On Thu, 4 Nov 2004, David Byron wrote:

> I've tried to get the server to only allow NTLM, but I can't seem to
> swing it. I hope to get some help tomorrow (Friday).

For some reason, I got NTLM in my last test. Information below.

> I'll see what I can put together.

I got ethereal to capture everything. At 5MB, I'm pretty sure I
shouldn't send it to the list. I should probably run the capture on a
smaller file...tomorrow.

If you want, I can send the full file in private email...Let me know.

-DB

POST /curltest-auth/upload.asp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-excel, application/vnd.ms-powerpoint,
application/msword, application/x-shockwave-flash, */*
Accept-Language: en-us
Content-Type: multipart/form-data;
boundary=---------------------------7d41ea16470732
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR
1.0.3705)
Host: myhost:myport
Content-Length: 2204653
Connection: Keep-Alive
Cache-Control: no-cache

HTTP/1.1 401 Access Denied
Server: Microsoft-IIS/5.0
Date: Fri, 05 Nov 2004 07:03:46 GMT
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Connection: close
Content-Length: 4431
Content-Type: text/html

POST /curltest-auth/upload.asp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-excel, application/vnd.ms-powerpoint,
application/msword, application/x-shockwave-flash, */*
Accept-Language: en-us
Content-Type: multipart/form-data;
boundary=---------------------------7d41ea16470732
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR
1.0.3705)
Host: myhost:myport
Authorization: NTLM TlRMTVNTUAABAAAAB4IIoAAAAAAAAAAAAAAAAAAAAAA=
Connection: Keep-Alive
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 401 Access Denied
Server: Microsoft-IIS/5.0
Date: Fri, 05 Nov 2004 07:03:52 GMT
WWW-Authenticate: NTLM
TlRMTVNTUAACAAAAEAAQADgAAAAFgomiYCQPKrFxVhAAAAAAAAAAALoAugBIAAAABQCTCAAA
AA9FAFgAVABFAFIATgBBAEwAAgAQAEUAWABUAEUAUgBOAEEATAABABwARQBEAC0ARQBDAEMA
SQBJAFMAMAAxAEQARQBWAAQALgBlAHgAdABlAHIAbgBhAGwALgBlAHYAZQByAGQAcgBlAGEA
bQAuAGMAbwByAHAAAwBMAGUAZAAtAGUAYwBjAGkAaQBzADAAMQBkAGUAdgAuAGUAeAB0AGUA
cgBuAGEAbAAuAGUAdgBlAHIAZAByAGUAYQBtAC4AYwBvAHIAcAAAAAAA
Content-Length: 4033
Content-Type: text/htm

POST /curltest-auth/upload.asp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-excel, application/vnd.ms-powerpoint,
application/msword, application/x-shockwave-flash, */*
Accept-Language: en-us
Content-Type: multipart/form-data;
boundary=---------------------------7d41ea16470732
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR
1.0.3705)
Host: myhost:myport
Authorization: NTLM
TlRMTVNTUAADAAAAGAAYAGoAAAAYABgAggAAABIAEgBAAAAADAAMAFIAAAAMAAwAXgAAAAAA
AACaAAAABYKIoGUAdgBlAHIAZAByAGUAYQBtAGQAYgB5AHIAbwBuAEQAQgBZAFIATwBOABcC
Y8N2WA2PAAAAAAAAAAAAAAAAAAAAAK+IM9iZz5Mig2ynrJ+VQG4LZtrpwJ0RZg==
Connection: Keep-Alive
Cache-Control: no-cache
Content-Length: 2204653
HTTP/1.1 100 Continue
Server: Microsoft-IIS/5.0
Date: Fri, 05 Nov 2004 07:03:52 GMT
X-Powered-By: ASP.NET

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Fri, 05 Nov 2004 07:04:47 GMT
X-Powered-By: ASP.NET
UploadID: 47
Content-Length: 98
Content-Type: text/html
Set-Cookie: ASPSESSIONIDAQQSRSCC=OJLKDBNCPKBJJEOEOHKIOPJM; path=/
Cache-control: private
Received on 2004-11-05