1<testcase> 2<info> 3<keywords> 4HTTP 5HTTP POST 6HTTP NTLM auth 7</keywords> 8</info> 9 10# Server-side 11<reply> 12# the first request has NTLM type-1 included, and then the 1001 is returned 13<data1001> 14HTTP/1.1 200 beng swsclose swsbounce 15Server: Microsoft-IIS/6.0 16Authentication-Info: Passport1.4 tname=MSPAuth,tname=MSPProf,tname=MSPConsent,tname=MSPSecAuth 17Content-Type: text/html; charset=iso-8859-1 18 19</data1001> 20 21# the second request should be auth-less and then this is returned. 22<data> 23HTTP/1.1 200 moo swsclose 24Server: Microsoft-IIS/6.0 25Content-Type: text/html; charset=iso-8859-1 26Content-Length: 16 27 28content for you 29</data> 30 31<datacheck> 32HTTP/1.1 200 beng swsclose swsbounce 33Server: Microsoft-IIS/6.0 34Authentication-Info: Passport1.4 tname=MSPAuth,tname=MSPProf,tname=MSPConsent,tname=MSPSecAuth 35Content-Type: text/html; charset=iso-8859-1 36 37HTTP/1.1 200 moo swsclose 38Server: Microsoft-IIS/6.0 39Content-Type: text/html; charset=iso-8859-1 40Content-Length: 16 41 42content for you 43</datacheck> 44 45</reply> 46 47# Client-side 48<client> 49<features> 50NTLM 51!SSPI 52</features> 53<server> 54http 55</server> 56 <name> 57HTTP POST --ntlm to server not requiring any auth at all 58 </name> 59 <command> 60http://%HOSTIP:%HTTPPORT/176 -u auser:apasswd --ntlm -d "junkelijunk" 61</command> 62</client> 63 64# Verify data after the test has been "shot" 65<verify> 66<strip> 67^User-Agent:.* 68</strip> 69<protocol nonewline="yes"> 70POST /176 HTTP/1.1 71Host: %HOSTIP:%HTTPPORT 72Authorization: NTLM TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA= 73User-Agent: curl/7.12.1-CVS (i686-pc-linux-gnu) libcurl/7.12.1-CVS OpenSSL/0.9.6b ipv6 zlib/1.1.4 GSS libidn/0.4.6 74Accept: */* 75Content-Length: 0 76Content-Type: application/x-www-form-urlencoded 77 78POST /176 HTTP/1.1 79Host: %HOSTIP:%HTTPPORT 80User-Agent: curl/7.12.1-CVS (i686-pc-linux-gnu) libcurl/7.12.1-CVS OpenSSL/0.9.6b ipv6 zlib/1.1.4 GSS libidn/0.4.6 81Accept: */* 82Content-Length: 11 83Content-Type: application/x-www-form-urlencoded 84 85junkelijunk 86</protocol> 87</verify> 88</testcase> 89