Clear the authentication settings set by web_set_user

[Sasidhar]

Dear All,
I have an application that uses digest authentication.

My requirement is to send two requests to this server:

1. To open a session (returns the session id - not as a cookie but as
a part of the response)
2. To close the opened session (using the session id)

The server is a resin server and implements SOAP for client-server
interactions. I'm using LR 11.0 on a Windows 7 machine.

To test this, I have created a script with two actions:

1. OpenSession
2. CloseSession

Key settings:
-------------------

a) I added a web_set_user at the beginning of "OpenSession" and at the
beginning of "CloseSession".
b) I have disabled the run-time settings -> preferences -> options ->
Authentication -> Enable integrated authentication
c) I do not want the connection to be persistant. So, I have disabled
"Keep-alive" in run-time settings -> preferences -> options -> HTTP ->
Keep-alive HTTP Connections

HTTP headers used for openSession:
---------------------------------------------------------

web_cleanup_auto_headers();
web_cache_cleanup();
web_disable_keep_alive();

HTTP headers used for openSession:
---------------------------------------------------------

web_cleanup_auto_headers();
web_cache_cleanup();
web_disable_keep_alive();
web_set_proxy_bypass("");

As per the digest authentication protocol, when I send my SOAP
requests, I expect the following to happen:

a) LR will receive a "401 Authentication Required" response.
b) Then, LR would use the already set credentials (via web_set_user)
and retry the same request.
c) I expect this request to be successful (because the request is
correct)

This is exactly what happens for the "openSession" request.

But, the problem comes in the "closeSession" part.

When I send the "closeSession" SOAP request, at the very first attempt
itself LR sends the "authenticationCredentials" along with the
request. This is not expected, because:

1. "Enable Integrated Authentication" has been disabled

Why does this happen?
Is there any way (other than the cleanup headers I have used) to clear
the authentication credentials between actions?

Thanks and Regards,
Sasidhar Sekar

[likith reddy]

Hi sekar,

I  am not sure if it works but once try web_add_header("Auth-username","") instead of web_set_user.

Thanks,
likith

> --
> You received this message because you are subscribed to the Google "LoadRunner" group.
> To post to this group, send email to LR-Loa...@googlegroups.com
> To unsubscribe from this group, send email to
> LR-LoadRunne...@googlegroups.com
> For more options, visit this group at
> http://groups.google.com/group/LR-LoadRunner?hl=en

[Sasidhar]

Hi Likith,
The header that you have mentioned ("Auth-username"), does not seem to
be a part of the standard HTTP headers. Can you point me to some
documentation on this particular header?

Thanks and Regards,
Sasidhar Sekar

On Dec 8, 7:25 pm, likith reddy <hichintu2...@gmail.com> wrote:
> Hi sekar,
>
> I  am not sure if it works but once try web_add_header("Auth-username","")
> instead of web_set_user.
>
> Thanks,
> likith