This page is protected. by Digest Access Authentication, which is not supported by your browser

[gennadiy]

Hello,

I try to work with AMT andI have problem. When I work by browser, AMT work as ok(http://myIP:16992), but when I work by other program (rdk,Intel AMT developer Tool Kit) that I got error "This page is protected. by Digest Access Authentication, which is not supported by your browser.

--------------------------------------------

POST /NetworkAdministrationService HTTP/1.0

Content-Type: text/xml; charset=utf-8

Accept: application/soap+xml, application/dime, multipart/related, text/*

User-Agent: Axis/1.3

Host: 172.31.48.117:16992

Cache-Control: no-cache

Pragma: no-cache

SOAPAction: "http://schemas.intel.com/platform/client/NetworkAdministration/2004/01/GetHostName"

Content-Length: 354

Authorization: Basic YWRtaW46QWRtaU4xMjM7

http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="'>http://schemas.intel.com/platform/client/NetworkAdministration/2004/01"/>

----------------------------------------------------

HTTP/1.1 403 Forbidden

Content-Type: text/html

Server: Intel Active Management Technology 3.0.1

IntelActive Management
Technology

Protected page

This page is protected.
by Digest Access Authentication, which is not supported by your browser

----------------------------------------------

Please, help me.

Gennadiy.

[DAN_A_Intel]

Hello Gennadiy!

according to the trace you attached, your application is trying to authenticate the admin user using the HTTP Basic Authentication which is not supported by AMT.

You succeed to getthe WebUI because the browser you use has a support for the HTTP Digest Authentication. However is really weird symptom since the DTK also support this authentication. could you please post more details about your environment? what OS? what application and version?

Also is it preveting your application to run or did you catch this trace in the middle of a SOAP transaction? it would be interresting to look atthe "Authorization" field return by AMT when getting the error (this field is not present inthen HTTP header of the reponse in your post...)

does that make sense?

Dan.

[gennadiy]

Hello Dan,

I try to access to AMT (motherboard is DQ35MP) by Intel AMT Director(Intel AMT Developer Tool Kit version is 0.51).OS(AMT) is Linux and OS(Intel AMT Developer Tool Kit) is Windows XP. Intel AMT Director found AMT computer. IP address is 172.31.48.117. I set login(admin) and password(AdmiN123;) and pressed button connect. Below is trace "Authorization".

----------------------------------------------------------

POST /SecurityAdministrationService HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.1433)

Content-Type: text/xml; charset=utf-8

SOAPAction: "http://schemas.intel.com/platform/client/SecurityAdministration/2004/01/GetCoreVersion"

Host: 172.31.48.117:16992

Content-Length: 344

Expect: 100-continue

Connection: Keep-Alive

http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> http://schemas.intel.com/platform/client/SecurityAdministration/2004/01" />

----------------------------------------------------------------------

HTTP/1.1 401 Unauthorized

WWW-Authenticate: Digest realm="Intel AMT (ID:2E736473-EF63-DC11-BFFD-000EA68F75BC)", nonce="51002a43a4a08ee4a8ab472862ec5732", qop="auth"

Content-Type: text/html

Transfer-Encoding: chunked

Server: Intel Active Management Technology 3.0.1

Connection: close

2d8

IntelActive Management
Technology

Log on failed. Incorrect user name or password, or user account temporarily locked.

0

------------------------------------------------------------------------

Login and passwordare correctly.

Gennadiy.

[Sreelekshm_S_Intel]

Hi,

We are working on this. Will get back to you soon.

Thanks,

Sree

[DAN_A_Intel]

ok let me try again :)

First of all, let's start with HTTP Authentication process recap, so we could better understand the trace you have posted. A correct flow to perform an HTTP Authentication should be as follow:

1. the remote client send a HTTP request to the server without including any authentication information in the HTTP header
2. the server will respond with an error and send the appropriate HTTP Authentication challenge to be used - this is identified by the WWW-Authentcate field in the HTTP Header of the response (in our case it should be Digest)
3. then the remote client will resend the same HTTP request but including the correct challenge information in the "Authorization" field of the HTTP header

so here comes my confusion... did you capture a trace inthe middle of the transaction when younoticed the error? if this is the case, so there is probably no trouble except if you application failed totally to complete the reaming steps... is it the case? did the DTK display the error on the screen? I did not try the specific version you mentioned but previous versions are working perfectly.

could you try to describe the exact steps and observations? i'm surely missing something here ...

Dan

[gennadiy]

Hello Dan

now I have strange situation- RDK works and AMT development tool kitdoes not work. Maybe I have installed AMT development tool kit not correctly? When I run AMT Commander that I got error

13.05.2008 13:06:39
System.IndexOutOfRangeException: Index was outside the bounds of the array.
at System.Windows.Forms.ImageList.ImageCollection.SetKeyName(Int32 index, String name)
at IntelAmtCommander.MainForm.InitializeComponent()
at IntelAmtCommander.MainForm..ctor(String[] args)
at IntelAmtCommander.Program.Main(String[] args)

0.52

Gennadiy

[Sreelekshm_S_Intel]

Hi,

I have a Weybridge system (AMT 3.0) and I am able to connect to it using AMT Commander 0.52. Did you try re-installing the DTK and try again?

Thanks,

Sree

[gennadiy]

Hi Sree

I re-installed DTKand I have error again. Version of AMT Commander is 0.52

Thanks,

[Sreelekshm_S_Intel]

Hi,

That is strange :( Let me double check a couple of things:

1. What is the OS installed on your Intel AMT 3.0 system? Have you turned off the firewall? Can you log on to this sytem form your remote system using Web UI?

2. Is your DTK installation successful? Are you seeing any error messages during the installation? If not, can you start the Commander without any issues? Can yousearch and findyour AMT system using the Commander?

Thanks,

Sree

[gennadiy]

Hi Sree

1. OS is Windows XP, russian version. Firewall is off. I canlog onto AMT remote system by Web UI.

2. DTK is installation successful. I was not seening any error messages during installation.

I found error!!!!. This error bound with localization.

1. I deleted file {AMT_folder} uIntel AMT Commander.resources.dll

2. I copied file {AMT_folder}heIntel AMT Commander.resources.dll to {AMT_folder} u

AMT Commander works !!!!

Thanks,

[Sreelekshm_S_Intel]

Hi,

Glad to know that the issue has been solved.

Thanks,

Sree

[gennadiy]

Hi Sree

ButI have problem with AMT Comander. I know that AMT computerhas IP=172.31.48.117 and login/password are admin/AdmiN123;

1. I entered "172.31.48.117" in field "Start IP address" and "172.31.48.117" in field "End IP address"

2. I pressed button "Start"

3.AMT Commander found computer - "172.31.48.117- Intel Active Management Technology 3.0.1"

4. I added computer to Network (Network-172.31.48.117 / admin)

5. I entered to 172.31.48.117 / admin

6. I see panel Connection. IP/Hostname: 172.31.48.117 ; username: admin ; Password: ******; url: http://172.31.48.117:16992/

7. I press button Connect and connect did not work. I press link http://172.31.48.117:16992.Link works. I entered login and password and I see that all work.

Why AMT Commander can't do connection to 172.31.48.117?

RDK and http://172.31.48.117:16992work correctly.

Thanks,

[gennadiy]

Hi Sree

This is error log

--- 21:52:36:Event:172.31.48.117 changing state to Connecting
--- 21:52:36:Event:NetworkCredential HTTP Digest: admin, AdmiN123;
--- 21:52:36:Event:Service Setup: http://172.31.48.117:16992/SecurityAdministrationService
--- 21:52:36:CallAttempt:GetCoreVersion

--- 21:52:46:CallWarning:GetCoreVersion
--- 21:52:56:CallFailed:GetCoreVersion
--- 21:52:56:Error:System.Net.WebException
System.Net.WebException: The operation has timed out
at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SecurityAdministrationService.Invoke(String methodName, Object[] parameters)
--- 21:53:06:Event:NetworkCredential HTTP Digest: admin, AdmiN123;
--- 21:53:06:Event:Service Setup: https://172.31.48.117:16993/SecurityAdministrationService
--- 21:53:06:CallAttempt:GetCoreVersion

--- 21:53:07:CallWarning:GetCoreVersion
--- 21:53:08:CallFailed:GetCoreVersion
--- 21:53:08:Error:System.Net.WebException
System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: ??????????? ?? ???????????, ?.?. ???????? ????????? ?????? ?????? ?? ??????????? 172.31.48.117:16993
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SecurityAdministrationService.Invoke(String methodName, Object[] parameters)
--- 21:53:09:Event:172.31.48.117 changing state to Disconnected

Thanks,

[Ylian_S_Intel]

Hi. One difference between Intel AMT Commander and other software maybe that Commander does not use the HTTP proxy set for your computer. If you have an HTTP proxy in Internet Exporer, depending on the type of proxy that is used, you may have problems with authentication. Commander will try to make a connection without using any proxy. Your proxy configuration would be the first thing I would look at.

I also suspect this since, Commander makes use of a direct TCP socket fo discovery, but uses the HTTP provider to make the AMT connection. Something is not well with the HTTP provider... can you try using a different computer?

I am sorry about the language issue, I will release a new DTK soon that will fix the problems with russian. You can also remove the russian ressource .DLL and Commander will use the default english strings instead.

Ylian (Intel AMT Blog)