archiva-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Szelag, Lukasz" <lukasz.sze...@baml.com>
Subject RE: NTLM proxy authentication no longer works in Archiva 1.4-M2
Date Fri, 03 Feb 2012 14:06:42 GMT
Thanks for the suggestion but I will stick to CNTLM for now since it works for me.

Regards,
Lukasz

-----Original Message-----
From: Olivier Lamy [mailto:olamy@apache.org] 
Sent: Thursday, February 02, 2012 11:49 AM
To: users@archiva.apache.org
Subject: Re: NTLM proxy authentication no longer works in Archiva 1.4-M2

Hello,
For performance reason we switch to wagon http (based on apache http client).
This doesn't support NTLM see
http://hc.apache.org/httpcomponents-client-ga/ntlm.html.
What you can try is to remove wagon-http-2.*.jar from WEB-INF/lib and replace with the lightweight
one here:
http://repo.maven.apache.org/maven2/org/apache/maven/wagon/wagon-http-lightweight/2.2/

Not tested :-)


2012/2/2 Szelag, Lukasz <lukasz.szelag@baml.com>:
> I have been struggling recently to make the latest Archiva (1.4-M2) work through a corporate
proxy without any success. I upgraded existing Archiva 1.3.5 installation where this problem
didn't occur in respect to HTTP URLs.
>
> From below log it appears that "Proxy authentication error: Credentials cannot be used
for NTLM authentication" is the root cause. Does this mean that NTLM proxies are not supported?
Was NTLM support dropped between Archiva 1.3.5 (where the same works) and 1.4-M2?
>
> Thanks,
> Lukasz
>
>
> 2012-02-02 10:46:48,582 [qtp1120643297-21] DEBUG 
> org.apache.archiva.proxy.common.DebugTransferListener  - 
> transferInitiated for resource org/codeh 
> aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url 
> http://repo1.maven.org/maven2/
> 2012-02-02 10:46:48,834 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "GET
http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1.
> 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Cache-control:
no-cache[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Cache-store:
no-store[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Pragma:
no-cache[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Expires:
0[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Accept-Encoding:
gzip[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Host:
repo1.maven.org[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Proxy-Connection:
Keep-Alive[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "[\r][\n]"
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> GET 
> http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/
> 1.1/plexus-utils-1.1.pom HTTP/1.1
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Cache-control: no-cache
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Cache-store: no-store
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Pragma: no-cache
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Expires: 0
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Accept-Encoding: gzip
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Host: repo1.maven.org
> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Proxy-Connection: Keep-Alive
> 2012-02-02 10:46:49,116 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "HTTP/1.1
407 Proxy Authentication Required[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Proxy-Authenticate:
NTLM[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Proxy-Authenticate:
BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Cache-Control:
no-cache[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Pragma:
no-cache[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Content-Type:
text/html; charset=utf-8[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Proxy-Connection:
close[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Set-Cookie:
BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Connection:
close[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Content-Length:
895[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "[\r][\n]"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << HTTP/1.1 407 Proxy Authentication 
> Required
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Proxy-Authenticate: NTLM
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers  - <<
Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Cache-Control: no-cache
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Pragma: no-cache
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Content-Type: text/html; charset=utf-8
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Proxy-Connection: close
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; 
> Path=/
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Connection: close
> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Content-Length: 895
> 2012-02-02 10:46:49,157 [qtp1120643297-21] ERROR 
> org.apache.http.client.protocol.RequestProxyAuthentication  - Proxy 
> authentication error: Credent ials cannot be used for NTLM 
> authentication: org.apache.http.auth.UsernamePasswordCredentials
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "GET
http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1.
> 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Cache-control:
no-cache[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Cache-store:
no-store[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Pragma:
no-cache[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Expires:
0[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Accept-Encoding:
gzip[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Host:
repo1.maven.org[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Proxy-Connection:
Keep-Alive[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "Cookie:
BCSI-CS-41D6D8BAA7362CE4=2[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  - >> "[\r][\n]"
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> GET 
> http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/
> 1.1/plexus-utils-1.1.pom HTTP/1.1
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Cache-control: no-cache
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Cache-store: no-store
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Pragma: no-cache
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Expires: 0
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Accept-Encoding: gzip
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Host: repo1.maven.org
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Proxy-Connection: Keep-Alive
> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - >> Cookie: BCSI-CS-41D6D8BAA7362CE4=2
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "HTTP/1.1
407 Proxy Authentication Required[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Proxy-Authenticate:
NTLM[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Proxy-Authenticate:
BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Cache-Control:
no-cache[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Pragma:
no-cache[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Content-Type:
text/html; charset=utf-8[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Proxy-Connection:
close[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Set-Cookie:
BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Connection:
close[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "Content-Length:
895[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  - << "[\r][\n]"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << HTTP/1.1 407 Proxy Authentication 
> Required
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Proxy-Authenticate: NTLM
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers  - <<
Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Cache-Control: no-cache
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Pragma: no-cache
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Content-Type: text/html; charset=utf-8
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Proxy-Connection: close
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; 
> Path=/
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Connection: close
> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG 
> org.apache.http.headers  - << Content-Length: 895
> 2012-02-02 10:46:49,197 [qtp1120643297-21] DEBUG 
> org.apache.archiva.proxy.common.DebugTransferListener  - wagon debug http://repo1.maven.org/maven
2/org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom - Status code: 407, ReasonPhrase:Proxy
Authentication Required.
> 2012-02-02 10:46:49,198 [qtp1120643297-21] DEBUG 
> org.apache.archiva.proxy.common.DebugTransferListener  - transferError 
> for resource [org/codehaus 
> /plexus/plexus-utils/1.1/plexus-utils-1.1.pom, 
> http://repo1.maven.org/maven2/] on repository url 
> org.apache.maven.wagon.authorization.Authorizatio
> nException: Not authorized by proxy, ReasonPhrase:Proxy Authentication Required.
> 2012-02-02 10:46:49,203 [qtp1120643297-21] WARN  
> org.apache.archiva.proxy.DefaultRepositoryProxyConnectors  - Transfer 
> error from repository "cent ral" for artifact 
> org.codehaus.plexus:plexus-utils:1.1::pom, continuing to next repository. Error message:
Download failure on resource [http://re po1.maven.org/maven2//org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom]:Not
authorized by proxy, ReasonPhrase:Proxy Authentication Requir ed.
> 2012-02-02 10:46:49,207 [qtp1120643297-21] DEBUG 
> org.apache.archiva.proxy.common.DebugTransferListener  - 
> transferInitiated for resource org/codeh 
> aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url 
> http://download.java.net/maven/2/
>
> ----------------------------------------------------------------------
> This message w/attachments (message) is intended solely for the use of the intended recipient(s)
and may contain information that is privileged, confidential or proprietary. If you are not
an intended recipient, please notify the sender, and then please delete and destroy all copies
and attachments, and be advised that any review or dissemination of, or the taking of any
action in reliance on, the information contained in or attached to this message is prohibited.
> Unless specifically indicated, this message is not an offer to sell or a solicitation
of any investment products or other financial product or service, an official confirmation
of any transaction, or an official statement of Sender. Subject to applicable law, Sender
may intercept, monitor, review and retain e-communications (EC) traveling through its networks/systems
and may produce any such EC to regulators, law enforcement, in litigation and as required
by law.
> The laws of the country of each sender/recipient may impact the handling of EC, and EC
may be archived, supervised and produced in countries other than the country in which you
are located. This message cannot be guaranteed to be secure or free of errors or viruses.
>
> References to "Sender" are references to any subsidiary of Bank of America Corporation.
Securities and Insurance Products: * Are Not FDIC Insured * Are Not Bank Guaranteed * May
Lose Value * Are Not a Bank Deposit * Are Not a Condition to Any Banking Service or Activity
* Are Not Insured by Any Federal Government Agency. Attachments that are part of this EC may
have additional important disclosures and disclaimers, which you should read. This message
is subject to terms available at the following link:
> http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender you consent to
the foregoing.



--
Olivier Lamy
Talend: http://coders.talend.com
http://twitter.com/olamy | http://linkedin.com/in/olamy

----------------------------------------------------------------------
This message w/attachments (message) is intended solely for the use of the intended recipient(s)
and may contain information that is privileged, confidential or proprietary. If you are not
an intended recipient, please notify the sender, and then please delete and destroy all copies
and attachments, and be advised that any review or dissemination of, or the taking of any
action in reliance on, the information contained in or attached to this message is prohibited.

Unless specifically indicated, this message is not an offer to sell or a solicitation of any
investment products or other financial product or service, an official confirmation of any
transaction, or an official statement of Sender. Subject to applicable law, Sender may intercept,
monitor, review and retain e-communications (EC) traveling through its networks/systems and
may produce any such EC to regulators, law enforcement, in litigation and as required by law.

The laws of the country of each sender/recipient may impact the handling of EC, and EC may
be archived, supervised and produced in countries other than the country in which you are
located. This message cannot be guaranteed to be secure or free of errors or viruses. 

References to "Sender" are references to any subsidiary of Bank of America Corporation. Securities
and Insurance Products: * Are Not FDIC Insured * Are Not Bank Guaranteed * May Lose Value
* Are Not a Bank Deposit * Are Not a Condition to Any Banking Service or Activity * Are Not
Insured by Any Federal Government Agency. Attachments that are part of this EC may have additional
important disclosures and disclaimers, which you should read. This message is subject to terms
available at the following link: 
http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender you consent to the
foregoing.

Mime
View raw message