Forum Discussion

Marty_O_Brien's avatar
17 years ago

"NT Authentication" not working

Hello,

I'm sorry, but I'm an extreme newbie here. I am trying to connect soapUI to a SharePoint web service (Namely, the UserProfileService) to test some SOAP queries.

When I try to connect, I get an NT Authentication dialog box, which seems normal, but it won't work. Upon loading my HTTP sniffer, I notice that on the first request no authentication is sent, which is normal with NTLM auth, then on the seond request, the "Authorization" string IS sent with the header, and the return "WWW-Authentication" string is sent in the response, but the content returned with status code 401 and the message "The requested resource requires user authentication." in the body.

I found some threads that suggest enabling a variable in soapUI called "Authenticate Preemptively" in the Preferences, which I did, but otherwise I am running a stock setup here.

Please help me in any way possible as I'd really like to test these queries with this tool.

I also welcome responses that tell me that i'm using the wrong tool and that X is better for the simple things I am trying to do. soapUI seems very powerful and IS probably overkill for my requirements.

Thanks in advance,

--mobrien118

2 Replies

  • dlite922's avatar
    dlite922
    New Contributor
    Bump!

    I'm also trying to get this to work. Saw something that we should be using a different NT...version.

    I'd love to have an expect clarify though.

    Thanks,




    Dan
  • bkesava's avatar
    bkesava
    New Contributor
    Hi you can overcome that situation by enabling anonymous access on your website.

    After that you need to do the following so that you dont get the 401 unauthorized error..

    soapUI doesn’t seem to work directly with NTLM authentication, but you can use a proxy such as Burp Suite to do the auth for you.

    Download Burp Suite from http://www.portswigger.net/burp/downloadfree.html and install it with default settings
    On Burp’s “Proxy : Intercept” tab, click the button to turn intercept off.
    On Burp’s “Proxy : Options” tab, make sure it’s set to an unused port, the default is 8081
    On Burp’s “Options” tab, tick “do www authentication” and add a setting for the server you wish to hit. Also tick “prompt for credentials on authentication failure”
    Switch to Burp’s “Proxy : History” tab so you can see requests going through.
    In SoapUI, choose File > Preferences, then select “Proxy Settings”. Enter Host “localhost” and port “8081″.
    Use SoapUI as normal. It will send requests through Burp Proxy, which will do the NTLM authentication for you.