jmeter-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Philippe Mouawad <philippe.moua...@gmail.com>
Subject Re: NTLM Auth: Load test with multiple/different user logins
Date Mon, 23 Apr 2012 10:01:57 GMT
Hello,
Tested it on an intranet site.
Rare but still exists.

Regards
Philippe

On Sat, Apr 21, 2012 at 9:53 PM, Shmuel Krakower <shmulikk@gmail.com> wrote:

> Hi Philippe,
> Where did you check for this working on NTLM1 ?
> Is NTLM1 still being used anywhere?
>
> Regards,
> Shmuel.
> בתאריך 2012 4 18 23:57, מאת "sebb" <sebbaz@gmail.com>:
>
> > On 18 April 2012 18:29, Shmuel Krakower <shmulikk@gmail.com> wrote:
> > > Just to be clear on this, currently NTLM authentication is not
> supported
> > by
> > > JMeter?
> >
> > NTLM (v1) does work, as far as I know, with the Java and HC 3.1 samplers.
> >
> > NTLMv2 may perhaps work with the Java sampler when running on a Microsoft
> > host.
> > AIUI there was some NTLM support code included in Java, but only on
> > Windows implementations.
> >
> > > On Wed, Apr 18, 2012 at 4:46 PM, sebb <sebbaz@gmail.com> wrote:
> > >
> > >>  On 18 April 2012 09:59, iyerbalaji <balaji_iyer@mindtree.com> wrote:
> > >> > Hi,
> > >> > I am testing a web application.
> > >> >
> > >> > Application Description:
> > >> > • The application uses NTLM V2 authentication.
> > >> > • It’s hosted on IIS 7.5.
> > >> >
> > >> > Scenario :
> > >> > • On entering the URL,the application accepts the NTLM (domain)
> > >> credentials
> > >> > without prompting for credentials and authenticates the user i.e.
> the
> > >> user
> > >> > is not providing the credentials here.
> > >> > • I am able to capture the HTTP request using (JAVA) HTTP Sampler
> but
> > not
> > >> > with HTTPClient 3.1 or HTTPClient 4.
> > >> >
> > >> > 1st Method:
> > >> >
> > >> > Observations:
> > >> > • When the scenario is replayed it works properly but the only
> > challenge
> > >> > here is to provide user credentials.There is no way to provide
> > >> credentials.
> > >> > • It uses the same credentials with which the recording was done.
> > >> > • And Load test would require me to supply multiple/different
> > credentials
> > >> > • I have not used HTTP AUTH Manager so far.
> > >> > • Now, when HTTP Auth Manager is used in conjunction with (JAVA)
> HTTP
> > >> > Sampler,the credentials supplied in HTTP Authorization Manager has
> no
> > >> > effect. i.e. irrespective of the login credentials supplied in"HTTP
> > >> > Authorization Manager" it is logging with the user credentials with
> > which
> > >> > the recording was done.
> > >> >
> > >> > Note: The request sent does not contain NTLM Auth(challenge)
> specific
> > >> > headers under REQUEST Headers of each request.
> > >> >
> > >> > Ultimately,there is no way to provide different credentials with
> this
> > >> > approach.
> > >> >
> > >> > 2nd Method:
> > >> >
> > >> > Since,HTTP Client (3.1 or 4) does not capture the requests while
> > >> recording,I
> > >> > constructed the application requests manually using HTTP client (3.1
> > & 4)
> > >> > and supplied the credentials using HTTP Auth Manager.
> > >> >
> > >> > Observations:
> > >> > • Now,when replayed the script,the request sent contains NTLM
> > >> > Auth(challenge) specific headers under REQUEST Headers of each
> > request.
> > >> > • But the request fails with 401 error code [401 - Unauthorized:
> > Access
> > >> is
> > >> > denied due to invalid credentials].It does not authorize the user
> with
> > >> the
> > >> > credentials provided in HTTP Authorization Manager but it
> understands
> > >> NTLM
> > >> > challenge response.
> > >> >
> > >> > Challenges:
> > >> > • With Java HTTP Sampler i am not able to login with multiple
> > credentials
> > >> > even though the requests is sent successfully.It does not use the
> > >> > credentials provided in HTTP Auth Manager.
> > >> > • With HTTP Client sampler,the request fails with 401-Unauthorized
> > error
> > >> > code with the credentials provided in HTTP Auth Manager.
> > >> >
> > >> > Is there a way to send the requests successfully and also provide
> > >> different
> > >> > credentials to log in with either of the samplers?
> > >> >
> > >> > Appreciate your help in this regard.
> > >>
> > >> I don't think there's any way round this, sorry.
> > >>
> > >> ---------------------------------------------------------------------
> > >> To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
> > >> For additional commands, e-mail: user-help@jmeter.apache.org
> > >>
> > >>
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
> > For additional commands, e-mail: user-help@jmeter.apache.org
> >
> >
>



-- 
Cordialement.
Philippe Mouawad.

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message