[Zope] IE Auth failures, NS works fine

[Ingo Assenmacher]

Hi.
 I think it is definitly a GUF Problem (raising unauthorised).
I looked up the Zope-Response when trying to access a resource that is protected by GUF authorization:
(Z2.log)

v.b.n.m - - [08/May/2000:23:55:47 +0200] "GET /x/y/ HTTP/1.1" 500 2249 "" "Mozilla/4.0 (compati
ble; MSIE 5.0; Windows 98; DigExt)"

See the Response Code in the HTTP-Header. It is '500', which, according to the specs at www.w3c.org is:

10.5.1 500 Internal Server Error 
The server encountered an unexpected condition which prevented it from fulfilling the request. 

(see:
http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.5.1
)

BUT: The response size is about 2249 bytes. That is most probably the login-form. Netscape does show this (so does IE3/4).
The next request does contain necessary authorization information so the unauthorised is no longer raised.
You can, alternatively provide username and authentication with:

/x/y?_gufauth_name=name&_gufauth_password=pwd

which does work with IE5 also.

I will dig into the GUF code tomorrow.

Regards, Ingo.

P.S.: I do not know if this if avoidable by simply adjust IE settings.

> Under Internet Options, Security I run under the Internet web content
> zone.
> Clicking on the Custom Level button I have User Authentication, Logon,
> Automatic Logon only in Intranet Zone set, I also have all the Scripting
> options enabled,Userdata persistence enabled, submit nonencrypted form
> data
> enabled,software channel permissions at medium safety, navigate sub-frames
> across different domains enabled, launching programs in an IFRAME enabled,
> installation of desktop items enabled, drag and drop enabled, access data
> sources across domains disabled, cookies enabled (both options). I can't
> see anything else there that may be relevant

> I'm accessing this via an NT-based proxy server called WinGate which
> clearly causes no problems.

> Something at the back of my mind is nagging - to do with the encryption of
> passwords in NT (introduced in one of the service packs). I know this can
> cause issues with people running Samba on Linux and there is a script
> which
> you can run (supplied with Linux somewhere) which patches the Windows
> registry to turn off encryption. I have run this script myself.  Might it
> be something to do with this ??

> HTH

> Richard


> At 07:22 08/05/00 -0400, you wrote:
>>That would be great if you could pass on the IE settings. I don't know
>>anything about IE and the users seem to know even less. There must be
>>some header somewhere that IE5 just doesn't like but where it is coming
>>from is a mystery yet. Knowing that I have an IE setup that should work
>>will help greatly in traking this down.
>>
>>thanks
>>jim
>>
>>Richard Moon wrote:
>> >
>> > I'm running Zope 2.1.4 with GUF using Zserver on RedHat 6.1 and I have
>> > had
>> > no trouble using IE5 on NT4 workstation. Does this point to the Apache
>> > to
>> > Zope connection being the problem - is the authorisation being passed
>> > through correctly ? Have you tried it with Zserver to see if it works
>> > in
>> > that mode ? I'll happily pass on my IE5 settings etc.
>> >
>> > Richard
>> >


> Richard Moon
> richard@dcs.co.uk


> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )