-
naida_gv
-
-
-
Joined on 04-23-2008
-
Ukraine
-
Posts 9
-
-
|
This page is protected. by Digest Access Authentication, which is not supported by your browser
Hello,
I try to work with AMT and I have problem. When I work by browser, AMT work as ok(http://myIP:16992), but when I work by other program (rdk,Intel AMT developer Tool Kit) that I got error "This page is protected. by Digest Access Authentication, which is not supported by your browser.
--------------------------------------------
POST /NetworkAdministrationService HTTP/1.0
Content-Type: text/xml; charset=utf-8
Accept: application/soap+xml, application/dime, multipart/related, text/*
User-Agent: Axis/1.3
Host: 172.31.48.117:16992
Cache-Control: no-cache
Pragma: no-cache
SOAPAction: "http://schemas.intel.com/platform/client/NetworkAdministration/2004/01/GetHostName"
Content-Length: 354
Authorization: Basic YWRtaW46QWRtaU4xMjM7
<?xml version="1.0" encoding="UTF-8"?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="'>http://schemas.intel.com/platform/client/NetworkAdministration/2004/01"/></soapenv:Body></soapenv:Envelope>
----------------------------------------------------
HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Intel(R) Active Management Technology 3.0.1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" > <html><head><link rel=stylesheet href=styles.css> <title>Intel® Active Management Technology </title> </head> <body leftmargin=0 rightmargin=0 topmargin=0> <table border=0 cellpadding=0 cellspacing=0 width=100% height=69 background="/run.gif"> <tr> <td valign=top> <img src="/logo.gif" align=right><br /> <font size=4 color=white><b> Intel<font class=r><sup>®</font></sup>Active Management Technology <br /> </table> <br /> <h2 class=warn>Protected page</h2>
This page is protected. by Digest Access Authentication, which is not supported by your browser</body></html>
----------------------------------------------
Please, help me.
Gennadiy.
Gennadiy Nayda
|
|
| |
-
dalloun
-
-
-
Joined on 03-12-2008
-
Jerusalem
-
Posts 8
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hello Gennadiy!
according to the trace you attached, your application is trying to authenticate the admin user using the HTTP Basic Authentication which is not supported by AMT.
You succeed to getthe WebUI because the browser you use has a support for the HTTP Digest Authentication. However is really weird symptom since the DTK also support this authentication. could you please post more details about your environment? what OS? what application and version?
Also is it preveting your application to run or did you catch this trace in the middle of a SOAP transaction? it would be interresting to look atthe "Authorization" field return by AMT when getting the error (this field is not present inthen HTTP header of the reponse in your post...)
does that make sense?
Dan.
|
|
| |
-
naida_gv
-
-
-
Joined on 04-23-2008
-
Ukraine
-
Posts 9
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hello Dan,
I try to access to AMT (motherboard is DQ35MP) by Intel AMT Director(Intel AMT Developer Tool Kit version is 0.51). OS(AMT) is Linux and OS(Intel AMT Developer Tool Kit) is Windows XP. Intel AMT Director found AMT computer. IP address is 172.31.48.117. I set login(admin) and password(AdmiN123;) and pressed button connect. Below is trace "Authorization".
----------------------------------------------------------
POST /SecurityAdministrationService HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.1433)
Content-Type: text/xml; charset=utf-8
SOAPAction: "http://schemas.intel.com/platform/client/SecurityAdministration/2004/01/GetCoreVersion"
Host: 172.31.48.117:16992
Content-Length: 344
Expect: 100-continue
Connection: Keep-Alive
<?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <soap:Body><GetCoreVersion xmlns="http://schemas.intel.com/platform/client/SecurityAdministration/2004/01" /></soap:Body></soap:Envelope>
----------------------------------------------------------------------
HTTP/1.1 401 Unauthorized
WWW-Authenticate: Digest realm="Intel(R) AMT (ID:2E736473-EF63-DC11-BFFD-000EA68F75BC)", nonce="51002a43a4a08ee4a8ab472862ec5732", qop="auth"
Content-Type: text/html
Transfer-Encoding: chunked
Server: Intel(R) Active Management Technology 3.0.1
Connection: close
2d8
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" > <html><head><link rel=stylesheet href=styles.css> <title>Intel® Active Management Technology </title> </head> <body leftmargin=0 rightmargin=0 topmargin=0> <table border=0 cellpadding=0 cellspacing=0 width=100% height=69 background="/run.gif"> <tr> <td valign=top> <img src="/logo.gif" align=right><br /> <font size=4 color=white><b> Intel<font class=r><sup>®</font></sup>Active Management Technology <br /> </table> <br /> <h2 class=warn>Log on failed. Incorrect user name or password, or user account temporarily locked.</h2>
<p> <form METHOD="GET" action="index.htm"><h2><input type=submit value="Try again"> </h2></form> <p>
</body> </html>
0
------------------------------------------------------------------------
Login and password are correctly.
Gennadiy.
Gennadiy Nayda
|
|
| |
|
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi,
We are working on this. Will get back to you soon.
Thanks,
Sree
|
|
| |
-
dalloun
-
-
-
Joined on 03-12-2008
-
Jerusalem
-
Posts 8
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
ok let me try again :)
First of all, let's start with HTTP Authentication process recap, so we could better understand the trace you have posted. A correct flow to perform an HTTP Authentication should be as follow:
- the remote client send a HTTP request to the server without including any authentication information in the HTTP header
- the server will respond with an error and send the appropriate HTTP Authentication challenge to be used - this is identified by the WWW-Authentcate field in the HTTP Header of the response (in our case it should be Digest)
- then the remote client will resend the same HTTP request but including the correct challenge information in the "Authorization" field of the HTTP header
so here comes my confusion... did you capture a trace inthe middle of the transaction when you noticed the error? if this is the case, so there is probably no trouble except if you application failed totally to complete the reaming steps... is it the case? did the DTK display the error on the screen? I did not try the specific version you mentioned but previous versions are working perfectly.
could you try to describe the exact steps and observations? i'm surely missing something here ...
Dan
|
|
| |
-
naida_gv
-
-
-
Joined on 04-23-2008
-
Ukraine
-
Posts 9
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hello Dan
now I have strange situation- RDK works and AMT development tool kit does not work. Maybe I have installed AMT development tool kit not correctly? When I run AMT Commander that I got error
13.05.2008 13:06:39 System.IndexOutOfRangeException: Index was outside the bounds of the array. at System.Windows.Forms.ImageList.ImageCollection.SetKeyName(Int32 index, String name) at IntelAmtCommander.MainForm.InitializeComponent() at IntelAmtCommander.MainForm..ctor(String[] args) at IntelAmtCommander.Program.Main(String[] args)
0.52
Gennadiy
Gennadiy Nayda
|
|
| |
|
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi,
I have a Weybridge system (AMT 3.0) and I am able to connect to it using AMT Commander 0.52. Did you try re-installing the DTK and try again?
Thanks,
Sree
|
|
| |
-
naida_gv
-
-
-
Joined on 04-23-2008
-
Ukraine
-
Posts 9
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi Sree
I re-installed DTK and I have error again. Version of AMT Commander is 0.52
Thanks,
Gennadiy Nayda
|
|
| |
|
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi,
That is strange :( Let me double check a couple of things:
1. What is the OS installed on your Intel AMT 3.0 system? Have you turned off the firewall? Can you log on to this sytem form your remote system using Web UI?
2. Is your DTK installation successful? Are you seeing any error messages during the installation? If not, can you start the Commander without any issues? Can you search and find your AMT system using the Commander?
Thanks,
Sree
|
|
| |
-
naida_gv
-
-
-
Joined on 04-23-2008
-
Ukraine
-
Posts 9
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi Sree
1. OS is Windows XP, russian version. Firewall is off. I can log on to AMT remote system by Web UI.
2. DTK is installation successful. I was not seening any error messages during installation.
I found error!!!!. This error bound with localization.
1. I deleted file {AMT_folder}\ru\Intel AMT Commander.resources.dll
2. I copied file {AMT_folder}\he\Intel AMT Commander.resources.dll to {AMT_folder}\ru\
AMT Commander works !!!!
Thanks,
Gennadiy Nayda
|
|
| |
|
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi,
Glad to know that the issue has been solved.
Thanks,
Sree
|
|
| |
-
naida_gv
-
-
-
Joined on 04-23-2008
-
Ukraine
-
Posts 9
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi Sree
But I have problem with AMT Comander. I know that AMT computer has IP=172.31.48.117 and login/password are admin/AdmiN123;
1. I entered "172.31.48.117" in field "Start IP address" and "172.31.48.117" in field "End IP address"
2. I pressed button "Start"
3.AMT Commander found computer - "172.31.48.117- Intel Active Management Technology 3.0.1"
4. I added computer to Network (Network-172.31.48.117 / admin)
5. I entered to 172.31.48.117 / admin
6. I see panel Connection. IP/Hostname: 172.31.48.117 ; username: admin ; Password: ******; url: http://172.31.48.117:16992/
7. I press button Connect and connect did not work. I press link http://172.31.48.117:16992. Link works. I entered login and password and I see that all work.
Why AMT Commander can't do connection to 172.31.48.117?
RDK and http://172.31.48.117:16992 work correctly.
Thanks,
Gennadiy Nayda
|
|
| |
-
naida_gv
-
-
-
Joined on 04-23-2008
-
Ukraine
-
Posts 9
-
-
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi Sree
This is error log
--- 21:52:36:Event:172.31.48.117 changing state to Connecting --- 21:52:36:Event:NetworkCredential HTTP Digest: admin, AdmiN123; --- 21:52:36:Event:Service Setup: http://172.31.48.117:16992/SecurityAdministrationService --- 21:52:36:CallAttempt:GetCoreVersion
--- 21:52:46:CallWarning:GetCoreVersion --- 21:52:56:CallFailed:GetCoreVersion --- 21:52:56:Error:System.Net.WebException System.Net.WebException: The operation has timed out at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request) at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at SecurityAdministrationService.Invoke(String methodName, Object[] parameters) --- 21:53:06:Event:NetworkCredential HTTP Digest: admin, AdmiN123; --- 21:53:06:Event:Service Setup: https://172.31.48.117:16993/SecurityAdministrationService --- 21:53:06:CallAttempt:GetCoreVersion
--- 21:53:07:CallWarning:GetCoreVersion --- 21:53:08:CallFailed:GetCoreVersion --- 21:53:08:Error:System.Net.WebException System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: Подключение не установлено, т.к. конечный компьютер отверг запрос на подключение 172.31.48.117:16993 at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress) at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP) at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception) --- End of inner exception stack trace --- at System.Net.HttpWebRequest.GetRequestStream() at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at SecurityAdministrationService.Invoke(String methodName, Object[] parameters) --- 21:53:09:Event:172.31.48.117 changing state to Disconnected
Thanks,
Gennadiy Nayda
|
|
| |
|
|
Re: This page is protected. by Digest Access Authentication, which is not supported by your browser
Hi. One difference between Intel AMT Commander and other software maybe that Commander does not use the HTTP proxy set for your computer. If you have an HTTP proxy in Internet Exporer, depending on the type of proxy that is used, you may have problems with authentication. Commander will try to make a connection without using any proxy. Your proxy configuration would be the first thing I would look at.
I also suspect this since, Commander makes use of a direct TCP socket fo discovery, but uses the HTTP provider to make the AMT connection. Something is not well with the HTTP provider... can you try using a different computer?
I am sorry about the language issue, I will release a new DTK soon that will fix the problems with russian. You can also remove the russian ressource .DLL and Commander will use the default english strings instead.
Ylian (Intel AMT Blog)
Ylian Saint-Hilaire Senior Lead Developer Intel Corporation
|
|
| |