• Toll-free  888-665-8637
  • International  +1 717-220-0012
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

bvuser
#1 Posted : Tuesday, July 17, 2007 2:14:28 PM(UTC)
bvuser

Rank: Member

Joined: 4/10/2006(UTC)
Posts: 462

Are google checkout orders suppose to appear in the bvc order manager and get assigned an order number there?



I know there has been a lot of negative feedback on the way google checkout works and I personally do not like the whole 3 seconds for shipping rates either, but I do like the fact that there are currently no fees for accepting it. Problem is, none of our orders are imported into bvc and the bvc event log does not show any errors. The google integration log is showing that there are failed authorization attempts which has me confused and believing that I failed to set something up somewhere for googlecheckout.



The exact error showing in the google logs is:



We encountered an error trying to access your server at https://www.ourdomain.com/googlenotify.aspx -- the error we got is: Send failed with code: 401. Response body was: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <HTML><HEAD><TITLE>You are not authorized to view this page</TITLE> <META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252"> <STYLE type="text/css"> BODY { font: 8pt/12pt verdana } H1 { font: 13pt/15pt verdana } H2 { font: 8pt/12pt verdana } A:link { color: red } A:visited { color: maroon } </STYLE> </HEAD><BODY><TABLE width=500 border=0 cellspacing=10><TR><TD> <h1>You are not authorized to view this page</h1> You do not have permission to view this directory or page using the credentials that you supplied. <hr> <p>Please try the following:</p> <ul> <li>Contact the Web site administrator if you believe you should be able to view this directory or page.</li> <li>Click the <a href="javascript:location.reload()">Refresh</a> button to try again with different credentials.</li> </ul> <h2>HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.<br>Internet Information Services (IIS)</h2> <hr> <p>Technical Information (for support personnel)</p> <ul> <li>Go to <a href="http://go.microsoft.com/fwlink/?linkid=8180">Microsoft Product Support Services</a> and perform a title search for the words <b>HTTP</b> and <b>401</b>.</li> <li>open <b>IIS Help</b>, which is accessible in IIS Manager (inetmgr), and search for topics titled <b>Authentication</b>, <b>Access Control</b>, and <b>about Custom Error Messages</b>.</li> </ul> </TD></TR></TABLE></BODY></HTML>



If I just go to https://www.ourdomain.com/googlenotify.aspx if does not ask for any type of authorization and just throws an error because no xml data exists.



Any clue as to what may be causing this error?
Netriplex Corporation<br />
bvuser
#2 Posted : Thursday, July 19, 2007 3:17:46 PM(UTC)
bvuser

Rank: Member

Joined: 4/10/2006(UTC)
Posts: 462

No hints or suggestions on this issue?
Netriplex Corporation<br />
birdsafe
#3 Posted : Thursday, July 19, 2007 10:03:23 PM(UTC)
birdsafe

Rank: Member

Joined: 2/21/2007(UTC)
Posts: 1,113

For the three orders I had through it when I had it turned on, yes, they created orders with OrderIDs in the store and looked like just any other order, except for the fact that there was no shipping amount, simply a total -- shipping charges were blank, but the customer was charged for the total amount (not enough because GC used the backup flat rate method for shipping.
[email protected]
#4 Posted : Monday, July 23, 2007 3:42:41 PM(UTC)
everett@bvsoftware.com

Rank: Member

Joined: 3/8/2007(UTC)
Posts: 139

Hey Caplink,

I think you may have an issue with your server configuration. Double check the permissions applied to this file in particular.

Here is a link to a good article on this type of error:

http://support.microsoft.com/kb/907273

Thanks,
Everett Comstock

BV Software
bvuser
#5 Posted : Monday, July 23, 2007 6:43:46 PM(UTC)
bvuser

Rank: Member

Joined: 4/10/2006(UTC)
Posts: 462

Already checked that. It is an invalid user error. The problem is the googlenotify.aspx file obviosuly runs under the same site as the rest of the bvc deployment, so it is using that same anonymous user credentials that each user that borwses the store and palces orders uses. All of those functions work without issue. The only place a problem exists is with the googlenotify.aspx file.

Granted, I've mostly ignored this problem becauses we only receive 1 or 2 google orders per day, but it does get annoying.

I'm hoping to eventually get around to checking the source of the googlenotify.aspx page and see if some type of impersanation is attempted in it that would be resulting in unauthorized credentials or what the actual cause of the problem is.
Netriplex Corporation<br />
Andy Miller
#6 Posted : Monday, July 23, 2007 10:08:37 PM(UTC)
Andy Miller

Rank: Member

Joined: 11/5/2003(UTC)
Posts: 2,136

Was thanked: 1 time(s) in 1 post(s)
Google sends the request with a HTTP Basic authentication header containing the Merchant ID as the username and Merchant Key as the password.

http://code.google.com/apis/checkout/developer/index.html#handling_notifications

It looks like your server is configured to reject the request if it does not recognize the username. Try configuring it to completely ignore the authentication header by disabling all Authenticated Access to the page (keep only Anonymous Access).
Andy Miller
Structured Solutions

Shipper 3 - High Velocity Shipment Processing
MitchA
#7 Posted : Monday, July 23, 2007 10:08:41 PM(UTC)
MitchA

Rank: Member

Joined: 3/3/2006(UTC)
Posts: 1,737

Any chance you site is being spoofed? Perhaps a bot looking for soft targets for fraud?
Optimists invent airplanes,
Pessimists buy parachutes.
bvuser
#8 Posted : Tuesday, July 24, 2007 9:27:26 AM(UTC)
bvuser

Rank: Member

Joined: 4/10/2006(UTC)
Posts: 462

Andy hit this one on the head. I had no clue that they were attempting to include credentials somewhere. While I never checked the googlecheckout api manual, I did search the entire "admin" site trying to see if there was a place to setup credentials and found known, so I assumed it as just trying an anonymous request.

Thanks Andy.
Netriplex Corporation<br />
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

©2025 Develisys. All rights reserved.
  • Toll-free  888-665-8637
  • International  +1 717-220-0012