473,657 Members | 2,604 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Getting HTTP 400 errors with multithreaded webservice calls through an authenticating ISA proxy

Hi,
In my application which has two or more threads calling web
service or just HttpWebRequest I am seeing some HTTP 400 errors retrun
in the response. All the calls are going through the same ISA proxy
the connections to which must be authenticated. The 400 error are
comming fron the wed server back through the proxy.

When I Sniff the connections I can see that the http message that is
causing the issue is one that is part of the challange respons
messages used to authenticate with the ISA proxy server. However it is
being sent to the ISA proxy server over a connection that is already
authenticated. As a result it is being forwarded on to the web server
which returns the 400 error.

The issue seems to be that when an existing authenticated connection
exsit and an atttempt is made to create another connection to the
proxy server the following can happen.
1. The first connection exist and is authenticated
2. The second connection is created and a request
without any authenication credentials is sent to the proxy
3. The Proxy reponses on second connection with a
407 that authentication is required.
4. Now the client send the request with Negotiate
authentication but over the first connection that is already
authenticated.
5. Now a HTTP 400 error is return in the response
on the first connection. This comes from the web server as it is not
expecting an proxy authentication.

Step 4 should (and usually is) sent over the second connection, which
would then continue with the several challange respone messages
authenticating the connection.

Notes:
1. With keep-alives ON this error occurs only a hand full of time a
day, while with keep-alive OFF it will happen within a couple of
minutes.
2. I am using .Net 2.0
3. Request are sent once a second

Has anyone seen this issue before? Is it an issue with how the
HttpWebRequest choose connection fron some http connection pool?

Jul 31 '07 #1
1 4328
Hi,
In my application which has two or more threads calling web
service or just HttpWebRequest I am seeing some HTTP 400 errors retrun
in the response. All the calls are going through the same ISA proxy
the connections to which must be authenticated. The 400 error are
comming fron the wed server back through the proxy.

When I Sniff the connections I can see that the http message that is
causing the issue is one that is part of the challange respons
messages used to authenticate with the ISA proxy server. However it is
being sent to the ISA proxy server over a connection that is already
authenticated. As a result it is being forwarded on to the web server
which returns the 400 error.

The issue seems to be that when an existing authenticated connection
exsit and an atttempt is made to create another connection to the
proxy server the following can happen.
1. The first connection exist and is authenticated
2. The second connection is created and a request
without any authenication credentials is sent to the proxy
3. The Proxy reponses on second connection with a
407 that authentication is required.
4. Now the client send the request with Negotiate
authentication but over the first connection that is already
authenticated.
5. Now a HTTP 400 error is return in the response
on the first connection. This comes from the web server as it is not
expecting an proxy authentication.

Step 4 should (and usually is) sent over the second connection, which
would then continue with the several challange respone messages
authenticating the connection.

Notes:
1. With keep-alives ON this error occurs only a hand full of time a
day, while with keep-alive OFF it will happen within a couple of
minutes.
2. I am using .Net 2.0
3. Request are sent once a second

Has anyone seen this issue before? Is it an issue with how the
HttpWebRequest choose connection fron some http connection pool?
Hi,
It looks like you need to install this hotfix might help you out:

http://support.microsoft.com/?kbid=924638

Your problem was probably happening because you weren't able to set the KeepAlive property to false when you're using the HTTP adapter to post a message

BizTalk Utilities - Frustration free BizTalk Adapters
http://www.topxml.com/biztalkutilities
Sep 26 '07 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
4092
by: elora_c | last post by:
I'm making a call to a webservice from my ASP.NET page. The web application has anonymous access turned off and Integrated Windows auth turned on. The web.config has <identity impersonate=true>. I set the credentials of the web service proxy to the DefaultCredentials. Right before I make the call, I print out the WindowsIdentity, and it is showing the right identity. So I know the web application is authenticating properly. However,...
2
5701
by: Miguel | last post by:
Hi, I'm developing an application in C# with Windows Forms for my company that is similar to the MSN Messenger. This application uses a webservice for registering users, etc... and as 2 webbrowser controls on it. Besides that i'm using the firewall client for isa server 2004 and it seems that the browsers aren't able to pass thru it... if i disable the firewall the browsers work fine, if i don't, the 2 browsers just stay there...
8
14078
by: Tim Reynolds | last post by:
Our .Net application calls a web method of aplpication 2 that resides on their Apache server. When I as a developer C#, Studios 2003, make the call to their web method from my desktop, I receive no exceptions - completes fine. Their web service url was added as a web reference to our project with no problem. The following was generated as part of the proxy class: /// <remarks/> public DueDateAvailabilityResponse...
1
4387
by: Jeevan | last post by:
Hi , I am working on developing an ASP.NET server control that is based on AJAX and need to call a webservice on a remote domain. To avoid the security warning from IE , I created a proxy webservice in the local application that calls this remote webservice. Every thing works fine as expected. However I need to package the proxy webservice along with the control as a dll so that the users needn't bother about creating a proxy...
6
4400
by: utnemisis51 | last post by:
Hi, I'm trying to include some user credentials for accessing a remote webservice. The remote location requires that I use Basic authentication, which means, from browsing around, I need to include the user name and password in the HTTP header, but I'm not quite sure how to access the HTTP header that is sent with the webservice soap message request. Can anyone help?
1
4371
by: ad | last post by:
When we new a web Service, the default in IIS is Allow Anonymous and Integrated Windows Authentication , we just use : WebService.webClass myWC= new WebService.webClass(); and then we can access the WebService thought myWC But I find some time it will fail with Access denid, and I must must use: WebService.webClass myWC= new WebService.webClass(); myWC.PreAuthenticate = true; myWC.Credentials =...
1
2014
by: intrepid_dw | last post by:
All: I have prepared a .NET 1.1 client application that consumes a remote, public web service. All the functions work as expected, and, in general, the application has been successful for my purposes. I have discovered one bit of behavior that surprises me, however. At certain times, under heavy server-side loads, my calls to certain web service methods will time out on the *client* side (proxy timeout). My assumption was that the...
0
1580
by: jocbor | last post by:
Hi! We are calling a webservice in a third party application for integration purposes. The scenario is that messages arrive on msmq. We have a windows service (using a domain account) receiving the messages and calls the webservice (using integrated security). The symptom we see is that if many messages arrive at the same time the
2
3031
by: stormogulen | last post by:
Hi! I'm having some problems figuring out how to organize the different tiers of an application using a webservice. The bottom layer is the DAL, and some of the objects in the DAL, I would like to send via a webservice. That is no problem, just reference the DAL from the webservice. Now in the business layer I am calling methods on the webservice,
0
8385
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8303
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8821
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
8502
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
7316
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6162
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
4150
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4300
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
1601
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.