You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jmeter.apache.org by Duncan Davidson <dd...@staffmail.ed.ac.uk> on 2009/01/21 11:54:05 UTC
JMeter and Cosign SSO
Hi
Does anyone have any experience using Jmeter to test websites protected with Cosign SSO? I am using the HTTP Proxy Server to record the test but it fails at Cosign as it says cookies must be enabled.
Thanks
Duncan
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
RE: JMeter and Cosign SSO
Posted by Duncan Davidson <dd...@staffmail.ed.ac.uk>.
Hi Sebb
Found the way to do it is capture in 2 sessions. First one up to failure and then second once manual authenticated through cosign.
Thanks for your help.
Duncan
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
-----Original Message-----
From: sebb [mailto:sebbaz@gmail.com]
Sent: 21 January 2009 11:48
To: JMeter Users List
Subject: Re: JMeter and Cosign SSO
On 21/01/2009, Duncan Davidson <dd...@staffmail.ed.ac.uk> wrote:
> Hi
>
> Does anyone have any experience using Jmeter to test websites protected with Cosign SSO? I am using the HTTP Proxy Server to record the test but it fails at Cosign as it says cookies must be enabled.
During recording, cookies are handled by the browser, not JMeter.
When running the recorded test, you need to add a Cookie Manager to handle them.
Which version of JMeter? Java? OS?
Any errors in jmeter.log file?
There are browser addons that allow one to capture the HTTP traffic; it would be useful to compare these with the test plan elements (I assume at least some samples have been generated)
The proxy reads the browser request, creates a sampler, and then executes the sampler.
It then returns the response back to the browser.
So even better would be if you could use something like Wireshark to compare the HTTP sessions.
> Thanks
> Duncan
>
>
>
> --
> The University of Edinburgh is a charitable body, registered in
> Scotland, with registration number SC005336.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
Re: JMeter and Cosign SSO
Posted by sebb <se...@gmail.com>.
On 21/01/2009, Duncan Davidson <dd...@staffmail.ed.ac.uk> wrote:
> Hi
>
> Does anyone have any experience using Jmeter to test websites protected with Cosign SSO? I am using the HTTP Proxy Server to record the test but it fails at Cosign as it says cookies must be enabled.
During recording, cookies are handled by the browser, not JMeter.
When running the recorded test, you need to add a Cookie Manager to handle them.
Which version of JMeter? Java? OS?
Any errors in jmeter.log file?
There are browser addons that allow one to capture the HTTP traffic;
it would be useful to compare these with the test plan elements (I
assume at least some samples have been generated)
The proxy reads the browser request, creates a sampler, and then
executes the sampler.
It then returns the response back to the browser.
So even better would be if you could use something like Wireshark to
compare the HTTP sessions.
> Thanks
> Duncan
>
>
>
> --
> The University of Edinburgh is a charitable body, registered in
> Scotland, with registration number SC005336.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
Re: JMeter and Cosign SSO
Posted by sebb <se...@gmail.com>.
On 21/01/2009, Mahajan, Nitin <NM...@edmunds.com> wrote:
> I recorded JMeter scripts where we had SSO in front of application.
>
> Problem is that while recording when request reaches SSO server it gets
> redirected couple of times and protocol is changed to HTTPS. JMeter
> specification says that HTTP Proxy cannot record scripts for HTTPS
> protocol(since it can't decrypt https request coming from browser). I
> had to create my Request Samplers manually by capturing Firefox plugin
> called Tamper Data. I tried using Https Spoofing option in HTTP Proxy
> but it did not work for me.
JMeter has to intercept HTTP Responses and convert https: into http:
before sending them back to the browser; it's possible that this does
not work in all cases. Also if the same host is used for https and
http, then the spoofing regex has to be carefully chosen to ensure
that only the correct URLs are transformed.
If there is a publicly accessible site that does not work with
spoofing, perhaps someone can provide details so we can investigate
whether it is possible to fix the problem?
[Send the details privately if necessary.]
>
> Thanks,
>
> Nitin
>
>
> -----Original Message-----
> From: Duncan Davidson [mailto:ddavids1@staffmail.ed.ac.uk]
> Sent: Wednesday, January 21, 2009 2:54 AM
> To: jmeter-user@jakarta.apache.org
> Subject: JMeter and Cosign SSO
>
> Hi
>
> Does anyone have any experience using Jmeter to test websites protected
> with Cosign SSO? I am using the HTTP Proxy Server to record the test but
> it fails at Cosign as it says cookies must be enabled.
>
> Thanks
> Duncan
>
>
> --
> The University of Edinburgh is a charitable body, registered in
> Scotland, with registration number SC005336.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
RE: JMeter and Cosign SSO
Posted by "Mahajan, Nitin" <NM...@edmunds.com>.
I recorded JMeter scripts where we had SSO in front of application.
Problem is that while recording when request reaches SSO server it gets
redirected couple of times and protocol is changed to HTTPS. JMeter
specification says that HTTP Proxy cannot record scripts for HTTPS
protocol(since it can't decrypt https request coming from browser). I
had to create my Request Samplers manually by capturing Firefox plugin
called Tamper Data. I tried using Https Spoofing option in HTTP Proxy
but it did not work for me.
Thanks,
Nitin
-----Original Message-----
From: Duncan Davidson [mailto:ddavids1@staffmail.ed.ac.uk]
Sent: Wednesday, January 21, 2009 2:54 AM
To: jmeter-user@jakarta.apache.org
Subject: JMeter and Cosign SSO
Hi
Does anyone have any experience using Jmeter to test websites protected
with Cosign SSO? I am using the HTTP Proxy Server to record the test but
it fails at Cosign as it says cookies must be enabled.
Thanks
Duncan
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: jmeter-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jmeter-user-help@jakarta.apache.org