Newsgroups : Borland : borland.public.delphi.internet.winsock : 2006 Dec : Re: Indy and NTLM

www.cryer.info
Managed Newsgroup Archive

Re: Indy and NTLM

Subject:Re: Indy and NTLM
Posted by:"Remy Lebeau (TeamB)" (no.spam@no.spam.com)
Date:Tue, 19 Dec 2006 11:23:51

<markus.alexander@gmx.at> wrote in message
news:1166532409.586582.163780@a3g2000cwd.googlegroups.com...

>       4 0.000846    192.168.1.73          192.168.1.20          HTTP
>  GET / HTTP/1.1
>       5 0.001631    192.168.1.20          192.168.1.73          TCP
>  [TCP segment of a reassembled PDU]
>       6 0.001664    192.168.1.20          192.168.1.73          HTTP
>  HTTP/1.1 401 Unauthorized (text/html)

Please show all of the HTTP headers.  My guess is that a keep-alive is not
being allowed.

When the 401 is received, the request/response pair has finished, so the
connection may be dropped at this time by either the server or the client.
In the case of TIdHTTP, it will not drop the connection at this point if you
have the hoInProcessAuth flag set in the Options property, or are using the
OnAuthorization event.  When performing the next step of the authorization,
TIdHTTP will not disconnect the socket as the URL has not changed.  But
there is no guarantee that the server hasn't disconnected the socket on its
end.

>      15 0.016380    192.168.1.73          192.168.1.20          HTTP
>  GET / HTTP/1.1, NTLMSSP_NEGOTIATE
>      16 0.017057    192.168.1.20          192.168.1.73          TCP
>  [TCP segment of a reassembled PDU]
>      17 0.017104    192.168.1.20          192.168.1.73          HTTP
>  HTTP/1.1 401 Unauthorized, NTLMSSP_CHALLENGE (text/html)
>      18 0.017130    192.168.1.73          192.168.1.20          TCP

Same thing here.

> And now the same request using IE:

Since you have not shown the actual HTTP data, there is no way to compare
what Indy is sending versus what IE is sending.


Gambit

Replies:

none

In response to:

www.cryer.info
Managed Newsgroup Archive