Forum Discussion

changan's avatar
changan
Occasional Contributor
7 years ago

Testing WCF Webservice using Soap UI when Authorization is NTLM but security mode is Transport

 We are using WCF Webservices and it is exposed for Webservice Testing. We are using SoapUI opensource to test this.

I am capturing the soap request using Fiddler.

 

POST https://lb-go01.xxxxxxx.com:4432/xxxx/xxxxxx/xxxxx.svc/soap HTTP/1.1
Content-Type: text/xml; charset=utf-8
SOAPAction: "http://www.xxxx.com/xxxx/xxxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxx"
Accept-Encoding: gzip, deflate
Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAKQAAAA+......
Host: lb-go01.xxxxxxx.com:4432
Content-Length: 824
Expect: 100-continue

 


By seeing Authorization, I understand that it is using NTLM Authorization since it starts with TlR (Referring How to find if NTLM or Kerberos is used from WWW-Authenticate: Negotiate header)

 

 

I have Configured the username, password and Domain for NTLM Authorization in Soap UI.

NTLM Authorization sends the credentials in the Soap Header as given below:

 

<soapenv:Header><wsse:Security soapenv:mustUnderstand="1" xmlns:wsse ......
</soapenv:Header>


The server config file is:

<security mode="Transport">
     <transport clientCredentialType="Windows" />
</security>


ONLY Basic Authorization in soap ui sends Authorization as a Request Header. But server expects NTLMV2 where as SoapUI sends Authorization as Soap Header if it is NTLM.

How to over come this issue using SoapUI.

3 Replies