NTLM authentication broken
Hi, In one of our projects we are using NTLM authentication to connect to a server. The same project (using the same file) that is working in soapUI Pro 4.6.0, stopped working in 4.6.1. The authent...
Forum Discussion
Hi,
As a start here are the failed and successful call to a web service. The interesting part is that in 4.6.0 soapUI correctly recognizes the authentication mechanism, while it doesn't do this in 4.6.1.. Please see below.
<b>soapUI 4.6.1 (failed call)</b>
Mon Nov 18 15:03:45 CET 2013:DEBUG:Loaded Definition: ok
Mon Nov 18 15:03:52 CET 2013:DEBUG:Attempt 1 to execute request
Mon Nov 18 15:03:52 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:03:54 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:03:54 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:03:54 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:03:54 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:03:54 CET 2013:DEBUG:Authentication scope: NEGOTIATE <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:03:54 CET 2013:INFO:xxxxxxxxxxxxx.com:8080 requires authentication with the realm 'null'
Mon Nov 18 15:03:54 CET 2013:DEBUG:Found credentials
Mon Nov 18 15:03:55 CET 2013:DEBUG:Attempt 2 to execute request
Mon Nov 18 15:03:55 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:03:55 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:03:55 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:03:55 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:03:55 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:03:55 CET 2013:DEBUG:Authentication scope: NEGOTIATE <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:03:55 CET 2013:DEBUG:Authentication failed
Mon Nov 18 15:03:55 CET 2013:INFO:Got response for [BasicHttpBinding_IS3GService.InfoSolutionsSS42:InfoSolutionsSS4] in 3166ms (0 bytes)
Mon Nov 18 15:04:26 CET 2013:DEBUG:Connection closed
<b>soapUI 4.6.0 (successfull call)</b>
Mon Nov 18 15:07:14 CET 2013:DEBUG:Attempt 1 to execute request
Mon Nov 18 15:07:14 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:07:15 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:07:15 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:07:15 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authentication scope: NTLM <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:07:15 CET 2013:INFO:xxxxxxxxxxxxx.com:8080 requires Windows authentication
Mon Nov 18 15:07:15 CET 2013:DEBUG:Found credentials
Mon Nov 18 15:07:15 CET 2013:DEBUG:Attempt 2 to execute request
Mon Nov 18 15:07:15 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:07:15 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:07:15 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:07:15 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authentication scope: NTLM <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:07:15 CET 2013:DEBUG:Attempt 3 to execute request
Mon Nov 18 15:07:15 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:07:16 CET 2013:DEBUG:Receiving response: HTTP/1.1 200 OK
Mon Nov 18 15:07:16 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:07:16 CET 2013:INFO:Got response for [BasicHttpBinding_IS3GService.InfoSolutionsSS42:InfoSolutionsSS4] in 1967ms (1314 bytes)
As a start here are the failed and successful call to a web service. The interesting part is that in 4.6.0 soapUI correctly recognizes the authentication mechanism, while it doesn't do this in 4.6.1.. Please see below.
<b>soapUI 4.6.1 (failed call)</b>
Mon Nov 18 15:03:45 CET 2013:DEBUG:Loaded Definition: ok
Mon Nov 18 15:03:52 CET 2013:DEBUG:Attempt 1 to execute request
Mon Nov 18 15:03:52 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:03:54 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:03:54 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:03:54 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:03:54 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:03:54 CET 2013:DEBUG:Authentication scope: NEGOTIATE <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:03:54 CET 2013:INFO:xxxxxxxxxxxxx.com:8080 requires authentication with the realm 'null'
Mon Nov 18 15:03:54 CET 2013:DEBUG:Found credentials
Mon Nov 18 15:03:55 CET 2013:DEBUG:Attempt 2 to execute request
Mon Nov 18 15:03:55 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:03:55 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:03:55 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:03:55 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:03:55 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:03:55 CET 2013:DEBUG:Authentication scope: NEGOTIATE <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:03:55 CET 2013:DEBUG:Authentication failed
Mon Nov 18 15:03:55 CET 2013:INFO:Got response for [BasicHttpBinding_IS3GService.InfoSolutionsSS42:InfoSolutionsSS4] in 3166ms (0 bytes)
Mon Nov 18 15:04:26 CET 2013:DEBUG:Connection closed
<b>soapUI 4.6.0 (successfull call)</b>
Mon Nov 18 15:07:14 CET 2013:DEBUG:Attempt 1 to execute request
Mon Nov 18 15:07:14 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:07:15 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:07:15 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:07:15 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authentication scope: NTLM <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:07:15 CET 2013:INFO:xxxxxxxxxxxxx.com:8080 requires Windows authentication
Mon Nov 18 15:07:15 CET 2013:DEBUG:Found credentials
Mon Nov 18 15:07:15 CET 2013:DEBUG:Attempt 2 to execute request
Mon Nov 18 15:07:15 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:07:15 CET 2013:DEBUG:Receiving response: HTTP/1.1 401 Unauthorized
Mon Nov 18 15:07:15 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:07:15 CET 2013:DEBUG:Target requested authentication
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authorization challenge processed
Mon Nov 18 15:07:15 CET 2013:DEBUG:Authentication scope: NTLM <any realm>@xxxxxxxxxxxxx.com:8080
Mon Nov 18 15:07:15 CET 2013:DEBUG:Attempt 3 to execute request
Mon Nov 18 15:07:15 CET 2013:DEBUG:Sending request: POST /appStargate/ServiceS3G.svc HTTP/1.1
Mon Nov 18 15:07:16 CET 2013:DEBUG:Receiving response: HTTP/1.1 200 OK
Mon Nov 18 15:07:16 CET 2013:DEBUG:Connection can be kept alive indefinitely
Mon Nov 18 15:07:16 CET 2013:INFO:Got response for [BasicHttpBinding_IS3GService.InfoSolutionsSS42:InfoSolutionsSS4] in 1967ms (1314 bytes)
