fixed NTLM test 67, added test 68 for bad NTLM name/password (c832b2db) · Commits · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP curl

tests/data/Makefile.am

+1 −1

Original line number	Diff line number	Diff line
		@@ -20,4 +20,4 @@ test130 test131 test132 test133 test134 test135 test403 test305 \
		test49 test50 test51 test52 test53 test54 test55 test56 \
		test500 test501 test502 test503 test504 test136 test57 test137 test138 \
		test58 test139 test140 test141 test59 test60 test61 test142 test143 test62 \
		test63 test64 test65 test66 test144 test145 test67
		test63 test64 test65 test66 test144 test145 test67 test68

tests/data/test67

+2 −4

Original line number	Diff line number	Diff line
		@@ -36,13 +36,11 @@ Server: Apache/1.3.27 (Darwin) PHP/4.1.2
		WWW-Authenticate: NTLM
		Content-Type: text/html; charset=iso-8859-1

		This is not the real page
		HTTP/1.1 401 Now gimme that second request of crap
		Server: Microsoft-IIS/5.0
		Content-Type: text/html; charset=iso-8859-1
		WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAgACADAAAAAGgoEAc51AYVDgyNcAAAAAAAAAAG4AbgAyAAAAQ0MCAAQAQwBDAAEAEgBFAEwASQBTAEEAQgBFAFQASAAEABgAYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAwAsAGUAbABpAHMAYQBiAGUAdABoAC4AYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAAAAAA==

		This is not the real page either!
		HTTP/1.1 200 Things are fine in server land
		Server: Microsoft-IIS/5.0
		Content-Type: text/html; charset=iso-8859-1
		@@ -82,14 +80,14 @@ Pragma: no-cache
		Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, /

		GET /67 HTTP/1.1
		Authorization: NTLM TlRMTVNTUAABAAAAA7IAAAUABQArAAAACwALACAAAABMSUxMQVNZU1RFUkhFTU1B
		Authorization: NTLM TlRMTVNTUAABAAAAA7IAAAQABAAkAAAABAAEACAAAABIQVhYQ1VSTA==
		User-Agent: curl/7.10.6-pre1 (i686-pc-linux-gnu) libcurl/7.10.6-pre1 OpenSSL/0.9.7a ipv6 zlib/1.1.3
		Host: 127.0.0.1:8999
		Pragma: no-cache
		Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, /

		GET /67 HTTP/1.1
		Authorization: NTLM TlRMTVNTUAADAAAAGAAYAHAAAAAYABgAiAAAAAoACgBAAAAAEAAQAEoAAAAWABYAWgAAAAAAAACgAAAAAYIAAEgARQBNAE0AQQB0AGUAcwB0AHUAcwBlAHIATABJAEwATABBAFMAWQBTAFQARQBSAFpkQwKRCZFMYkMKatVwZ5YQjH0KEq0sF6mFcheMuv8v+xeqphEO5V41xRd7R9deOQ==
		Authorization: NTLM TlRMTVNTUAADAAAAGAAYAGAAAAAYABgAeAAAAAgACABAAAAAEAAQAEgAAAAIAAgAWAAAAAAAAACQAAAAAYIAAEMAVQBSAEwAdABlAHMAdAB1AHMAZQByAEgAQQBYAFgAWmRDApEJkUyGOPS3DjvASModEeW/N/FBqYVyF4y6/y/7F6qmEQ7lXjXFF3tH1145
		User-Agent: curl/7.10.6-pre1 (i686-pc-linux-gnu) libcurl/7.10.6-pre1 OpenSSL/0.9.7a ipv6 zlib/1.1.3
		Host: 127.0.0.1:8999
		Pragma: no-cache

tests/data/test68

0 → 100644

+99 −0

Original line number	Diff line number	Diff line
		# Server-side
		<reply>
		<data>
		HTTP/1.1 401 Authorization Required
		Server: Apache/1.3.27 (Darwin) PHP/4.1.2
		WWW-Authenticate: NTLM
		Content-Type: text/html; charset=iso-8859-1

		This is not the real page
		</data>

		# This is supposed to be returned when the server gets a first
		# Authorization: NTLM line passed-in from the client
		<data1001>
		HTTP/1.1 401 Now gimme that second request of crap
		Server: Microsoft-IIS/5.0
		Content-Type: text/html; charset=iso-8859-1
		WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAgACADAAAAAGgoEAc51AYVDgyNcAAAAAAAAAAG4AbgAyAAAAQ0MCAAQAQwBDAAEAEgBFAEwASQBTAEEAQgBFAFQASAAEABgAYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAwAsAGUAbABpAHMAYQBiAGUAdABoAC4AYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAAAAAA==

		This is not the real page either!
		</data1001>

		# This is supposed to be returned when the server gets the second
		# Authorization: NTLM line passed-in from the client
		<data1002>
		HTTP/1.1 401 You give me wrong password
		Server: Microsoft-IIS/5.0
		WWW-Authenticate: NTLM
		Content-Type: text/html; charset=iso-8859-1

		Wrong password dude. Get it fixed and return.
		</data1002>

		<datacheck>
		HTTP/1.1 401 Authorization Required
		Server: Apache/1.3.27 (Darwin) PHP/4.1.2
		WWW-Authenticate: NTLM
		Content-Type: text/html; charset=iso-8859-1

		HTTP/1.1 401 Now gimme that second request of crap
		Server: Microsoft-IIS/5.0
		Content-Type: text/html; charset=iso-8859-1
		WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAgACADAAAAAGgoEAc51AYVDgyNcAAAAAAAAAAG4AbgAyAAAAQ0MCAAQAQwBDAAEAEgBFAEwASQBTAEEAQgBFAFQASAAEABgAYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAwAsAGUAbABpAHMAYQBiAGUAdABoAC4AYwBjAC4AaQBjAGUAZABlAHYALgBuAHUAAAAAAA==

		HTTP/1.1 401 You give me wrong password
		Server: Microsoft-IIS/5.0
		WWW-Authenticate: NTLM
		Content-Type: text/html; charset=iso-8859-1

		Wrong password dude. Get it fixed and return.
		</datacheck>

		</reply>

		# Client-side
		<client>
		# NTLM only works if SSL-support is present
		<features>
		SSL
		</features>
		<server>
		http
		</server>
		<name>
		HTTP with NTLM authorization and wrong password
		</name>
		<command>
		http://%HOSTIP:%HOSTPORT/68 -u testuser:testpass --ntlm
		</command>
		</test>

		# Verify data after the test has been "shot"
		<verify>
		<strip>
		^User-Agent:.*
		</strip>
		<protocol>
		GET /68 HTTP/1.1
		User-Agent: curl/7.10.6-pre1 (i686-pc-linux-gnu) libcurl/7.10.6-pre1 OpenSSL/0.9.7a ipv6 zlib/1.1.3
		Host: 127.0.0.1:8999
		Pragma: no-cache
		Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, /

		GET /68 HTTP/1.1
		Authorization: NTLM TlRMTVNTUAABAAAAA7IAAAQABAAkAAAABAAEACAAAABIQVhYQ1VSTA==
		User-Agent: curl/7.10.6-pre1 (i686-pc-linux-gnu) libcurl/7.10.6-pre1 OpenSSL/0.9.7a ipv6 zlib/1.1.3
		Host: 127.0.0.1:8999
		Pragma: no-cache
		Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, /

		GET /68 HTTP/1.1
		Authorization: NTLM TlRMTVNTUAADAAAAGAAYAGAAAAAYABgAeAAAAAgACABAAAAAEAAQAEgAAAAIAAgAWAAAAAAAAACQAAAAAYIAAEMAVQBSAEwAdABlAHMAdAB1AHMAZQByAEgAQQBYAFgAWmRDApEJkUyGOPS3DjvASModEeW/N/FBqYVyF4y6/y/7F6qmEQ7lXjXFF3tH1145
		User-Agent: curl/7.10.6-pre1 (i686-pc-linux-gnu) libcurl/7.10.6-pre1 OpenSSL/0.9.7a ipv6 zlib/1.1.3
		Host: 127.0.0.1:8999
		Pragma: no-cache
		Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, /

		</protocol>
		</verify>