archiva-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Olivier Lamy <ol...@apache.org>
Subject Re: NTLM proxy authentication no longer works in Archiva 1.4-M2
Date Fri, 03 Feb 2012 09:11:21 GMT
I agree.
I recently moved trunk to use spring for wagon "lookup".
Can be easy to use ligthhttp wagon if ntlm required.
Can you load a jira ? BTW will require a new field in configuration

2012/2/3 Brett Porter <brett@apache.org>:
> Maybe we should have an option in the proxy setup to indicate if it requires NTLM, and
fall back to the JDK mechanism if so?
>
> - Brett
>
> On 03/02/2012, at 3:49 AM, Olivier Lamy wrote:
>
>> Hello,
>> For performance reason we switch to wagon http (based on apache http client).
>> This doesn't support NTLM see
>> http://hc.apache.org/httpcomponents-client-ga/ntlm.html.
>> What you can try is to remove wagon-http-2.*.jar from WEB-INF/lib and
>> replace with the lightweight one here:
>> http://repo.maven.apache.org/maven2/org/apache/maven/wagon/wagon-http-lightweight/2.2/
>>
>> Not tested :-)
>>
>>
>> 2012/2/2 Szelag, Lukasz <lukasz.szelag@baml.com>:
>>> I have been struggling recently to make the latest Archiva (1.4-M2) work through
a corporate proxy without any success. I upgraded existing Archiva 1.3.5 installation where
this problem didn't occur in respect to HTTP URLs.
>>>
>>> From below log it appears that "Proxy authentication error: Credentials cannot
be used for NTLM authentication" is the root cause. Does this mean that NTLM proxies are not
supported? Was NTLM support dropped between Archiva 1.3.5 (where the same works) and 1.4-M2?
>>>
>>> Thanks,
>>> Lukasz
>>>
>>>
>>> 2012-02-02 10:46:48,582 [qtp1120643297-21] DEBUG org.apache.archiva.proxy.common.DebugTransferListener
 - transferInitiated for resource org/codeh
>>> aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url http://repo1.maven.org/maven2/
>>> 2012-02-02 10:46:48,834 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1.
>>> 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Cache-control: no-cache[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Cache-store: no-store[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Pragma: no-cache[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Expires: 0[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Accept-Encoding: gzip[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Host: repo1.maven.org[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Proxy-Connection: Keep-Alive[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"[\r][\n]"
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/
>>> 1.1/plexus-utils-1.1.pom HTTP/1.1
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Cache-control: no-cache
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Cache-store: no-store
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Pragma: no-cache
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Expires: 0
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Accept-Encoding: gzip
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Host: repo1.maven.org
>>> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Proxy-Connection: Keep-Alive
>>> 2012-02-02 10:46:49,116 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"HTTP/1.1 407 Proxy Authentication Required[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Proxy-Authenticate: NTLM[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Cache-Control: no-cache[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Pragma: no-cache[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Content-Type: text/html; charset=utf-8[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Proxy-Connection: close[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Connection: close[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Content-Length: 895[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"[\r][\n]"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< HTTP/1.1 407 Proxy Authentication Required
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Proxy-Authenticate: NTLM
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Cache-Control: no-cache
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Pragma: no-cache
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Content-Type: text/html; charset=utf-8
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Proxy-Connection: close
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Connection: close
>>> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Content-Length: 895
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] ERROR org.apache.http.client.protocol.RequestProxyAuthentication
 - Proxy authentication error: Credent
>>> ials cannot be used for NTLM authentication: org.apache.http.auth.UsernamePasswordCredentials
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1.
>>> 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Cache-control: no-cache[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Cache-store: no-store[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Pragma: no-cache[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Expires: 0[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Accept-Encoding: gzip[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Host: repo1.maven.org[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Proxy-Connection: Keep-Alive[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"Cookie: BCSI-CS-41D6D8BAA7362CE4=2[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >>
"[\r][\n]"
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/
>>> 1.1/plexus-utils-1.1.pom HTTP/1.1
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Cache-control: no-cache
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Cache-store: no-store
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Pragma: no-cache
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Expires: 0
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Accept-Encoding: gzip
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Host: repo1.maven.org
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Proxy-Connection: Keep-Alive
>>> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers  -
>> Cookie: BCSI-CS-41D6D8BAA7362CE4=2
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"HTTP/1.1 407 Proxy Authentication Required[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Proxy-Authenticate: NTLM[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Cache-Control: no-cache[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Pragma: no-cache[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Content-Type: text/html; charset=utf-8[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Proxy-Connection: close[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Connection: close[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"Content-Length: 895[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - <<
"[\r][\n]"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< HTTP/1.1 407 Proxy Authentication Required
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Proxy-Authenticate: NTLM
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Cache-Control: no-cache
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Pragma: no-cache
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Content-Type: text/html; charset=utf-8
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Proxy-Connection: close
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Connection: close
>>> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  -
<< Content-Length: 895
>>> 2012-02-02 10:46:49,197 [qtp1120643297-21] DEBUG org.apache.archiva.proxy.common.DebugTransferListener
 - wagon debug http://repo1.maven.org/maven
>>> 2/org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom - Status code: 407,
ReasonPhrase:Proxy Authentication Required.
>>> 2012-02-02 10:46:49,198 [qtp1120643297-21] DEBUG org.apache.archiva.proxy.common.DebugTransferListener
 - transferError for resource [org/codehaus
>>> /plexus/plexus-utils/1.1/plexus-utils-1.1.pom, http://repo1.maven.org/maven2/]
on repository url org.apache.maven.wagon.authorization.Authorizatio
>>> nException: Not authorized by proxy, ReasonPhrase:Proxy Authentication Required.
>>> 2012-02-02 10:46:49,203 [qtp1120643297-21] WARN  org.apache.archiva.proxy.DefaultRepositoryProxyConnectors
 - Transfer error from repository "cent
>>> ral" for artifact org.codehaus.plexus:plexus-utils:1.1::pom, continuing to next
repository. Error message: Download failure on resource [http://re
>>> po1.maven.org/maven2//org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom]:Not
authorized by proxy, ReasonPhrase:Proxy Authentication Requir
>>> ed.
>>> 2012-02-02 10:46:49,207 [qtp1120643297-21] DEBUG org.apache.archiva.proxy.common.DebugTransferListener
 - transferInitiated for resource org/codeh
>>> aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url http://download.java.net/maven/2/
>>>
>>> ----------------------------------------------------------------------
>>> This message w/attachments (message) is intended solely for the use of the intended
recipient(s) and may contain information that is privileged, confidential or proprietary.
If you are not an intended recipient, please notify the sender, and then please delete and
destroy all copies and attachments, and be advised that any review or dissemination of, or
the taking of any action in reliance on, the information contained in or attached to this
message is prohibited.
>>> Unless specifically indicated, this message is not an offer to sell or a solicitation
of any investment products or other financial product or service, an official confirmation
of any transaction, or an official statement of Sender. Subject to applicable law, Sender
may intercept, monitor, review and retain e-communications (EC) traveling through its networks/systems
and may produce any such EC to regulators, law enforcement, in litigation and as required
by law.
>>> The laws of the country of each sender/recipient may impact the handling of EC,
and EC may be archived, supervised and produced in countries other than the country in which
you are located. This message cannot be guaranteed to be secure or free of errors or viruses.
>>>
>>> References to "Sender" are references to any subsidiary of Bank of America Corporation.
Securities and Insurance Products: * Are Not FDIC Insured * Are Not Bank Guaranteed * May
Lose Value * Are Not a Bank Deposit * Are Not a Condition to Any Banking Service or Activity
* Are Not Insured by Any Federal Government Agency. Attachments that are part of this EC may
have additional important disclosures and disclaimers, which you should read. This message
is subject to terms available at the following link:
>>> http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender you consent
to the foregoing.
>>
>>
>>
>> --
>> Olivier Lamy
>> Talend: http://coders.talend.com
>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>
> --
> Brett Porter
> brett@apache.org
> http://brettporter.wordpress.com/
> http://au.linkedin.com/in/brettporter
> http://twitter.com/brettporter
>
>
>
>
>



-- 
Olivier Lamy
Talend: http://coders.talend.com
http://twitter.com/olamy | http://linkedin.com/in/olamy

Mime
View raw message