HTTP GET efficiency and credentials BUG

[TCPlomp]

I am using the native LabVIEW 2010 HTTP API and was looking at the logs of my server (I provided a user name and password) at 192.168.124/labview.ide

---

192.168.1.24 - - [05/Jan/2011:19:29:05 +0100] "GET /LVWSAuthSvc/GetAggregateUserPermissions?username= HTTP/1.1" 401 749 "-" "-"
192.168.1.24 - - [05/Jan/2011:19:29:05 +0100] "GET /labview.ide HTTP/1.1" 401 749 "-" "National Instruments LabVIEW"
192.168.1.24 - ********* [05/Jan/2011:19:29:05 +0100] "GET /labview.ide HTTP/1.1" 404 450 "-" "National Instruments LabVIEW"

---

 If I look at these logs, there are sevaral things noticable:

1. I perform 1 GET action in LabVIEW, yet 3 GETs are done in HTTP
2. The first GET is done to something specifically native to LabVIEW (I think):  /LVWSAuthSvc/GetAggregateUserPermissions?username= however this is done without using the credentials supplied: resulting in a 401 error
3. The second GET is done on the correct URL, and the client (LabVIEW) identifies itself as such, however again without using the credentials supplied (401) (second - )
4. The third GET is done at the right URL with the right credentials (I changed the username to ******)

Now this might be an issue, what if there is a /labview.ide which returns a succeeding HTTP code (200) for an unauthenticated user (GET no. 2), however it returns a different page when running as a different user (GET no. 3).

Is LabVIEW performing the third GET (with the right credentials) when the second GET (without credentials) is returning a succeeding HTTP code ?

NO:

Here's a log where I GET the /robots.txt of a server (while supplying a username):

---

192.168.1.24 - - [05/Jan/2011:19:41:52 +0100] "GET /LVWSAuthSvc/GetAggregateUserPermissions?username= HTTP/1.1" 404 478 "-" "-"
192.168.1.24 - - [05/Jan/2011:19:41:52 +0100] "GET /robots.txt HTTP/1.1" 200 260 "-" "National Instruments LabVIEW"

---

After a successfull GET LabVIEW stops, and doesn't bother to use the supplied credentials.

Concluding I have 2 concerns:

-GETTING efficiency

-GETTING the page without using credentials

Ton

---

[Matti_Autioniemi]

Hi,

Have you found anything new concering the topic?

-Matti