TS - http and 401

13 messages in this thread

list Tom Schmitt · Tue, 9 Mar 2010 15:32:07 -0700 ·

The Xymon server (4.3.0-0.beta2) is not a member of the Active Directory
domain

So when I try to access a special web page, I get:

Tue Mar 9 15:24:23 2010: OK

 
  http://xxxxxx.com/ - OK

 
HTTP/1.1 401 Access denied

Connection: close

Date: Tue, 09 Mar 2010 22:24:28 GMT

Server: Microsoft-IIS/6.0

WWW-Authenticate: NTLM

X-Powered-By: ASP.NET

MicrosoftSharePointTeamServices: 12.0.0.6307

Content-type: text/html

 
Seconds:     0.00

 
Is there a way to authenticate to the domain so that the actual web page
can be accessed?

 
Thanks,

 
Tom Schmitt

Senior IT Staff - R&D

Salt Lake City, UT  XXXXX

Phone (XXX) XXX-XXXX

Cell      (XXX) XXX-XXXX

eFax    (XXX) XXX-XXXX

user-9c1ae820b621@xymon.invalid

           \\\\||////

             \ ~  ~ /  

             | @  @ |   

--oOo---(_)---oOo--

list Josh Luthman · Tue, 9 Mar 2010 17:41:12 -0500 ·

Is it HTTP auth?  If so just add the login information to the URL it's testing.

▸ quoted from Tom Schmitt


On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

The Xymon server (4.3.0-0.beta2) is not a member of the Active Directory
domain

So when I try to access a special web page, I get:

Tue Mar 9 15:24:23 2010: OK


  http://xxxxxx.com/ - OK


HTTP/1.1 401 Access denied

Connection: close

Date: Tue, 09 Mar 2010 22:24:28 GMT

Server: Microsoft-IIS/6.0

WWW-Authenticate: NTLM

X-Powered-By: ASP.NET

MicrosoftSharePointTeamServices: 12.0.0.6307

Content-type: text/html


Seconds:     0.00


Is there a way to authenticate to the domain so that the actual web page
can be accessed?


Thanks,


Tom Schmitt

Senior IT Staff - R&D

Salt Lake City, UT  XXXXX

Phone (XXX) XXX-XXXX

Cell      (XXX) XXX-XXXX

eFax    (XXX) XXX-XXXX

user-9c1ae820b621@xymon.invalid

           \\\\||////

             \ ~  ~ /

             | @  @ |

--oOo---(_)---oOo--

--


Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

“Success is not final, failure is not fatal: it is the courage to
continue that counts.”
--- Winston Churchill

list Tom Schmitt · Tue, 9 Mar 2010 16:04:39 -0700 ·

Josh,
	Do you have an example?

▸ quoted from Josh Luthman


         Thanks,
         
         Tom Schmitt
         Senior IT Staff - R&D
         Salt Lake City, UT  XXXXX
         Phone (XXX) XXX-XXXX
         Cell      (XXX) XXX-XXXX
                 \\\\||////
                  \ ~  ~ /  
                  | @  @ |


    		 --oOo---(_)---oOo--

▸ quoted from Josh Luthman

-----Original Message-----
From: Josh Luthman [mailto:user-4c45a83f15cb@xymon.invalid] 
Sent: Tuesday, March 09, 2010 3:41 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] TS - http and 401

Is it HTTP auth?  If so just add the login information to the URL it's
testing.

On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

The Xymon server (4.3.0-0.beta2) is not a member of the Active

Directory

domain

So when I try to access a special web page, I get:

Tue Mar 9 15:24:23 2010: OK


  http://xxxxxx.com/ - OK


HTTP/1.1 401 Access denied

Connection: close

Date: Tue, 09 Mar 2010 22:24:28 GMT

Server: Microsoft-IIS/6.0

WWW-Authenticate: NTLM

X-Powered-By: ASP.NET

MicrosoftSharePointTeamServices: 12.0.0.6307

Content-type: text/html


Seconds:     0.00


Is there a way to authenticate to the domain so that the actual web
page
can be accessed?


Thanks,


Tom Schmitt

Senior IT Staff - R&D

Salt Lake City, UT  XXXXX

Phone (XXX) XXX-XXXX

Cell      (XXX) XXX-XXXX

eFax    (XXX) XXX-XXXX

user-9c1ae820b621@xymon.invalid

           \\\\||////

             \ ~  ~ /

             | @  @ |

--oOo---(_)---oOo--

-- 
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

"Success is not final, failure is not fatal: it is the courage to
continue that counts."
--- Winston Churchill

list Josh Luthman · Tue, 9 Mar 2010 18:40:32 -0500 ·

HTTP://user:user-c5ba135b9fdb@xymon.invalid/index.html

On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

Josh,
	Do you have an example?

         Thanks,

         Tom Schmitt
         Senior IT Staff - R&D
         Salt Lake City, UT  XXXXX
         Phone (XXX) XXX-XXXX
         Cell      (XXX) XXX-XXXX
                 \\\\||////
                  \ ~  ~ /
                  | @  @ |
    		 --oOo---(_)---oOo--

-----Original Message-----
From: Josh Luthman [mailto:user-4c45a83f15cb@xymon.invalid]
Sent: Tuesday, March 09, 2010 3:41 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] TS - http and 401

Is it HTTP auth?  If so just add the login information to the URL it's
testing.

On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

The Xymon server (4.3.0-0.beta2) is not a member of the Active

Directory

domain

So when I try to access a special web page, I get:

Tue Mar 9 15:24:23 2010: OK


  http://xxxxxx.com/ - OK


HTTP/1.1 401 Access denied

Connection: close

Date: Tue, 09 Mar 2010 22:24:28 GMT

Server: Microsoft-IIS/6.0

WWW-Authenticate: NTLM

X-Powered-By: ASP.NET

MicrosoftSharePointTeamServices: 12.0.0.6307

Content-type: text/html


Seconds:     0.00


Is there a way to authenticate to the domain so that the actual web
page
can be accessed?


Thanks,


Tom Schmitt

Senior IT Staff - R&D

Salt Lake City, UT  XXXXX

Phone (XXX) XXX-XXXX

Cell      (XXX) XXX-XXXX

eFax    (XXX) XXX-XXXX

user-9c1ae820b621@xymon.invalid

           \\\\||////

             \ ~  ~ /

             | @  @ |

--oOo---(_)---oOo--

--
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

"Success is not final, failure is not fatal: it is the courage to
continue that counts."
--- Winston Churchill

-- 
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

“Success is not final, failure is not fatal: it is the courage to
continue that counts.”
--- Winston Churchill

list Tom Schmitt · Tue, 9 Mar 2010 16:59:37 -0700 ·

I'll give it a try - Thanks-

▸ quoted from Josh Luthman


         Thanks,
         
         Tom Schmitt
         Senior IT Staff - R&D
         
         Salt Lake City, UT  XXXXX
         Phone (XXX) XXX-XXXX
         Cell      (XXX) XXX-XXXX
    
                 \\\\||////
                  \ ~  ~ /  
                  | @  @ |   
     		--oOo---(_)---oOo--


-----Original Message-----
From: Josh Luthman [mailto:user-4c45a83f15cb@xymon.invalid] 
Sent: Tuesday, March 09, 2010 4:41 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] TS - http and 401

HTTP://user:user-c5ba135b9fdb@xymon.invalid/index.html

On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

Josh,
	Do you have an example?

         Thanks,

         Tom Schmitt
         Senior IT Staff - R&D
         Salt Lake City, UT  XXXXX
         Phone (XXX) XXX-XXXX
         Cell      (XXX) XXX-XXXX
                 \\\\||////
                  \ ~  ~ /
                  | @  @ |
    		 --oOo---(_)---oOo--

-----Original Message-----
From: Josh Luthman [mailto:user-4c45a83f15cb@xymon.invalid]
Sent: Tuesday, March 09, 2010 3:41 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] TS - http and 401

Is it HTTP auth?  If so just add the login information to the URL it's
testing.

On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

The Xymon server (4.3.0-0.beta2) is not a member of the Active

Directory

domain

So when I try to access a special web page, I get:

Tue Mar 9 15:24:23 2010: OK


  http://xxxxxx.com/ - OK


HTTP/1.1 401 Access denied

Connection: close

Date: Tue, 09 Mar 2010 22:24:28 GMT

Server: Microsoft-IIS/6.0

WWW-Authenticate: NTLM

X-Powered-By: ASP.NET

MicrosoftSharePointTeamServices: 12.0.0.6307

Content-type: text/html


Seconds:     0.00


Is there a way to authenticate to the domain so that the actual web
page
can be accessed?


Thanks,


Tom Schmitt

Senior IT Staff - R&D

Salt Lake City, UT  XXXXX

Phone (XXX) XXX-XXXX

Cell      (XXX) XXX-XXXX

eFax    (XXX) XXX-XXXX

user-9c1ae820b621@xymon.invalid

           \\\\||////

             \ ~  ~ /

             | @  @ |

--oOo---(_)---oOo--

--
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

"Success is not final, failure is not fatal: it is the courage to
continue that counts."
--- Winston Churchill

-- 
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

"Success is not final, failure is not fatal: it is the courage to
continue that counts."
--- Winston Churchill

list Josh Luthman · Tue, 9 Mar 2010 19:19:22 -0500 ·

It will only work for HTTP auth which is why I asked how it was authenticated.

▸ quoted from Tom Schmitt


On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

I'll give it a try - Thanks-

         Thanks,

         Tom Schmitt
         Senior IT Staff - R&D

         Salt Lake City, UT  XXXXX
         Phone (XXX) XXX-XXXX
         Cell      (XXX) XXX-XXXX

                 \\\\||////
                  \ ~  ~ /
                  | @  @ |
     		--oOo---(_)---oOo--


-----Original Message-----
From: Josh Luthman [mailto:user-4c45a83f15cb@xymon.invalid]
Sent: Tuesday, March 09, 2010 4:41 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] TS - http and 401

HTTP://user:user-c5ba135b9fdb@xymon.invalid/index.html

On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

Josh,
	Do you have an example?

         Thanks,

         Tom Schmitt
         Senior IT Staff - R&D
         Salt Lake City, UT  XXXXX
         Phone (XXX) XXX-XXXX
         Cell      (XXX) XXX-XXXX
                 \\\\||////
                  \ ~  ~ /
                  | @  @ |
    		 --oOo---(_)---oOo--

-----Original Message-----
From: Josh Luthman [mailto:user-4c45a83f15cb@xymon.invalid]
Sent: Tuesday, March 09, 2010 3:41 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] TS - http and 401

Is it HTTP auth?  If so just add the login information to the URL it's
testing.

On 3/9/10, user-9c1ae820b621@xymon.invalid <user-9c1ae820b621@xymon.invalid> wrote:

The Xymon server (4.3.0-0.beta2) is not a member of the Active

Directory

domain

So when I try to access a special web page, I get:

Tue Mar 9 15:24:23 2010: OK


  http://xxxxxx.com/ - OK


HTTP/1.1 401 Access denied

Connection: close

Date: Tue, 09 Mar 2010 22:24:28 GMT

Server: Microsoft-IIS/6.0

WWW-Authenticate: NTLM

X-Powered-By: ASP.NET

MicrosoftSharePointTeamServices: 12.0.0.6307

Content-type: text/html


Seconds:     0.00


Is there a way to authenticate to the domain so that the actual web
page
can be accessed?


Thanks,


Tom Schmitt

Senior IT Staff - R&D

Salt Lake City, UT  XXXXX

Phone (XXX) XXX-XXXX

Cell      (XXX) XXX-XXXX

eFax    (XXX) XXX-XXXX

user-9c1ae820b621@xymon.invalid

           \\\\||////

             \ ~  ~ /

             | @  @ |

--oOo---(_)---oOo--

--
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

"Success is not final, failure is not fatal: it is the courage to
continue that counts."
--- Winston Churchill

--
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

"Success is not final, failure is not fatal: it is the courage to
continue that counts."
--- Winston Churchill

-- 
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

“Success is not final, failure is not fatal: it is the courage to
continue that counts.”
--- Winston Churchill

list Benedikt Kristinsson · Wed, 10 Mar 2010 00:26:29 +0000 ·

Hello!

I am getting frequent (about 20+ messages per hour) messages about the
hobbitd service being yellow because a b0rked win server is sending
oversized messages. 

Oversize stachg msg from 127.0.0.1 for KADECO-SERVER.kadeco.local:msgs
truncated (n=395008, limit=262144)
Oversize page/ack/notify msg from 127.0.0.1 for
KADECO-SERVER.kadeco.local:msgs truncated (n=394955, limit=262144)
Oversize status msg from 127.0.0.1 for KADECO-SERVER.kadeco.local:msgs
truncated (n=395013, limit=262144)

I am unable to log into the server but these messages keep coming. Why
does this happen? Is there a bug with BBWin?

When i try to view the raw report sent from the client, it only tells me
there is no data. I am assuming hobbitd disregards the message since it
is oversized. 

 -- Benedikt

list Malcolm Hunter · Wed, 10 Mar 2010 01:58:13 +0100 ·

▸ quoted from Benedikt Kristinsson

I am getting frequent (about 20+ messages per hour) messages about the
hobbitd service being yellow because a b0rked win server is sending
oversized messages. 

Oversize stachg msg from 127.0.0.1 for KADECO-SERVER.kadeco.local:msgs
truncated (n=395008, limit=262144)
Oversize page/ack/notify msg from 127.0.0.1 for
KADECO-SERVER.kadeco.local:msgs truncated (n=394955, limit=262144)
Oversize status msg from 127.0.0.1 for KADECO-SERVER.kadeco.local:msgs
truncated (n=395013, limit=262144)

I am unable to log into the server but these messages keep coming. Why
does this happen? Is there a bug with BBWin?

When i try to view the raw report sent from the client, it only tells me
there is no data. I am assuming hobbitd disregards the message since it
is oversized.

Try reading the manpage for hobbitserver.cfg and try changing some of the settings.

Malcolm


-- 
Technical copy-editor & proofreader

KDE Proofreading Team
KDE British English Translation Team

http://l10n.kde.org/team-infos.php?teamcode=en_GB

Facebook: http://www.facebook.com/FriendlyAtheist

Sicherer, schneller und einfacher. Die aktuellen Internet-Browser -
jetzt kostenlos herunterladen! http://portal.gmx.net/de/go/chbrowser

list Benedikt Kristinsson · Wed, 10 Mar 2010 01:51:36 +0000 ·

▸ quoted from Malcolm Hunter

On Wed, 2010-03-10 at 00:58 +0000, Malcolm Hunter wrote:

Try reading the manpage for hobbitserver.cfg and try changing some of
the settings.

I have already done that and I have upped the limit to 1024 kB. 

-- Benedikt

list Buchan Milne · Wed, 10 Mar 2010 07:20:13 +0100 ·

▸ quoted from Benedikt Kristinsson

On Wednesday, 10 March 2010 02:51:36 Benedikt Kristinsson wrote:

On Wed, 2010-03-10 at 00:58 +0000, Malcolm Hunter wrote:

Try reading the manpage for hobbitserver.cfg and try changing some of
the settings.

I have already done that and I have upped the limit to 1024 kB.

What did you change? Did you restart hobbitd? Can you post the error message 
you get now?

list Vernon Everett · Wed, 10 Mar 2010 14:56:50 +0800 ·

Two other things you can try.

I recall there was a version of Hobbit, a good few years back, where the
hobbitserver.cfg setting didn't actually work. I had to change the size in
the code and recompile - but it is unlikely you are using such a venerable
version.

I have also seen that sometimes Windoze servers spew logs of unfathomable
size.
Even changing the hobbitserver.cfg settings did not help.
This is more likely your situation.
We ended up having to limit the contents of the log files.
To do this, I added some entries to client-local.cfg on the Hobbit/Xymon
server.
[HOST1,HOST2,HOST3]
eventlog:security
ignore 0
eventlog:application
ignore BigBrotherHobbitClient|information

From my limited understanding of how Windoze works, I believe this excluded
application event logs regarding the BBWin client and application
information logs, as well as any security related event logs with a 0 return
code - which was our main problem - heaps of status 0 security messages.

YMMV.

Regards
     Vernon

▸ quoted from Benedikt Kristinsson



On Wed, Mar 10, 2010 at 9:51 AM, Benedikt Kristinsson <user-9c0cd169164b@xymon.invalid>wrote:

On Wed, 2010-03-10 at 00:58 +0000, Malcolm Hunter wrote:

Try reading the manpage for hobbitserver.cfg and try changing some of
the settings.

I have already done that and I have upped the limit to 1024 kB.

-- Benedikt

list Iain M Conochie · Wed, 10 Mar 2010 13:05:00 +0000 ·

▸ quoted from Benedikt Kristinsson

Benedikt Kristinsson wrote:

On Wed, 2010-03-10 at 00:58 +0000, Malcolm Hunter wrote:

Try reading the manpage for hobbitserver.cfg and try changing some of
the settings.

I have already done that and I have upped the limit to 1024 kB.

You think that is bad? Wait until you get the messages like this :)

Latest errormessages:
Data flooding from X.X.X.X, closing connection

You will then see errors in the Event log on the windows server about the host terminating the connection.

Usually I have found that this happens when the event log on the windows machine is full. If you can zero your event logs you should be OK

For reference I have this set in hobbitserver.cfg

MAXMSG_STATUS="12124000"
MAXMSG_DATA="12124000"
MAXMSG_CLIENT="12124000"

Cheers

Iain

-- Benedikt

list Benedikt Kristinsson · Thu, 11 Mar 2010 21:56:40 +0000 ·

▸ quoted from Vernon Everett

On Wed, 2010-03-10 at 06:56 +0000, Vernon Everett wrote:

Two other things you can try.

I recall there was a version of Hobbit, a good few years back, where
the hobbitserver.cfg setting didn't actually work. I had to change the
size in the code and recompile - but it is unlikely you are using such
a venerable version.

I have also seen that sometimes Windoze servers spew logs of
unfathomable size.
Even changing the hobbitserver.cfg settings did not help.
This is more likely your situation.
We ended up having to limit the contents of the log files.
To do this, I added some entries to client-local.cfg on the
Hobbit/Xymon server.
[HOST1,HOST2,HOST3]
eventlog:security
ignore 0
eventlog:application
ignore BigBrotherHobbitClient|information

From my limited understanding of how Windoze works, I believe this
excluded application event logs regarding the BBWin client and
application information logs, as well as any security related event
logs with a 0 return code - which was our main problem - heaps of
status 0 security messages.

YMMV.

Regards
     Vernon

Thanks. I think that windows was to blame. I got the owner off the
machine to reboot it and hobbitd hasn't complained since. 

-- Benedikt

TS - http and 401 🔗 link

TS - http and 401