Acknowledge Alert in RC5 🔗 link

Seems IE browsers are not allowed to acknowledge alerts.  When I fill in the fields and press the button, a web page is returned that says

Bad request!
Your browser (or proxy) sent a request that this server could not understand
If you think this is a server error, please contact the webmaster

Error 400

I am running apache 2.0.52 on Solaris and this is what the access log shows.  The firefox one underneath works.  Anyone have any ideas?  Seems like the username is not passed in the log???

IE on WinXP (all latest and greatest versions and patches)
128.230.4.95 - - [10/Mar/2005:11:32:48 -0500] "GET /hobbit-seccgi/bb-ack.sh?ACTION=Ack&DELAY=60&MESSAGE=testing+IE&NUMBER=804723&Send=Send HTTP/1.1" 400 963 "http://helpme.syr.edu/hobbit-seccgi/bb-ack.sh"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

Firefox
128.230.49.190 - ctbeers [10/Mar/2005:11:34:18 -0500] "GET /hobbit-seccgi/bb-ack.sh?ACTION=Ack&DELAY=60&MESSAGE=testing+firefox&NUMBER=804723&Send=Send HTTP/1.1" 200 1827 "http://helpme.syr.edu/hobbit-seccgi/bb-ack.sh"; "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.6) Gecko/20040206 Firefox/0.8"

-- 
Christopher T. Beers
Lead UNIX Architect - System Infrastructure Services (SIS)
Syracuse University | 250 Machinery Hall | Syracuse, NY XXXXX
(XXX) XXX-XXXX Office | (XXX) XXX-XXXX Fax | user-62463a5fbf92@xymon.invalid Pager

Hi,
 I'm running MS IE on XP-Home Edition and Apache 2.0.46 and here it works
 Regards
Lars
Hobbithobbyist

"Christopher T. Beers" <user-96213c045646@xymon.invalid> wrote:

Från: Christopher T. Beers[SMTP:user-96213c045646@xymon.invalid]
Skickat: den 10 mars 2005 17:38:08
Till: Hobbit
Kopia: Peter Jepson
Ämne: [hobbit] Acknowledge Alert in RC5
Automatiskt vidarebefordrat av en regel

Seems IE browsers are not allowed to acknowledge alerts. When I fill in the fields and press the button, a web page is returned that says

Bad request!
Your browser (or proxy) sent a request that this server could not understand
If you think this is a server error, please contact the webmaster

Error 400

I am running apache 2.0.52 on Solaris and this is what the access log shows. The firefox one underneath works. Anyone have any ideas? Seems like the username is not passed in the log???

IE on WinXP (all latest and greatest versions and patches)
128.230.4.95 - - [10/Mar/2005:11:32:48 -0500] "GET /hobbit-seccgi/bb-ack.sh?ACTION=Ack&DELAY=60&MESSAGE=testing+IE&NUMBER=804723&Send=Send HTTP/1.1" 400 963 "http://helpme.syr.edu/hobbit-seccgi/bb-ack.sh"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

Firefox
128.230.49.190 - ctbeers [10/Mar/2005:11:34:18 -0500] "GET /hobbit-seccgi/bb-ack.sh?ACTION=Ack&DELAY=60&MESSAGE=testing+firefox&NUMBER=804723&Send=Send HTTP/1.1" 200 1827 "http://helpme.syr.edu/hobbit-seccgi/bb-ack.sh"; "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.6) Gecko/20040206 Firefox/0.8"

-- 
Christopher T. Beers
Lead UNIX Architect - System Infrastructure Services (SIS)
Syracuse University | 250 Machinery Hall | Syracuse, NY XXXXX
(XXX) XXX-XXXX Office | (XXX) XXX-XXXX Fax | user-62463a5fbf92@xymon.invalid Pager

I'm not young enough to know everything.
-Oscar Wilde

On Thu, Mar 10, 2005 at 11:38:08AM -0500, Christopher T. Beers wrote:

I'm unable to reproduce this, and it seems it works OK for others as
well. The log snippet you included also shows that the request sent
from IE is identical to the one sent from Mozilla (at least as far as
the logged data is concerned).

Is it possible for you to run "snoop" to catch the IE request as sent
on the wire ? Something like 

   snoop -s 1514 -r -o ie-ack.snoop host 128.230.4.95 and tcp port 80

should do it (the IP is the IP of your client running IE).

Seems like the username is not passed in the log???

Maybe it's a security setting in IE that breaks it by not including
the authorization header ...


Henrik

Running IE6 (6.0.2900.2180.xpsp_sp2_rtm.040803-2158) at work with
Apache 2.0.52 and the ack's have been working.

-r


On Thu, 10 Mar 2005 11:38:08 -0500, Christopher T. Beers

<user-96213c045646@xymon.invalid> wrote:

Found it.  Fixed it.

It was because I have digest authentication on and MSIE does not abide by RFC's (not that anyone would have guessed that).  So if you run digest authentication see this site
<http://httpd.apache.org/docs-2.0/mod/mod_auth_digest.html#msie>;

I added this to the apache conf
BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On

But it seems like if Henrik wanted to change this to a POST command it would fix this as well.  But I got it to work.  It fixes my IMP implementation as well, so that was an added bonus.

-- 
Christopher T. Beers
Lead UNIX Architect - System Infrastructure Services (SIS)
Syracuse University | 250 Machinery Hall | Syracuse, NY XXXXX
(XXX) XXX-XXXX Office | (XXX) XXX-XXXX Fax | user-62463a5fbf92@xymon.invalid Pager