Repository navigation
Netgear CM: Genie sign-in for CM1000 firmware V7.01.01 - #1369
Merged
Merged
Conversation
CM1000 firmware V7.01.01 gates DocsisStatus.asp behind the Netgear Genie
login: the page is a 200 that redirects to /GenieLogin.asp, which carries a
per-load, unquoted webToken. Credentials POST to /goform/GenieLogin, the
session is bound to the source IP (no cookie), and the login's 302 carries
non-header bytes after the header block. The provider only knew Basic and
the CM2050V's /goform/Login, so every attempt failed and the CM2050V POST's
connection reset was the error shown.
- Attempts now carry an auth style (Basic, FormLogin, GenieLogin) instead
of a form-login flag. With credentials, the Genie login runs on the .asp
page and the CM2050V login on the .htm page. The login for the configured
extension goes last, so a total failure surfaces that model's error.
- The Genie flow is raw HTTP/1.0 via LenientHttp throughout. It reuses a
live session (one GET when already signed in), reads webToken and the
form action with HtmlAgilityPack, and reports a login that still does
not open the status page as a 401 ("Authentication failed").
- A modem without a Genie form (404 or no webToken) returns the page it
reached, so the matrix moves on. A 404 status page ends the attempt
before any Genie request. An empty reply (reset/close before any byte)
is a transport error.
Tests run the full matrix against stateful loopback fakes of the CM1000
V7.01.01 and the CM2050V, plus a Basic-auth modem: Genie sign-in, cached
combo with a live session, expired session with a fresh token, wrong
password, no credentials, and the CM2050V and Basic models resolving as
before without touching the Genie login.
…server request log
3 tasks done
…login error, rewrap a doc comment
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Monitoring - Cable Modem Stats
This ships in v2.11.1-preview1, and the CM1000 issue closes with that release.
How it works
Tests
Loopback fakes of the CM1000 V7.01.01, the CM2050V and a Basic-auth modem run the full attempt matrix:
Parser tests cover quoted and unquoted tokens and every form-action shape.