Windows Challenge and Response Protocal

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Mark Nobles - 02 Sep 2003 07:24 GMT

There is a web page I need to be able to access for one of my classes.
According to my teacher, it is protected by the "Windows Challenge and
Response Protocal." Using Mozilla 1.4 for Win, others in the class have
had no trouble reading it. I have tried it with Mozilla 1.4 for Mac OS
X, and Moz 1.5ß, Camino, Firebird and Netscape 7.0. No challenge, I am
sent immediately to the "Not Authorized" page.

Using iCab set to identify itself as IE, I get the challenge, but the
server will not accept the response. Setting it to identify itself as
Moz gets the immediate "Not Authorized" with no challenge.

With OmniWeb, no matter how I set it to identify itself, I do not get
the challenge, but am immediately "Not Authorized".

But the important thing was that the Win users are able to use Mozilla
to get the page and I'm not. Is there some setting I am missing, or is
this capability missing from the Mac version? How can I use it or help
get it added?

Reply to this Message

Jerry Talkington - 02 Sep 2003 08:00 GMT

> There is a web page I need to be able to access for one of my classes.
> According to my teacher, it is protected by the "Windows Challenge and
> Response Protocal." Using Mozilla 1.4 for Win, others in the class have
> had no trouble reading it. I have tried it with Mozilla 1.4 for Mac OS
> X, and Moz 1.5?, Camino, Firebird and Netscape 7.0. No challenge, I am
> sent immediately to the "Not Authorized" page.

NTLM is currently only supported on Windows. Since it's basically
Windows authentication fudged to work over HTTP, it's not trivial to
implement on other platforms (it's actually easier to implement in a
server than in a client.)

Have you tried IE on the Mac? I'd actually be suprised if it worked,
but it might be worth a try.

> Using iCab set to identify itself as IE, I get the challenge, but the
> server will not accept the response. Setting it to identify itself as
> Moz gets the immediate "Not Authorized" with no challenge.
>
> With OmniWeb, no matter how I set it to identify itself, I do not get
> the challenge, but am immediately "Not Authorized".

It doesn't matter what the UA is set to, if the browser doesn't
understand the protocol that the server says to use, you just get
unauthorized.

> But the important thing was that the Win users are able to use Mozilla
> to get the page and I'm not. Is there some setting I am missing, or is
> this capability missing from the Mac version? How can I use it or help
> get it added?

You could write the client code ;) Actually, I'm not sure what the
legality of adding pure GPL code is with NPL, but the Samba folks have
already done the work on getting it working on other platforms.

Signature

GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762

Reply to this Message

Mark Nobles - 02 Sep 2003 08:45 GMT

> Have you tried IE on the Mac? I'd actually be suprised if it worked,
> but it might be worth a try.

Sorry, I thought I wrote that in my original message.

Yes, I did try IE on the Mac, and it worked. But it is such a security
hole I hate even having it on my disk.

Thanks for all the other good stuff. That's just about what I
suspected, in much more detail than I ever imagined.

Reply to this Message

Robert Accettura - 25 Jan 2004 23:23 GMT

Actually, NTLM is now implemented cross platform (1.6 and later):
http://www.mozilla.org/releases/mozilla1.6/README.html#new

>>There is a web page I need to be able to access for one of my classes.
>>According to my teacher, it is protected by the "Windows Challenge and
[quoted text clipped - 31 lines]
> legality of adding pure GPL code is with NPL, but the Samba folks have
> already done the work on getting it working on other platforms.

Reply to this Message

Robert Accettura - 25 Jan 2004 23:24 GMT

Actually, NTLM is now implemented cross platform (1.6 and later):
http://www.mozilla.org/releases/mozilla1.6/README.html#new

Reply to this Message

Mac Forum / Applications / Firefox / Mozilla / January 2004

Windows Challenge and Response Protocal