test90 5.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184
  1. <testcase>
  2. <info>
  3. <keywords>
  4. HTTP
  5. HTTP GET
  6. HTTP NTLM auth
  7. --anyauth
  8. followlocation
  9. NTLM
  10. </keywords>
  11. </info>
  12. # Server-side
  13. <reply>
  14. <data>
  15. HTTP/1.1 401 Authorization Required swsclose
  16. Server: Apache/1.3.27 (Darwin) PHP/4.1.2
  17. WWW-Authenticate: Basic
  18. WWW-Authenticate: Wild-and-crazy
  19. WWW-Authenticate: NTLM
  20. Content-Type: text/html; charset=iso-8859-1
  21. Content-Length: 26
  22. This is not the real page
  23. </data>
  24. # This is supposed to be returned when the server gets a first
  25. # Authorization: NTLM line passed-in from the client
  26. <data1001>
  27. HTTP/1.1 401 Now gimme that second request of crap
  28. Server: Microsoft-IIS/5.0
  29. Content-Type: text/html; charset=iso-8859-1
  30. Content-Length: 34
  31. WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAgACADAAAACGggEAc51AYVDgyNcAAAAAAAAAAG4AbgAyAAAAQ0MCAAQAQwBDAAEAEgBFAEwASQBTAEEAQgBFAFQASAAEABgAYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAwAsAGUAbABpAHMAYQBiAGUAdABoAC4AYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAAAAAA==
  32. This is not the real page either!
  33. </data1001>
  34. # This is supposed to be returned when the server gets the second
  35. # Authorization: NTLM line passed-in from the client
  36. <data1002>
  37. HTTP/1.1 301 Things are fine in server land swsclose
  38. Server: Microsoft-IIS/5.0
  39. Connection: close
  40. Location: /you/%TESTNUMBER0010
  41. </data1002>
  42. # This is the first reply after the redirection
  43. <data10>
  44. HTTP/1.1 401 Authorization Required swsclose
  45. Server: Apache/1.3.27 (Darwin) PHP/4.1.2
  46. WWW-Authenticate: Basic
  47. WWW-Authenticate: Wild-and-crazy
  48. WWW-Authenticate: NTLM
  49. Content-Type: text/html; charset=iso-8859-1
  50. Content-Length: 26
  51. This is not the real page
  52. </data10>
  53. <data1011>
  54. HTTP/1.1 401 Now gimme that second round of crap
  55. Server: Microsoft-IIS/5.0
  56. Content-Type: text/html; charset=iso-8859-1
  57. Content-Length: 34
  58. WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAgACADAAAACGggEAc51AYVDgyNcAAAAAAAAAAG4AbgAyAAAAQ0MCAAQAQwBDAAEAEgBFAEwASQBTAEEAQgBFAFQASAAEABgAYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAwAsAGUAbABpAHMAYQBiAGUAdABoAC4AYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAAAAAA==
  59. This is not the real page either!
  60. </data1011>
  61. # This is supposed to be returned when the server gets the second
  62. # Authorization: NTLM line passed-in from the client
  63. <data1012>
  64. HTTP/1.1 200 Things are fine in server land swsclose
  65. Server: Microsoft-IIS/5.0
  66. Content-Type: text/html; charset=iso-8859-1
  67. Content-Length: 32
  68. Finally, this is the real page!
  69. </data1012>
  70. <datacheck>
  71. HTTP/1.1 401 Authorization Required swsclose
  72. Server: Apache/1.3.27 (Darwin) PHP/4.1.2
  73. WWW-Authenticate: Basic
  74. WWW-Authenticate: Wild-and-crazy
  75. WWW-Authenticate: NTLM
  76. Content-Type: text/html; charset=iso-8859-1
  77. Content-Length: 26
  78. HTTP/1.1 401 Now gimme that second request of crap
  79. Server: Microsoft-IIS/5.0
  80. Content-Type: text/html; charset=iso-8859-1
  81. Content-Length: 34
  82. WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAgACADAAAACGggEAc51AYVDgyNcAAAAAAAAAAG4AbgAyAAAAQ0MCAAQAQwBDAAEAEgBFAEwASQBTAEEAQgBFAFQASAAEABgAYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAwAsAGUAbABpAHMAYQBiAGUAdABoAC4AYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAAAAAA==
  83. HTTP/1.1 301 Things are fine in server land swsclose
  84. Server: Microsoft-IIS/5.0
  85. Connection: close
  86. Location: /you/%TESTNUMBER0010
  87. HTTP/1.1 401 Authorization Required swsclose
  88. Server: Apache/1.3.27 (Darwin) PHP/4.1.2
  89. WWW-Authenticate: Basic
  90. WWW-Authenticate: Wild-and-crazy
  91. WWW-Authenticate: NTLM
  92. Content-Type: text/html; charset=iso-8859-1
  93. Content-Length: 26
  94. HTTP/1.1 401 Now gimme that second round of crap
  95. Server: Microsoft-IIS/5.0
  96. Content-Type: text/html; charset=iso-8859-1
  97. Content-Length: 34
  98. WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAgACADAAAACGggEAc51AYVDgyNcAAAAAAAAAAG4AbgAyAAAAQ0MCAAQAQwBDAAEAEgBFAEwASQBTAEEAQgBFAFQASAAEABgAYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAwAsAGUAbABpAHMAYQBiAGUAdABoAC4AYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAAAAAA==
  99. HTTP/1.1 200 Things are fine in server land swsclose
  100. Server: Microsoft-IIS/5.0
  101. Content-Type: text/html; charset=iso-8859-1
  102. Content-Length: 32
  103. Finally, this is the real page!
  104. </datacheck>
  105. </reply>
  106. # Client-side
  107. <client>
  108. <features>
  109. NTLM
  110. SSL
  111. !SSPI
  112. </features>
  113. <server>
  114. http
  115. </server>
  116. <name>
  117. HTTP with NTLM via --anyauth, and then follow-location with NTLM again
  118. </name>
  119. <command>
  120. http://%HOSTIP:%HTTPPORT/%TESTNUMBER -u testuser:testpass --anyauth -L
  121. </command>
  122. </client>
  123. # Verify data after the test has been "shot"
  124. <verify>
  125. <protocol>
  126. GET /%TESTNUMBER HTTP/1.1
  127. Host: %HOSTIP:%HTTPPORT
  128. User-Agent: curl/%VERSION
  129. Accept: */*
  130. GET /%TESTNUMBER HTTP/1.1
  131. Host: %HOSTIP:%HTTPPORT
  132. Authorization: NTLM TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA=
  133. User-Agent: curl/%VERSION
  134. Accept: */*
  135. GET /%TESTNUMBER HTTP/1.1
  136. Host: %HOSTIP:%HTTPPORT
  137. Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAAAAAAABwAAAACAAIAHAAAAALAAsAeAAAAAAAAAAAAAAAhoIBAFpkQwKRCZFMhjj0tw47wEjKHRHlvzfxQamFcheMuv8v+xeqphEO5V41xRd7R9deOXRlc3R1c2VyV09SS1NUQVRJT04=
  138. User-Agent: curl/%VERSION
  139. Accept: */*
  140. GET /you/%TESTNUMBER0010 HTTP/1.1
  141. Host: %HOSTIP:%HTTPPORT
  142. User-Agent: curl/%VERSION
  143. Accept: */*
  144. GET /you/%TESTNUMBER0010 HTTP/1.1
  145. Host: %HOSTIP:%HTTPPORT
  146. Authorization: NTLM TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA=
  147. User-Agent: curl/%VERSION
  148. Accept: */*
  149. GET /you/%TESTNUMBER0010 HTTP/1.1
  150. Host: %HOSTIP:%HTTPPORT
  151. Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAAAAAAABwAAAACAAIAHAAAAALAAsAeAAAAAAAAAAAAAAAhoIBAFpkQwKRCZFMhjj0tw47wEjKHRHlvzfxQamFcheMuv8v+xeqphEO5V41xRd7R9deOXRlc3R1c2VyV09SS1NUQVRJT04=
  152. User-Agent: curl/%VERSION
  153. Accept: */*
  154. </protocol>
  155. </verify>
  156. </testcase>