Loadrunner and security issues - security

Accessing an application manually works fine, creating a manual script with web_add_header works fine, but when just hitting record in vugen with the http protocol the webpage gets "page cannot be displayed".
What can cause this? I assume it has something to do with security?
Can I change some settings in vugen to make this work?

I don't know that this will solve your problem, but I have seen somewhat similar behavior when dealing with security certificates on SSL enable pages. Try installing or re-installing the security certificate for the site in IE before you try recording the script.

Take a look at your credentials in the system and your browser vendor/version. Make sure that you have admin rights and that you are using a 32 bit browser (VUGEN is a 32 bit application) is one supported for your version of LoadRunner

Related

Excel Add-In Office-JS is asking about Certificate Revocation List

I'm trying to get my Add-In distributed via Office 365 Admin Center. It's been a real pain as they force SSL upon me even though the Add-In works fine via HTTP currently.
The reason I use HTTP is that my Add-In prompts each start that there is no "CRL List" for the SSL Cert of internal API.
I found how to disable this check, but it appears to be system wide.
Is there a reason that it works fine in the browser, but prompts in Excel Add-In?
Is there a way to disable just for Excel vs system wide?
This will likely be a separate post, but is there a way to disable for just one certificate vs system wide?
Disabling system wide may work, but it's clearly not the correct approach. I'm aware the best approach would be to resolve/setup the CRL, but that is a tall ask just for "my add-in". If I could at least pitch disabling check on a lower/smaller level, it might be accepted.
I haven't tested running in Web just yet to see if I get the SSL prompt in the browser, this is currently on Desktop which is my main target audience.
Update: I've reaserched more and noticed that the internal API uses LDAP for the CRL List. This appears to be working via the browser, but the Excel Add-In isn't passing my Credentials is my guess. I'm not sure how to configure this step at all.
Update: This issue is inconsistent which makes it even harder to diagnose. One possible fix was simply runnung "certutil" to query the list seemed to fix, but as the issue is inconsistent, its hard to say without further testing. I have setup on other terminals and not had the prompt. Then I rebooted after Windows Update and had the prompt, then ran CertUtil and then prompt went away. Other users just never have gotten the prompt.

Fiddler Causes Error to Go Away

I have an application set up in IIS that has Windows Authentication enabled. When I browse to this site in IE11 it prompts me for login credentials (which is strange because I'm logged on to the domain)
However, when I open up Fiddler it starts working perfectly fine, no prompts for authentication. When I close Fiddler again, it starts prompting me again. Any idea what could cause this? I'm trying to narrow down what exactly Fiddler is doing so I can figure out what I need to do to make the prompts on my app go away.
I cover many possible culprits in my post Help, Running Fiddler Fixes My App. My guess here, though, is that maybe your server is trying to use Kerberos authentication when going direct and NTLM when you go through a proxy.
To better debug this, a few things we need to know: Which browser? What's the hostname of the target server? Is it hosted on your current machine? If you disable Tools > Internet Options > Advanced > Use Windows Integrated Authentication (and restart) does it make a difference? What Zone (Right-click the page in IE, choose Properties) does the target run in?

Safari problems accessing Windows Integrated Authentication (aka NTLM) protected web site

Our web application uses Windows Integrated Authentication (aka NTLM Auth) for security.
It's working fine for both IE and Firefox users, but Safari users are seeing intermittent problems. Browsing the site will work fine, but every once in a while there will be problems loading elements of a page (e.g. CSS or JS files). Reload and the problem will go away.
If we use a debugging proxy (Fiddler) we can see that there is a lot of extra 401 requests happening with Safari. Every once in a while a request for a resource will get stuck in a 401 request loop, and eventually fail.
I can't see anything that we're doing to cause this, and it would appear that it's a bug in Safari. Has anyone ran across this issue before, and have any suggestions for a resolution?
Thanks,
Darren.
Some web sites http://www.musteat.org/nodes/show/151 indicate this is an issue with negotiated authentication.
You can turn off Negotiate in favor of pure NTLM in IIS via the NTAuthenticationProviders Metabase setting, and the following ADSUTIL command.
cscript adsutil.vbs set w3svc/WebSite/<SiteID>/NTAuthenticationProviders "NTLM"
Change < SiteID > to the appropriate ID, typically 1.

Protect IE6 from exploits when testing?

I wrote an app in C# which uses the webbrowser control. While using it, the site i happen to use it on had an ad that auto DLed and ran itself on my comp causing me to be very annoyed. According to safebrowsing.clients.google.com 2/5000 pages had this exploit, unlucky me.
I use IE6 for testing so what can i do to protect myself from those virus w/o upgrading to IE7+. Will setting the internet security to high solve the problem? (It appears to set every option to disable)
Use the VPC images that MSFT provides so if you get pwn3d, you can just blow away the image and start over.

Configure Firefox 3.0.x to authenticate with Kerberos and not prompt

I have an Intranet http application running on several machines in our Windows domain; everything works when using IE 7 because I can configure it to use Kerberos authentication and I've figured out how to get one of the intermediate machines to be Trusted for Delegation.
I have researched and tried to get Firefox 3.0.10 to use Kerberos:
navigate to about:config
filter to network.negotiate
update network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris
with the following entries(separated by comma): http://jupiter2000/trimbrokerclient,http://johnxp/fileservicedemo
I have done this and even restarted Firefox and when I browse to the above sites on our LAN, I still get prompted for username and password and even when I supply them and the web page is loaded, I have some code in the app which displays the authentication method in effect and it is still NTLM, not Kerberos as when IE is used.
Can someone comment on how to get Firefox usable on this Intranet application of mine? Thank you.
p.s. while the names above are different, the app is the same. JUPITER2000 is IIS 6.0; JOHNXP is IIS 5.1.
From what I have done myself, you will only want to input the domain, and not the http:// or path.
There are 5 settings that need to be changed in FireFox.
Only the domain is necessary.
See them all here:
FireFox settings for Integrated Windows Authentication
you must use just the server name:
jupiter2000,johnxp

Resources