Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Checking proxy authentication mechanism

Posted on 2010-09-24
5
Medium Priority
?
664 Views
Last Modified: 2012-06-21
Hello

We have Windows XP SP3 clients. Their IE is configured to use an auto.pac file which will determine if a website is internal or external. The PAC is located at http:\\server1\auto.pac.

If the server is external, there are HTTP proxies that the request will get sent to, let's name it Proxy1.

If I ran Wireshark on an XP machine, is this the result I should expect to see when attempting to browse an external site (www.google.com)

1.  DNS resolution for server1
2. Contact server1's IP
3. After reading the auto.pac and realising Google is externally hosted, a request for DNS resolution of Proxy1
3. Contact Proxy1's IP
4. Proxy1 sends authentication request
5. User returns details
6. Contact Proxy1's IP again with an HTTP GET

Also, how can I work out what authentication mechanism the Proxy1 device is using? I have used Wireshark and can see this:

"Proxy authenticate: NTML .. Proxy Authenticate: BASIC realm="proxy".."

So is it using NTLM or Basic?

I would like to know what sort of authentication mechanism these proxies use.

0
Comment
Question by:neil4933
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 57

Accepted Solution

by:
giltjr earned 2000 total points
ID: 33849520
It uses both.  If it does not get the appropriate user-id/password using NTML it will then prompt the user using basic.
0
 

Author Comment

by:neil4933
ID: 33860917
Hi

Thanks...

""Proxy authenticate: NTML .. Proxy Authenticate: BASIC realm="proxy".."

You're saying that the above means that either no username/password or an incorrect one was given by NTLM, so it's prompting for one in BASIC?
0
 
LVL 57

Expert Comment

by:giltjr
ID: 33861233
Yes.
0
 

Author Comment

by:neil4933
ID: 33861260
Surely if an incorrect username/password was given it should just deny access rather than asking for a new one in Basic?
0
 
LVL 57

Expert Comment

by:giltjr
ID: 33861998
No.  Typically with web servers you are given up to 3 chances to enter the correct name/password before you are denied.
0

Featured Post

Building an interactive eFuture classroom

Watch and learn how ATEN provided a total control system solution including seamless switching matrix switch, HDBaseT extenders, PDU, lighting control to build an interactive eFuture classroom.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Foreword In the years since this article was written, numerous hacking attacks have targeted password-protected web sites.  The storage of client passwords has become a subject of much discussion, some of it useful and some of it misguided.  Of cou…
Sometimes clients can lose connectivity with the Lotus Notes Domino Server, but there's not always an obvious answer as to why it happens.   Read this article to follow one of the first experiences I had with Lotus Notes on a client's machine, my…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question