Specify HTTP Credentials in route assertion using Basic Authorization or NTLM Authorization

Products

• CA API Gateway

Issue/Introduction

From https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/10-0/policy-assertions/assertion-palette/message-routing-assertions/route-via-http-s-assertion.html

Configuring the [Authentication] Tab-> Specify HTTP Credentials

We can see it is a "Select this option for basic HTTP authentication. You are prompted to enter your User Name, Password, NTLM Domain, and NTLM Host."

Is this Basic Authorization or NTLM Authorization?

 

 

Environment

Release : 10.0

Component :

Resolution

It can be used for either. 

If you supply just a user id and password and use http plain (Port 80/8080) in a sniffer you can see a Authentication: Basic header passed.

If you add a NTLM Domain/NTLM in a tcpdump the basic auth header is no longer present. And in that sniffer capture if you search for ntlm I find a packet related to NTLM which is not present in the original basic authentication capture file.