NTLM in SOAP headers
Hi everyone; trying to use SoapUI to help with some application security stuff as Burp Suite and other security proxies/DVSes do not support SOAP very well. Does anyone have any advice on how to set up NTLM authentication at the *header* level in SoapUI? (Without changing the service being called, of course.) Message level security seems to be the sticking point for many people over the years and I don't see any clear resolution at the usual locations. Thanks for any tips or walkthroughs.
Anybody else having issues with SoapUI 5.2.1 and NTLM?
So, it seems I can't use NTLM anymore inside of SoapUI. What I've done so far: Delete/Reinstall Updated Java to 1.8 and verified via env variable, and start up says it's using java version 1.8.0_111 Tried with Postman (works great) Tried in browser, no problems Tried with WCFStorm.Rest and Windows Authentication and it works. Made sure I'm running the app as "Run as Administrator" Created a new REST Project to make sure things are clean. Deleted the Authentication and reset. Double checked that my account wasn't locked out. (Ok, I'm reaching) I'm specifically getting 401.1 errors if that'd help. This was working at one point. The IIS Server is 10.0, running on Windows 10 Enterprise. if I start SoapUI from the command prompt, I see it starting up. Looking at the IIS log files, it looks like it's not passing my credentials in to be authenticated. I can see where I was using WcfStorm, and when I was just using Chrome. Both passed credentials in. So, anybody got any ideas of what I'm missing? Thanks, Nick
TESTING REST WEB API on IIS 7 with NTLM and SOAP 5.2.1
Hello , I have REST WEB API service hosted in IIS 7.0 and it works based on windows authentication. I could successfully test the API with SOAP UI 5.0.0 and NTLM authentication. But with the same settings SOAP UI 5.2.1 and SOAP UI 5.2.0 returns unauthorized error message. Could you please let me know if I need to change some settings? Authenticate Premptively is Unchecked. I tried with both Proxy Automatic and None. Thanks, Shambhu