How to Authenticate using SOAP? followed the documentation but without success

MIP
, , , ,
1

We have Milestone corporate and I followed the instruction in to login using SOAP Requests. https://doc.developer.milestonesys.com/html/index.html?base=reference/architecture/product_support.html&tree=tree_3.html without sucess.

I used the same username/password we used to login into XProtect Management Client 2018 r1 with basic authentication.

Below you can see the HTTP messages during our test captured from Wireshark.

We found in the developer forms question regarding this and they pointed to run your samples and capture the network to see what it was sent. We can’t see the content of the message because your samples are sending the data in https and the data is encrypted.

POST /ServerAPI/ServerCommandService.asmx HTTP/1.1
Content-Length: 399
Content-Type: text/xml; charset=UTF-8
Host: 192.168.1.121
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.2.1 (java 1.5)
 
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <Login xmlns="http://videoos.net/2/XProtectCSServerCommand">
      <instanceId>fc0352e7-6a7a-418b-ad1d-2f16c09adddf</instanceId>
    </Login>
  </soap:Body>
</soap:Envelope>
 
 
HTTP/1.1 401 Unauthorized
Content-Type: text/html
Server: Microsoft-IIS/10.0
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
Date: Wed, 30 Jan 2019 14:41:20 GMT
Content-Length: 1293
 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
 <div class="content-container"><fieldset>
  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
 </fieldset></div>
</div>
</body>
</html>
 
 
 
POST /ServerAPI/ServerCommandService.asmx HTTP/1.1
Content-Length: 399
Content-Type: text/xml; charset=UTF-8
Host: 192.168.1.121
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.2.1 (java 1.5)
Authorization: NTLM TlRMTVNTUAABAAAANQIIIAAAAAAgAAAAAAAAACAAAAA=
 
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <Login xmlns="http://videoos.net/2/XProtectCSServerCommand">
      <instanceId>fc0352e7-6a7a-418b-ad1d-2f16c09adddf</instanceId>
    </Login>
  </soap:Body>
</soap:Envelope>
 
 
HTTP/1.1 401 Unauthorized
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
WWW-Authenticate: NTLM TlRMTVNTUAACAAAAHgAeADgAAAA1AooimUpEAIMDDvcAAAAAAAAAAJgAmABWAAAACgDuQgAAAA9VAFMARQBSAFQARQBDAC0AVQBRADkARwBTAE4AOAACAB4AVQBTAEUAUgBUAEUAQwAtAFUAUQA5AEcAUwBOADgAAQAeAFUAUwBFAFIAVABFAEMALQBVAFEAOQBHAFMATgA4AAQAHgBVAFMARQBSAFQARQBDAC0AVQBRADkARwBTAE4AOAADAB4AVQBTAEUAUgBUAEUAQwAtAFUAUQA5AEcAUwBOADgABwAIADODod2puNQBAAAAAA==
Date: Wed, 30 Jan 2019 14:41:20 GMT
Content-Length: 341
 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Not Authorized</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Not Authorized</h2>
<hr><p>HTTP Error 401. The requested resource requires user authentication.</p>
</BODY></HTML>
 
 
POST /ServerAPI/ServerCommandService.asmx HTTP/1.1
Content-Length: 399
Content-Type: text/xml; charset=UTF-8
Host: 192.168.1.121
Connection: Keep-Alive
User-Agent: Apache-HttpClient/4.2.1 (java 1.5)
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAADEAMQAWAAAAAAAAAAcAQAACgAKABwBAAAAAAAAJgEAAAAAAAAmAQAANQIIIE6DWVOK83vEbmxJx1sO/JoDJUHcmTyCNnD2UKRqcfw909n3mQX75vEBAQAAAAAAAPD7/JepuNQBAyVB3Jk8gjYAAAAAAgAeAFUAUwBFAFIAVABFAEMALQBVAFEAOQBHAFMATgA4AAEAHgBVAFMARQBSAFQARQBDAC0AVQBRADkARwBTAE4AOAAEAB4AVQBTAEUAUgBUAEUAQwAtAFUAUQA5AEcAUwBOADgAAwAeAFUAUwBFAFIAVABFAEMALQBVAFEAOQBHAFMATgA4AAcACAAzg6HdqbjUAQAAAABhAGQAbQBpAG4A
 
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <Login xmlns="http://videoos.net/2/XProtectCSServerCommand">
      <instanceId>fc0352e7-6a7a-418b-ad1d-2f16c09adddf</instanceId>
    </Login>
  </soap:Body>
</soap:Envelope>
 
 
 
HTTP/1.1 401 Unauthorized
Content-Type: text/html
Server: Microsoft-IIS/10.0
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
Date: Wed, 30 Jan 2019 14:41:20 GMT
Content-Length: 1293
 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
 <div class="content-container"><fieldset>
  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
 </fieldset></div>
</div>
</body>
</html>
2

R3 not r1. XProtect Management Client 2018 R3

3

I am sorry that the Wireshark troubleshooting is not leading you to a solution.

Please try to look at the code for the TCPVideoViewer sample. Note how it is very different using basic authentication users. There is a new improved version of the sample.

http://download.milestonesys.com/MIPSDK/Samples/protocol_MIPSDK2019R1_BetaSamples.zip

Are you aware of the introduction to SOAP protocols page? It is relatively new. I hope it might be useful.

https://doc.developer.milestonesys.com/html/index.html?base=gettingstarted/intro_soap_protocols.html&tree=tree_3.html