Bugs item #1281867, was opened at 2005-09-05 04:27
Message generated for change (Comment added) made by notbremse1
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1281867&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: http
Group: wrong behaviour
Status: Open
Resolution: Later
Priority: 3
Submitted By: Randy (notbremse1)
Assigned to: Daniel Stenberg (bagder)
Summary: SSPI and system account

Initial Comment:
Hi,

I've written a script to download some files via http
using curl and using sspi for authentication. This
works great as long as it is run under the security
context of a user.

However, when run under the system account context
(i.e. a group policy startup script), it no longer
seems authenticate properly.

Here is an excerpt from the IIS log.

curl --ntlm -u : <url> (run under user context)
_______________________________________
03:58:24 172.16.1.170 DOMAIN\RandyT W3SVC1 GET
/MS+Office+2000+wSR1/LICENSE.TXT 200 0 HTTP/1.1 6nzq541

curl --ntlm -u : <url> (run under system context)
_______________________________________
04:00:15 172.16.3.19 - W3SVC1 GET
/MS+Office+2000+wSR1/LICENSE.TXT 401 5 HTTP/1.1 6nzq541

Run under system account context with scripted Internet
Explorer or winhttp 5.1
____________________________________________________
04:00:15 172.16.3.19 DOMAIN\RTTESTSYSTEM$ W3SVC1 GET
/MS+Office+2000+wSR1/LICENSE.TXT 200 0 HTTP/1.1 6nzq541

----------------------------------------------------------------------

>Comment By: Randy (notbremse1)
Date: 2005-09-16 06:55

Message:
Logged In: YES
user_id=1339800

Thanks for getting back to me. We've changed our project to
use the user context so no big deal.

Wish I could help, but I'm not quite there yet. Good luck!

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-09-14 14:56

Message:
Logged In: YES
user_id=1110

Okey, but I don't know one bit about how those things are
done as I'm not developing on windows myself. A call on the
libcurl mailing list gave nothing.

Don't expect this to be changed anytime soon unless you can
help out!

----------------------------------------------------------------------

Comment By: Randy (notbremse1)
Date: 2005-09-07 21:51

Message:
Logged In: YES
user_id=1339800

Sorry for the delay getting back to you.

I believe it should use the active directory domain computer
account.

The DOMAIN\RTTESTSYSTEM$ user that is used by
Internet Explorer in the same context is the computer
account in active directory for the system I was testing on.

-Randy

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-09-05 08:20

Message:
Logged In: YES
user_id=1110

So what is it supposed to do under "system context" ? I
thought the point would be that it gets the user + password
from the current user, and if there's no user what should it
do/use ?

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1281867&group_id=976
_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-tracker
Received on 2005-09-16