Welcome to Intel® Software Network Quick Login | Join | Help |
Search in Intel® Software Network Forums
in Go

This page is protected. by Digest Access Authentication, which is not supported by your browser

Last post 05-16-2008, 11:46 PM by MAD\ysainthi. 13 replies.
Sort Posts: Previous Next
 05-05-2008, 9:54 PM 30254160  

This page is protected. by Digest Access Authentication, which is not supported by your browser

Hello,

I try to work with AMT and I have problem. When I work by browser, AMT work as ok(http://myIP:16992), but when I work by other program (rdk,Intel AMT developer Tool Kit) that I got error "This page is protected. by Digest Access Authentication, which is not supported by your browser.

--------------------------------------------

POST /NetworkAdministrationService HTTP/1.0

Content-Type: text/xml; charset=utf-8

Accept: application/soap+xml, application/dime, multipart/related, text/*

User-Agent: Axis/1.3

Host: 172.31.48.117:16992

Cache-Control: no-cache

Pragma: no-cache

SOAPAction: "http://schemas.intel.com/platform/client/NetworkAdministration/2004/01/GetHostName"

Content-Length: 354

Authorization: Basic YWRtaW46QWRtaU4xMjM7

 

<?xml version="1.0" encoding="UTF-8"?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="'>http://schemas.intel.com/platform/client/NetworkAdministration/2004/01"/></soapenv:Body></soapenv:Envelope>

----------------------------------------------------

HTTP/1.1 403 Forbidden

Content-Type: text/html

Server: Intel(R) Active Management Technology 3.0.1

 

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" >
<html><head><link rel=stylesheet href=styles.css>
<title>Intel&reg; Active Management Technology </title>
</head>
<body leftmargin=0 rightmargin=0  topmargin=0>
<table border=0 cellpadding=0 cellspacing=0 width=100% height=69 background="/run.gif">
<tr> <td valign=top>
<img src="/logo.gif" align=right><br />
<font size=4 color=white><b>&nbsp;Intel<font class=r><sup>&reg;</font></sup>Active Management
 Technology <br />
</table>
<br />
<h2 class=warn>Protected page</h2>

This page is protected.
 by Digest Access Authentication, which is not supported by your browser</body></html>

----------------------------------------------

Please, help me.

Gennadiy.


Gennadiy Nayda
 
 05-05-2008, 11:08 PM 30254161 in reply to 30254160  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hello Gennadiy!

according to the trace you attached, your application is trying to authenticate the admin user using the HTTP Basic Authentication which is not supported by AMT.

You succeed to getthe WebUI because the browser you use has a support for the HTTP Digest Authentication. However is really weird symptom since the DTK also support this authentication. could you please post more details about your environment? what OS? what application and version?

Also is it preveting your application to run or did you catch this trace in the middle of a SOAP transaction? it would be interresting to look atthe "Authorization" field return by AMT when getting the error (this field is not present inthen HTTP header of the reponse in your post...)

does that make sense?

Dan.

 
 05-06-2008, 12:51 AM 30254164 in reply to 30254161  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hello Dan,

I try to access to AMT (motherboard is DQ35MP) by Intel AMT Director(Intel AMT Developer Tool Kit version is 0.51). OS(AMT) is Linux and OS(Intel AMT Developer Tool Kit) is Windows XP. Intel AMT Director found AMT computer. IP address is 172.31.48.117. I set login(admin) and password(AdmiN123;) and pressed button connect. Below is trace "Authorization".

----------------------------------------------------------

POST /SecurityAdministrationService HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.1433)

Content-Type: text/xml; charset=utf-8

SOAPAction: "http://schemas.intel.com/platform/client/SecurityAdministration/2004/01/GetCoreVersion"

Host: 172.31.48.117:16992

Content-Length: 344

Expect: 100-continue

Connection: Keep-Alive

<?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <soap:Body><GetCoreVersion xmlns="http://schemas.intel.com/platform/client/SecurityAdministration/2004/01" /></soap:Body></soap:Envelope>

----------------------------------------------------------------------

HTTP/1.1 401 Unauthorized

WWW-Authenticate: Digest realm="Intel(R) AMT (ID:2E736473-EF63-DC11-BFFD-000EA68F75BC)", nonce="51002a43a4a08ee4a8ab472862ec5732", qop="auth"

Content-Type: text/html

Transfer-Encoding: chunked

Server: Intel(R) Active Management Technology 3.0.1

Connection: close

2d8

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" >
<html><head><link rel=stylesheet href=styles.css>
<title>Intel&reg; Active Management Technology </title>
</head>
<body leftmargin=0 rightmargin=0  topmargin=0>
<table border=0 cellpadding=0 cellspacing=0 width=100% height=69 background="/run.gif">
<tr> <td valign=top>
<img src="/logo.gif" align=right><br />
<font size=4 color=white><b>&nbsp;Intel<font class=r><sup>&reg;</font></sup>Active Management
 Technology <br />
</table>
<br />
<h2 class=warn>Log on failed. Incorrect user name or password, or user account temporarily locked.</h2>

<p>
<form METHOD="GET" action="index.htm"><h2><input type=submit value="Try again">
</h2></form>
<p>

</body>
</html>

0

------------------------------------------------------------------------

Login and password are correctly.

Gennadiy.

 

 


Gennadiy Nayda
 
 05-06-2008, 9:58 PM 30254250 in reply to 30254164  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi,

We are working on this. Will get back to you soon.

Thanks,

Sree

 
 05-07-2008, 1:42 PM 30254347 in reply to 30254160  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

ok let me try again :)

First of all, let's start with HTTP Authentication process recap, so we could better understand the trace you have posted. A correct flow to perform an HTTP Authentication should be as follow:

  1. the remote client send a HTTP request to the server without including any authentication information in the HTTP header
  2. the server will respond with an error and send the appropriate HTTP Authentication challenge to be used - this is identified by the WWW-Authentcate field in the HTTP Header of the response (in our case it should be Digest)
  3. then the remote client will resend the same HTTP request but including the correct challenge information in the "Authorization" field of the HTTP header

so here comes my confusion... did you capture a trace inthe middle of the transaction when you noticed the error? if this is the case, so there is probably no trouble except if you application failed totally to complete the reaming steps... is it the case? did the DTK display the error on the screen? I did not try the specific version you mentioned but previous versions are working perfectly.

could you try to describe the exact steps and observations? i'm surely missing something here ...

Dan

 
 05-13-2008, 3:16 AM 30254705 in reply to 30254347  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hello Dan

now I have strange situation- RDK works and AMT development tool kit does not work. Maybe I have installed AMT development tool kit  not correctly? When I run AMT Commander that I got error

13.05.2008 13:06:39
System.IndexOutOfRangeException: Index was outside the bounds of the array.
   at System.Windows.Forms.ImageList.ImageCollection.SetKeyName(Int32 index, String name)
   at IntelAmtCommander.MainForm.InitializeComponent()
   at IntelAmtCommander.MainForm..ctor(String[] args)
   at IntelAmtCommander.Program.Main(String[] args)

0.52

Gennadiy


Gennadiy Nayda
 
 05-13-2008, 9:39 PM 30254773 in reply to 30254705  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi,

I have a Weybridge system (AMT 3.0) and I am able to connect to it using AMT Commander 0.52. Did you try re-installing the DTK and try again?

Thanks,

Sree

 
 05-16-2008, 10:22 AM 30254944 in reply to 30254773  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi Sree

I re-installed DTK and  I have error again. Version of AMT Commander is 0.52

Thanks,


Gennadiy Nayda
 
 05-16-2008, 10:37 AM 30254945 in reply to 30254944  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi,

That is strange :( Let me double check a couple of things:

1. What is the OS installed on your Intel AMT 3.0 system? Have you turned off the firewall? Can you log on to this sytem form your remote system using Web UI?

2. Is your DTK installation successful? Are you seeing any error messages during the installation? If not, can you start the Commander without any issues? Can you search and find your AMT system using the Commander?

Thanks,

Sree

 
 05-16-2008, 11:02 AM 30254950 in reply to 30254945  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi Sree

1. OS is Windows XP, russian version. Firewall is off. I can log on to AMT remote system by Web UI.

2. DTK is installation successful. I was not seening any error messages during installation.

I found error!!!!. This error bound with localization.

1. I deleted file {AMT_folder}\ru\Intel AMT Commander.resources.dll

2. I copied file {AMT_folder}\he\Intel AMT Commander.resources.dll to {AMT_folder}\ru\

AMT Commander works !!!!

Thanks,


Gennadiy Nayda
 
 05-16-2008, 11:13 AM 30254952 in reply to 30254950  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi,

Glad to know that the issue has been solved.

Thanks,

Sree

 
 05-16-2008, 11:45 AM 30254954 in reply to 30254952  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi Sree

But I have problem with AMT Comander. I know that AMT computer has IP=172.31.48.117 and login/password are admin/AdmiN123;

1. I entered "172.31.48.117" in field "Start IP address" and "172.31.48.117" in field "End IP address"

2. I pressed button "Start"

3.AMT Commander  found computer - "172.31.48.117- Intel Active Management Technology 3.0.1"

4.  I added computer to Network (Network-172.31.48.117 / admin)

5. I entered to 172.31.48.117 / admin

6. I see panel Connection. IP/Hostname: 172.31.48.117 ; username: admin ; Password: ******; url: http://172.31.48.117:16992/

7. I press button Connect and connect did not work. I press link http://172.31.48.117:16992. Link works. I entered login and password and I see that all work.

Why AMT Commander can't do connection to 172.31.48.117?

RDK and http://172.31.48.117:16992 work correctly.

Thanks,

 


Gennadiy Nayda
 
 05-16-2008, 11:55 AM 30254955 in reply to 30254952  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi Sree

This is error log

--- 21:52:36:Event:172.31.48.117 changing state to Connecting
--- 21:52:36:Event:NetworkCredential HTTP Digest: admin, AdmiN123;
--- 21:52:36:Event:Service Setup: http://172.31.48.117:16992/SecurityAdministrationService
--- 21:52:36:CallAttempt:GetCoreVersion

--- 21:52:46:CallWarning:GetCoreVersion
--- 21:52:56:CallFailed:GetCoreVersion
--- 21:52:56:Error:System.Net.WebException
System.Net.WebException: The operation has timed out
   at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
   at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at SecurityAdministrationService.Invoke(String methodName, Object[] parameters)
--- 21:53:06:Event:NetworkCredential HTTP Digest: admin, AdmiN123;
--- 21:53:06:Event:Service Setup: https://172.31.48.117:16993/SecurityAdministrationService
--- 21:53:06:CallAttempt:GetCoreVersion

--- 21:53:07:CallWarning:GetCoreVersion
--- 21:53:08:CallFailed:GetCoreVersion
--- 21:53:08:Error:System.Net.WebException
System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: Подключение не установлено, т.к. конечный компьютер отверг запрос на подключение 172.31.48.117:16993
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
   at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetRequestStream()
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at SecurityAdministrationService.Invoke(String methodName, Object[] parameters)
--- 21:53:09:Event:172.31.48.117 changing state to Disconnected

Thanks,

 


Gennadiy Nayda
 
 05-16-2008, 11:46 PM 30254976 in reply to 30254955  

Re: This page is protected. by Digest Access Authentication, which is not supported by your browser

Hi. One difference between Intel AMT Commander and other software maybe that Commander does not use the HTTP proxy set for your computer. If you have an HTTP proxy in Internet Exporer, depending on the type of proxy that is used, you may have problems with authentication. Commander will try to make a connection without using any proxy. Your proxy configuration would be the first thing I would look at.

I also suspect this since, Commander makes use of a direct TCP socket fo discovery, but uses the HTTP provider to make the AMT connection. Something is not well with the HTTP provider... can you try using a different computer?

I am sorry about the language issue, I will release a new DTK soon that will fix the problems with russian. You can also remove the russian ressource .DLL and Commander will use the default english strings instead.

Ylian (Intel AMT Blog)


Ylian Saint-Hilaire
Senior Lead Developer
Intel Corporation
 
View as RSS news feed in XML

Shortcuts


Tags For This Post

...

Community Tags

...