Re: [twsocket] [OT] Hoping somone can point me in the right direction with IE and file save
Are the headers as you guys would expect? The "Vary: *" header prevents the response from being cached, so IE "gets confused" when processing the save attachment request. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] [OT] Hoping somone can point me in the right direction with IE and file save
Francois, My ICS projects are working very well. Thanks for asking. Appropriate forum - yes, it's why I asked if someone can point me in the right direction. With the wealth of knowledge on this forum, I was hoping that someone had encountered this same or similar situation, possibly using an ICS component in their web server. I do not intend clogging up this forum with a debate on my woes, the subject says it all really. If you can't help - fine. ...Andy Francois PIETTE wrote: Hello Andy, Is this related to ICS ? If not, please repost into an appropriate forum. If yes, please explain more clearly. -- francois.pie...@overbyte.be The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be - Original Message - From: "Info2004" To: Sent: Friday, December 17, 2010 5:50 PM Subject: [twsocket] [OT] Hoping somone can point me in the right direction with IE and file save Hi, I have a site the works fine with Firefox and Chrome, but is problematic with IE. It used to work until reported faulty yesterday. There is a button on the page that calls a php script that generates a file, and prompts the user to save the file. IE (8) says: "Internet Explorer cannot download export_service_transactions.php from itagworld.com. Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later." IE does get the file data, it's just not playing ball with the save part. I captured the headers using Fiddler: HTTP/1.1 200 OK Date: Fri, 17 Dec 2010 16:38:56 GMT Server: Apache Cache-Control: must-revalidate, post-check=0, pre-check=0 Content-Description: File Transfer Content-Disposition: attachment; filename="asset_data_171210.xls" Content-Transfer-Encoding: binary Expires: 0 Vary: * Keep-Alive: timeout=5, max=50 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/x-comma-separated-values 33f dbId SiteId PoolId AssetTypeId SerialNumber OrganisationId Description LocationTxt Approved VoltageTypeId DateTimeCreated LastActionDateTime LastActionId assetNotes RefNo Deleted invalidSerialNumber encodeType installationDate userWhoCreatedId userWhoDeletedId EventTime ActivityCodeId OperatorText SiteName ActivityCodeDescription AssetDescription catagory Volt CustomerReference fillingSystem 3611 205 1 038348170034 5 1 3 2010-12-08 00:00:00 2010-12-07 10:17:45 94 0 0 -00-00 105 2010-12-07 10:15:00 9 Service2 DSC E St Albans Brighthouse Filled with Water Battery Maintenance 48V Water Injectors 3611 205 1 038348170034 5 1 3 2010-12-08 00:00:00 2010-12-07 10:17:45 94 0 0 -00-00 105 2010-12-07 10:17:45 94 Service2 DSC E St Albans Brighthouse Battery 48V Battery Asset Registration 48V Water Injectors 0 Are the headers as you guys would expect? Anyone had the same issue? Failing anything else, where is the best place to go for help on such matters? Google seems to throw a lot of config/firewall refs at me. All tried - and don't forget, this was working and I have not changed the source or my local settings. Regards, Andy -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] ICS-based SNTP (Simple network time protocol) client
Anton S. wrote: > Francois wrote: >> The problem is not that I don't want to expand ICS. The problem is to >> support ICS. There are a lot of interesting components that could be >> added to ICS. By moving it into "usermade" page, I'm not commited to >> support it. If included in ICS distribution, it has to be supported >> and kept up-to-date with current ICS and Delphi. A huge work >> actually. > Well, it's so simple that I guessed it wouldn't require any support > or modifications. > >> Could you also write the text to be published on the usermade page ? >> Have a look at the other text to get inspired > I've sent you all the required files, hope I did everything correctly. > > Arno wrote: >> I wonder if a new "usermade" SVN repository wasn't a better place? >> Most of the downloads from current ICS "usermade" page are obsolete. > Well, if these usermades are obsolete SVN would change nothing. I would not move existing usermade projects automatically only new ones and only if authors like it. Of course they should be familiar with SVN. > And I personally am still not familiar with SVN, especially in > committing a changes. Maybe others prefer old good archive > down/uploading also :). Don't you use SVN locally for version control? I can't live without it, it's so easy with TortoiseSVN, and you do not have to run a SVN server in your LAN. A shared, file based repository is enough (two mouse clicks to create a new repository). -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Is there any way to force NTLM toauthenticateagainstagiven AD domain?
Fastream Technologies wrote: > Hi Arno, > > On Fri, Dec 17, 2010 at 12:22 PM, Arno Garrels > wrote: > >> Fastream Technologies wrote: >>> Let's say the web server is listening on the IP 192.168.2.2. A >>> virtual server is an Apache term for two domains on the same IP >>> such as www.domain1.com and www.domain2.com . We want people who >>> log on to domain1 to be authenticated against NTLMdomain1 and >>> domain2 to NTLMdomain2. >> >> If you forward the request you have to forward the NTLM requests as >> well, authentication happens on the destination server and the proxy >> must not have membership in destination server's Windows domain. >> >> If the content is cached by the proxy and IF the proxy machine is a >> member of destination server's Windows domain I strongly _guess that >> it is not required to specify a domain target. Otherwise I guess that >> IF the proxy is not a member of destination server's Windows domain >> you have a problem that cannot be resolved easily. >> >> I wonder how you can sell a product with untested features. >> I suggest that you first setup different domain environments and test >> the product, you do not need much hardware for this, VMs will do. >> I guess there are even trial versions of Windows server editions >> available in case you don't have enough licenses. >> >> > We have already downloaded trial Win2008R2. Let me elaborate our > customers' needs: > > They want to authenticate the end users on the reverse proxy. I mean > the web server will not have authentication on! The reverse proxy > will first authenticate then connect to target web server and > GET/POST/HEAD... Actually IQP already does all these but only to the > AD domain the rproxy machine is logged on to. The customers have much > more complex environments, with multiple domains etc. They need to > have sales.company.com to be authenticated against the NTLM domain > "sales" and support.company.com to be authenticated against the NTLM > domain "support". The admin of the proxy will just assign the NTLM > domains to the URL Rules (HTTP domain names in this example) and it > should work--simply! Are there any other proxy servers with such a feature available? I doubt that it is possible, but I'm not a specialist in Active Directory. What might work, for instance, if "sales" was a child domain of parent domain "company.com" and if clients authenticate with the domain target in user name like "sales.company.com\username" or "company.com\username", however even that depends on the domain setup AFAIK. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] [OT] Hoping somone can point me in the right direction with IE and file save
Hello Andy, Is this related to ICS ? If not, please repost into an appropriate forum. If yes, please explain more clearly. -- francois.pie...@overbyte.be The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be - Original Message - From: "Info2004" To: Sent: Friday, December 17, 2010 5:50 PM Subject: [twsocket] [OT] Hoping somone can point me in the right direction with IE and file save Hi, I have a site the works fine with Firefox and Chrome, but is problematic with IE. It used to work until reported faulty yesterday. There is a button on the page that calls a php script that generates a file, and prompts the user to save the file. IE (8) says: "Internet Explorer cannot download export_service_transactions.php from itagworld.com. Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later." IE does get the file data, it's just not playing ball with the save part. I captured the headers using Fiddler: HTTP/1.1 200 OK Date: Fri, 17 Dec 2010 16:38:56 GMT Server: Apache Cache-Control: must-revalidate, post-check=0, pre-check=0 Content-Description: File Transfer Content-Disposition: attachment; filename="asset_data_171210.xls" Content-Transfer-Encoding: binary Expires: 0 Vary: * Keep-Alive: timeout=5, max=50 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/x-comma-separated-values 33f dbId SiteId PoolId AssetTypeId SerialNumber OrganisationId Description LocationTxt Approved VoltageTypeId DateTimeCreated LastActionDateTime LastActionId assetNotes RefNo Deleted invalidSerialNumber encodeType installationDate userWhoCreatedId userWhoDeletedId EventTime ActivityCodeId OperatorText SiteName ActivityCodeDescription AssetDescription catagory Volt CustomerReference fillingSystem 3611 205 1 038348170034 5 1 3 2010-12-08 00:00:00 2010-12-07 10:17:45 94 0 0 -00-00 105 2010-12-07 10:15:00 9 Service2 DSC E St Albans Brighthouse Filled with Water Battery Maintenance 48V Water Injectors 3611 205 1 038348170034 5 1 3 2010-12-08 00:00:00 2010-12-07 10:17:45 94 0 0 -00-00 105 2010-12-07 10:17:45 94 Service2 DSC E St Albans Brighthouse Battery 48V Battery Asset Registration 48V Water Injectors 0 Are the headers as you guys would expect? Anyone had the same issue? Failing anything else, where is the best place to go for help on such matters? Google seems to throw a lot of config/firewall refs at me. All tried - and don't forget, this was working and I have not changed the source or my local settings. Regards, Andy -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
[twsocket] [OT] Hoping somone can point me in the right direction with IE and file save
Hi, I have a site the works fine with Firefox and Chrome, but is problematic with IE. It used to work until reported faulty yesterday. There is a button on the page that calls a php script that generates a file, and prompts the user to save the file. IE (8) says: "Internet Explorer cannot download export_service_transactions.php from itagworld.com. Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later." IE does get the file data, it's just not playing ball with the save part. I captured the headers using Fiddler: HTTP/1.1 200 OK Date: Fri, 17 Dec 2010 16:38:56 GMT Server: Apache Cache-Control: must-revalidate, post-check=0, pre-check=0 Content-Description: File Transfer Content-Disposition: attachment; filename="asset_data_171210.xls" Content-Transfer-Encoding: binary Expires: 0 Vary: * Keep-Alive: timeout=5, max=50 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/x-comma-separated-values 33f dbId SiteId PoolId AssetTypeId SerialNumber OrganisationId Description LocationTxt Approved VoltageTypeId DateTimeCreated LastActionDateTime LastActionId assetNotes RefNo Deleted invalidSerialNumber encodeType installationDate userWhoCreatedId userWhoDeletedId EventTime ActivityCodeId OperatorText SiteName ActivityCodeDescription AssetDescription catagory Volt CustomerReference fillingSystem 3611 205 1 038348170034 5 1 3 2010-12-08 00:00:00 2010-12-07 10:17:45 94 0 0 -00-00 105 2010-12-07 10:15:00 9 Service2 DSC E St Albans Brighthouse Filled with Water Battery Maintenance 48V Water Injectors 3611 205 1 038348170034 5 1 3 2010-12-08 00:00:00 2010-12-07 10:17:45 94 0 0 -00-00 105 2010-12-07 10:17:45 94 Service2 DSC E St Albans Brighthouse Battery 48V Battery Asset Registration 48V Water Injectors 0 Are the headers as you guys would expect? Anyone had the same issue? Failing anything else, where is the best place to go for help on such matters? Google seems to throw a lot of config/firewall refs at me. All tried - and don't forget, this was working and I have not changed the source or my local settings. Regards, Andy -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] ICS usermade webpage
> So this message is a call to those authors: I'll be very happy if > you update your code to current ICS version and current (preferably > all) Delphi/BCB version. > Most of the time, this updating is not a big problem. But since there have never been dates or Delphi or ICS versions supported on the usermade submissions, no-one knows if anything has ever been changed. That's why I stopped submitting anything. Changing the html code to at least report the zip date stamp is trivial, assuming those dates have not been lost during upload. I have suggested this before, probably more than once. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] ICS-based SNTP (Simple network time protocol) client
> Well, it's so simple that I guessed it wouldn't require any support > or modifications. So the SNTP component is already testing with ICS for IPv6? And with Delphi for Mac and Linux? That is the issue with adding projects, the number that need checking and fixing for new Delphi releases and ICS features keeps increasing. Angus -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
[twsocket] ICS usermade webpage
Hi All ! As you probably know, the "usermade" webpage at ICS website (http://www.overbyte.be) contains a lot of gems, but most of them have never been updated by their authors for the newer Delphi or ICS versions. So this message is a call to those authors: I'll be very happy if you update your code to current ICS version and current (preferably all) Delphi/BCB version. Most of the time, this updating is not a big problem. Thanks to ICS backward compatibility. Minor changes are required, but newbies frequently have problem even with the simplest change ! Thanks for your help. -- francois.pie...@overbyte.be The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] ICS-based SNTP (Simple network time protocol) client
Francois wrote: >The problem is not that I don't want to expand ICS. The problem is to >support ICS. There are a lot of interesting components that could be added >to ICS. By moving it into "usermade" page, I'm not commited to support it. >If included in ICS distribution, it has to be supported and kept up-to-date >with current ICS and Delphi. A huge work actually. Well, it's so simple that I guessed it wouldn't require any support or modifications. >Could you also write the text to be published on the usermade page ? Have a >look at the other text to get inspired I've sent you all the required files, hope I did everything correctly. Arno wrote: >I wonder if a new "usermade" SVN repository wasn't a better place? >Most of the downloads from current ICS "usermade" page are obsolete. Well, if these usermades are obsolete SVN would change nothing. And I personally am still not familiar with SVN, especially in committing a changes. Maybe others prefer old good archive down/uploading also :). -- Anton -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Is there any way to force NTLM toauthenticateagainstagiven AD domain?
Hi Arno, On Fri, Dec 17, 2010 at 12:22 PM, Arno Garrels wrote: > Fastream Technologies wrote: > > Let's say the web server is listening on the IP 192.168.2.2. A virtual > > server is an Apache term for two domains on the same IP such as > > www.domain1.com and www.domain2.com . We want people who log on to > > domain1 to be authenticated against NTLMdomain1 and domain2 to > > NTLMdomain2. > > If you forward the request you have to forward the NTLM requests as well, > authentication happens on the destination server and the proxy must not > have membership in destination server's Windows domain. > > If the content is cached by the proxy and IF the proxy machine is a > member of destination server's Windows domain I strongly _guess that > it is not required to specify a domain target. Otherwise I guess that > IF the proxy is not a member of destination server's Windows domain > you have a problem that cannot be resolved easily. > > I wonder how you can sell a product with untested features. > I suggest that you first setup different domain environments and test > the product, you do not need much hardware for this, VMs will do. > I guess there are even trial versions of Windows server editions available > in case you don't have enough licenses. > > We have already downloaded trial Win2008R2. Let me elaborate our customers' needs: They want to authenticate the end users on the reverse proxy. I mean the web server will not have authentication on! The reverse proxy will first authenticate then connect to target web server and GET/POST/HEAD... Actually IQP already does all these but only to the AD domain the rproxy machine is logged on to. The customers have much more complex environments, with multiple domains etc. They need to have sales.company.com to be authenticated against the NTLM domain "sales" and support.company.com to be authenticated against the NTLM domain "support". The admin of the proxy will just assign the NTLM domains to the URL Rules (HTTP domain names in this example) and it should work--simply! Regards, SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Is there any way to force NTLM toauthenticateagainstagiven AD domain?
Fastream Technologies wrote: > Let's say the web server is listening on the IP 192.168.2.2. A virtual > server is an Apache term for two domains on the same IP such as > www.domain1.com and www.domain2.com . We want people who log on to > domain1 to be authenticated against NTLMdomain1 and domain2 to > NTLMdomain2. If you forward the request you have to forward the NTLM requests as well, authentication happens on the destination server and the proxy must not have membership in destination server's Windows domain. If the content is cached by the proxy and IF the proxy machine is a member of destination server's Windows domain I strongly _guess that it is not required to specify a domain target. Otherwise I guess that IF the proxy is not a member of destination server's Windows domain you have a problem that cannot be resolved easily. I wonder how you can sell a product with untested features. I suggest that you first setup different domain environments and test the product, you do not need much hardware for this, VMs will do. I guess there are even trial versions of Windows server editions available in case you don't have enough licenses. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Is there any way to force NTLM toauthenticateagainstagiven AD domain?
Let's say the web server is listening on the IP 192.168.2.2. A virtual server is an Apache term for two domains on the same IP such as www.domain1.com and www.domain2.com . We want people who log on to domain1 to be authenticated against NTLMdomain1 and domain2 to NTLMdomain2. These should be configurable by the admin user (let's say the application programmer will assignt the property NTLMDomain in OnGetDocument. Sorry for my "quick" English. HTH, SZ On Fri, Dec 17, 2010 at 10:47 AM, Francois PIETTE wrote: > Alright. Let's say there are two virtual servers, one per domain on the ICS >> web server. For example in OnGetDocument, you assign different >> TFileStream's >> to different FRequestHost's. I need each HTTP domain's user set to >> authenticate against a different AD/NTLM domain. It will be the >> application >> programmer/admin-configuration responsible for setting the NTLM domain >> name >> with respect to the FRequestHost. One future feature might be the ability >> to >> enable multiple NTLM domains per FRequestHost of which the end user would >> choose from by the syntax domain\user while logging in. >> > > Sorry, I don't understand, even the first sentence. > > -- > francois.pie...@overbyte.be > http://www.overbyte.be > > > -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] Is there any way to force NTLM toauthenticateagainstagiven AD domain?
Alright. Let's say there are two virtual servers, one per domain on the ICS web server. For example in OnGetDocument, you assign different TFileStream's to different FRequestHost's. I need each HTTP domain's user set to authenticate against a different AD/NTLM domain. It will be the application programmer/admin-configuration responsible for setting the NTLM domain name with respect to the FRequestHost. One future feature might be the ability to enable multiple NTLM domains per FRequestHost of which the end user would choose from by the syntax domain\user while logging in. Sorry, I don't understand, even the first sentence. -- francois.pie...@overbyte.be http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
