Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 10851] New: [PATCH] HTTP Dissector: Add CitrixAGBasic authentication

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	10851
Summary	[PATCH] HTTP Dissector: Add CitrixAGBasic authentication
Product	Wireshark
Version	Git
Hardware	All
OS	All
Status	UNCONFIRMED
Severity	Enhancement
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	uh@heilmeier.eu

Created attachment 13387 [details]
GET request with CitrixAGBasic auth

Build Information:
TShark (Wireshark) 1.99.2 (v1.99.2rc0-635-geb8436e from unknown)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with libpcap, without POSIX capabilities, without libnl, with
libz 1.2.7, with GLib 2.32.4, with SMI 0.4.8, without c-ares, without ADNS,
with
Lua 5.2, with GnuTLS 2.12.20, with Gcrypt 1.5.0, without Kerberos, without
GeoIP.

Running on Linux 3.2.0-4-686-pae, with locale en_GB.UTF-8, with libpcap version
1.3.0, with libz 1.2.7, with GnuTLS 2.12.20, with Gcrypt 1.5.0.

Built using gcc 4.7.2.
--
Citrix uses a proprietary authentication schema called CitrixAGBasic for their
StoreFront/Web Interface product.

The Header looks like:
Authorization: CitrixAGBasic username="dGVzdHVzZXI=";
domain="dGVzdGRvbWFpbg=="; password="c2VjcmV0";
AGESessionId="YzI0NmRkMmFmYmE5ZTk5M2I5ZDRkN2UwYzYzZWExN2U="

This patch (pushed to Gerrit) enhance the HTTP dissector to decode this
authentication data.

Due to non-discolsure I can only provide a faked GET request as a pcap capture
(attached to this bug).

---

      You are receiving this mail because:

• You are watching all bug changes.