Forum Discussion

mihaialbert's avatar
mihaialbert
10 years ago

Kerberos Authentication

Hi. I'm trying to use SoapUI 5.0.0 to execute a request against a web service using SPNEGO/Kerberos authentication. The machine running it is an Active Directory joined Windows 7 client. However I alw...
mchong's avatar
mchong
New Contributor

Hi,

I am trying to test the "SPNEGO/kerberos" authorization from soapUI 5.1.3 with "Authenticate Preemptively" being set in the global HTTP settings.

 

soapui capture.JPG 

 

Upon testing, however, no authorization header seemed to be sent to the server according to the http log below. 

 

Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "POST /IHIS HTTP/1.1[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Accept-Encoding: gzip,deflate[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Content-Type: text/xml;charset=UTF-8[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "SOAPAction: "http://warehouse.acme.com/ws/listProducts"[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Content-Length: 282[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Host: explore.apim.ca:8080[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Connection: Keep-Alive[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "User-Agent: Apache-HttpClient/4.1.1 (java 1.5)[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ws="http://warehouse.acme.com/ws">[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <soapenv:Header/>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <soapenv:Body>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <ws:listProducts>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <ws:delay>1</ws:delay>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " </ws:listProducts>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " </soapenv:Body>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "</soapenv:Envelope>"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "HTTP/1.1 401 Unauthorized[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Server: Apache-Coyote/1.1[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "WWW-Authenticate: Negotiate[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "L7-Policy-URL: http://explore.apim.ca:8080/ssg/policy/disco?serviceoid=4c0fe71b6a3370793a6a38b0f454ae9b[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Content-Length: 23[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Date: Sun, 21 Jun 2015 15:52:17 GMT[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Authentication Required"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "POST /IHIS HTTP/1.1[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Accept-Encoding: gzip,deflate[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Content-Type: text/xml;charset=UTF-8[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "SOAPAction: "http://warehouse.acme.com/ws/listProducts"[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Content-Length: 282[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Host: explore.apim.ca:8080[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "Connection: Keep-Alive[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "User-Agent: Apache-HttpClient/4.1.1 (java 1.5)[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ws="http://warehouse.acme.com/ws">[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <soapenv:Header/>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <soapenv:Body>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <ws:listProducts>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " <ws:delay>1</ws:delay>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " </ws:listProducts>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> " </soapenv:Body>[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:>> "</soapenv:Envelope>"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "HTTP/1.1 401 Unauthorized[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Server: Apache-Coyote/1.1[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "WWW-Authenticate: Negotiate[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "L7-Policy-URL: http://explore.apim.ca:8080/ssg/policy/disco?serviceoid=4c0fe71b6a3370793a6a38b0f454ae9b[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Content-Length: 23[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Date: Sun, 21 Jun 2015 15:52:17 GMT[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "[\r][\n]"
Sun Jun 21 23:52:14 SGT 2015:DEBUG:<< "Authentication Required"

 

I've also done the recommendations as specified in http://www.soapui.org/soap-and-wsdl/spnego/kerberos-authentication.html to resolve this issue but these are not working also. Is this a known bug in soapUI 5.1.3?

 

mschwarz's avatar
mschwarz
New Contributor
8 years ago

Hi,

 

it seems like I have exactly the same issue. Has this ever been resolved?

 

Best regards,

Matthias

    • mschwarz's avatar
      mschwarz
      New Contributor
      8 years ago

      Hi,

       

      thanks for the response! I've tried with version 5.3.0. With the basic steps I'm running into the same issue as described above, with the advanced configuration which involves a JAAS config and a keytab file it works fine. I guess that's the way to go then.

       

      Best regards,

      Matthias