response

RAW: 

 

HTTP/1.1 401 Unauthorized
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
WWW-Authenticate: Negotiate oXwweqADCgEBoQsGCSqGSIb3EgECAqJmBGRgYgYJKoZIhvcSAQIC
Date: Thu, 01 Aug 2019 22:52:11 GMT
Connection: close
Content-Length: 341

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Not Authorized</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Not Authorized</h2>
<hr><p>HTTP Error 401. The requested resource requires user authentication.</p>
</BODY></HTML>

 

I followed the document for kerberos that smartbear has, added the following to vmoptions.txt

-Djavax.security.auth.useSubjectCredsOnly=false
-Djava.security.auth.login.config=/Users/nmowbray/Documents/Kerberos_SoapUI/login.conf
-Djava.security.krb5.conf=/Users/nmowbray/Documents/Kerberos_SoapUI/krb5.conf

 

Custom Properties

Follow Redirects true

Follow 302 Redirect with GET false

Username user01

Password password

Domain shaw

 

Using the exact same setup in ReadyAPI 2.6.0 this request works with no issues 

  • Hi nmowbray,

     

    It looks like this question requires additional investigation. So, I suggest that you create a support ticket here. Our Customer Care team will do their best to assist you.

    • nmowbray's avatar
      nmowbray
      Occasional Contributor

      I am running soapUI pro on mac, i have .keytab and .conf files in a directory that are referenced in the vmoptions.

      we added the following to the file 

      -Djavax.security.auth.useSubjectCredsOnly=false
      -Djava.security.auth.login.config=/Users/nmowbray/Documents/Kerberos_SoapUI/login.conf
      -Djava.security.krb5.conf=/Users/nmowbray/Documents/Kerberos_SoapUI/krb5.conf

       

      but we still have issues.

       

      I have not done the kinit part of the instructions as this is a work computer.  Can you explain why we need to run the kinit in order to have kerberos work in soapUI, it was working on previous versions without having to do this 

      • KirillZakharov's avatar
        KirillZakharov
        Staff

        Hi nmowbray,

         

        It looks like this question requires additional investigation. So, I suggest that you create a support ticket here. Our Customer Care team will do their best to assist you.