UtterAccess.com
X   Site Message
(Message will auto close in 2 seconds)

Welcome to UtterAccess! Please ( Login   or   Register )

Custom Search
 
   Reply to this topicStart new topic
> Strange Html Authentication - Xml?    
 
   
Blacksmith
post Jun 29 2016, 07:10 AM
Post#1



Posts: 87
Joined: 28-November 06



Hi

I try to pass my credentials to my heating controller (RC 7000 developed by TEM). It is may aim to download collected data that is stored on this controller as .CSV files.

Till now I was not even able to pass my credentials, as I do not understand how this works. As soon as I enter the URL a box will pop up. The content of this box looks different in Google-Chrome and in IE (r.g. Title, text) - so I suppose this is not HTML! Attached File  2016_06_29_12_32_03_416.png ( 27.99K )Number of downloads: 5
Attached File  2016_06_29_12_30_18_743.png ( 28.97K )Number of downloads: 8

I can not see or analyze the HTML code of the box using developer tools. If I press <Cancel> the following code will be shown:

CODE
<?xml version="1.0"?>
-<SOAP-ENV:Envelope xmlns:ns="http://ws01.lom.ch/soap/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
-<SOAP-ENV:Body>
-<SOAP-ENV:Fault>
<faultcode>SOAP-ENV:Client</faultcode>
<faultstring>Error 401</faultstring>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>


1) What type of logon is this? Maybe I can find stuff in the web to solve 2) if I know...
2) How can I automate the logon to this website?
Go to the top of the page
 
Doug Steele
post Jun 29 2016, 12:25 PM
Post#2


UtterAccess VIP
Posts: 21,498
Joined: 8-January 07
From: St. Catharines, ON (Canada)


Have you tried contacting the vendor for instructions? This would appear to be their contact information.
Go to the top of the page
 
Blacksmith
post Jul 1 2016, 09:20 AM
Post#3



Posts: 87
Joined: 28-November 06



TEM is in wholsale for heating manufacturers. As I know from other (house-automation-)forums the company has a very bad reputation about revealing information to third-parties.

For this reason I decided to not yet ask them - you never know what information you need later! I suppose this dialog and information about how to automate must be known to someone...


I remember to have seen this logon somewhere else, but can not remember right now where this was...
Go to the top of the page
 
Doug Steele
post Jul 1 2016, 09:51 AM
Post#4


UtterAccess VIP
Posts: 21,498
Joined: 8-January 07
From: St. Catharines, ON (Canada)


Take a look at https://www.muropa.ch/downloads/BA_TEM-mobi...14_DeEnFrIt.pdf

It says "Username and password were both assigned while installing the RC7000"
Go to the top of the page
 
Blacksmith
post Jul 7 2016, 11:39 AM
Post#5



Posts: 87
Joined: 28-November 06



Doug, I do have user name and password (the RC7000 is in my cellar)! I can easily access it by typing in the credentials.

But I need to automate the sign on process in order to download without user intervention (automatically) some .CSV for further evaluation. As the data will be stored in an Access database I want to use VBA to log on and to download. This is nothing RC7000 specific. In fact I found the same type of authorization on my dd-wrt router.

The problem is, that I have no idea what type of authorization is used. Therefore I can not search for solutions.
Go to the top of the page
 
theDBguy
post Jul 7 2016, 11:50 AM
Post#6


Access Wiki and Forums Moderator
Posts: 71,233
Joined: 19-June 07
From: SunnySandyEggo


Hi. Pardon me for jumping in but I wonder if you can use a HttpRequest Class to login to the controller.
Go to the top of the page
 
Blacksmith
post Jul 8 2016, 07:06 AM
Post#7



Posts: 87
Joined: 28-November 06



Hi

Thank you for your answer. I had a quick look at 'HttpRequest Class'.

I currently see no way to use this, as I can not deduct values for 'actionType', 'targetWord' and 'postData' from my manual calls to my controller. I can not see those, as only the mentioned box pops up and I never see actual data transferred to the controller.

Is there any way to find out what parameters are exchanged between the box and the controller? Could a tool like SockSpy() be helpful?
Go to the top of the page
 
cheekybuddha
post Jul 8 2016, 09:48 AM
Post#8


UtterAccess VIP
Posts: 9,278
Joined: 6-December 03
From: Telegraph Hill


Hi,

Since this is local, the security implications shouldn't be too great!

Try as the URL:
CODE
https://username:password@192.168.56.114/RC7000.html?etc

If that doesn't work, try plain http://

hth,

d
Go to the top of the page
 
Blacksmith
post Jul 11 2016, 08:09 AM
Post#9



Posts: 87
Joined: 28-November 06



Hi

Thank you! I think this works! I replaced username and password by the actual values and had to use http:// and was able to open the controllers webpage directly. Can you tell me how you got the idea to try it this way?

In the next step I'll try to automate this in VBA and download the .CSV files.


To be precise: This worked in Google Chrome and Opera 40. It did not work in IE 11 and Opera 12.17. Not working in IE 11 might become a problem, as I thought about automating IE do download those files....
Go to the top of the page
 
Marsupilami72
post Jul 11 2016, 09:56 AM
Post#10



Posts: 429
Joined: 17-April 12
From: Germany


That is the usual way to use basic http authentication...

Do you have any special characters in your username or password?
Go to the top of the page
 


Custom Search
RSSSearch   Top   Lo-Fi    17th December 2017 - 10:53 AM