archiva-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Olivier Lamy <ol...@apache.org>
Subject Re: NTLM proxy authentication no longer works in Archiva 1.4-M2
Date Mon, 06 Feb 2012 10:50:42 GMT
For convenience I have configured jenkins to display links to
downloable artifacts:
https://builds.apache.org/view/A-F/view/Archiva/job/archiva-all-maven-3.x-jdk-1.6/

It could be friendly if you could test with your env :-)

2012/2/5 Olivier Lamy <olamy@apache.org>:
> Hello,
> That's should be fix now on trunk.
> There is now a new option to check when defining a proxy ('use ntlm' checkbox).
>
> You can build trunk yourself or use a build from jenkins (see
> https://builds.apache.org/view/A-F/view/Archiva/job/archiva-all-maven-3.x-jdk-1.6/lastBuild/org.apache.archiva$archiva-jetty/
> if there is a running build use the previous build button)
>
> Could you test with your env ?
>
> Thanks,
> --
> Olivier Lamy
> Talend: http://coders.talend.com
> http://twitter.com/olamy | http://linkedin.com/in/olamy
>
>
> 2012/2/4 Olivier Lamy <olamy@apache.org>:
>> Thanks.
>> I will try to fix that early next week and ask you to test on your env.
>>
>> --
>> Olivier
>>
>> Le 3 févr. 2012 20:18, "Szelag, Lukasz" <lukasz.szelag@baml.com> a écrit :
>>
>>> New JIRA has been created (http://jira.codehaus.org/browse/MRM-1599).
>>>
>>> -----Original Message-----
>>> From: Brett Porter [mailto:brett@porterclan.net] On Behalf Of Brett Porter
>>> Sent: Thursday, February 02, 2012 6:49 PM
>>> To: users@archiva.apache.org
>>> Subject: Re: NTLM proxy authentication no longer works in Archiva 1.4-M2
>>>
>>> Thanks for the report - would you mind filing it in JIRA
>>> (http://jira.codehaus.org/browse/MRM) so that you'll know when it has been
>>> resolved?
>>>
>>> 1.4-M2 switched to a new HTTP library, which is the likely cause of this.
>>>
>>> - Brett
>>>
>>> On 03/02/2012, at 2:57 AM, Szelag, Lukasz wrote:
>>>
>>> > I have been struggling recently to make the latest Archiva (1.4-M2) work
>>> > through a corporate proxy without any success. I upgraded existing Archiva
>>> > 1.3.5 installation where this problem didn't occur in respect to HTTP URLs.
>>> >
>>> > From below log it appears that "Proxy authentication error: Credentials
>>> > cannot be used for NTLM authentication" is the root cause. Does this mean
>>> > that NTLM proxies are not supported? Was NTLM support dropped between
>>> > Archiva 1.3.5 (where the same works) and 1.4-M2?
>>> >
>>> > Thanks,
>>> > Lukasz
>>> >
>>> >
>>> > 2012-02-02 10:46:48,582 [qtp1120643297-21] DEBUG
>>> > org.apache.archiva.proxy.common.DebugTransferListener  -
>>> > transferInitiated for resource org/codeh
>>> > aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url
>>> > http://repo1.maven.org/maven2/
>>> > 2012-02-02 10:46:48,834 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1.
>>> > 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Cache-control: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Cache-store: no-store[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Pragma: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Expires: 0[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Accept-Encoding: gzip[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Host: repo1.maven.org[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Proxy-Connection: Keep-Alive[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "[\r][\n]"
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> GET
>>> > http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/
>>> > 1.1/plexus-utils-1.1.pom HTTP/1.1
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Cache-control: no-cache
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Cache-store: no-store
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Pragma: no-cache
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Expires: 0
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Accept-Encoding: gzip
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Host: repo1.maven.org
>>> > 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Proxy-Connection: Keep-Alive
>>> > 2012-02-02 10:46:49,116 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "HTTP/1.1 407 Proxy Authentication Required[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Proxy-Authenticate: NTLM[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Cache-Control: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Pragma: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Content-Type: text/html; charset=utf-8[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Proxy-Connection: close[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Connection: close[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Content-Length: 895[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "[\r][\n]"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << HTTP/1.1 407 Proxy Authentication
>>> > Required
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Proxy-Authenticate: NTLM
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers
>>> >  - << Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Cache-Control: no-cache
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Pragma: no-cache
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Content-Type: text/html; charset=utf-8
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Proxy-Connection: close
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2;
>>> > Path=/
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Connection: close
>>> > 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Content-Length: 895
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] ERROR
>>> > org.apache.http.client.protocol.RequestProxyAuthentication  - Proxy
>>> > authentication error: Credent ials cannot be used for NTLM
>>> > authentication: org.apache.http.auth.UsernamePasswordCredentials
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1.
>>> > 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Cache-control: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Cache-store: no-store[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Pragma: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Expires: 0[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Accept-Encoding: gzip[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Host: repo1.maven.org[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Proxy-Connection: Keep-Alive[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "Cookie: BCSI-CS-41D6D8BAA7362CE4=2[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > >> "[\r][\n]"
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> GET
>>> > http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/
>>> > 1.1/plexus-utils-1.1.pom HTTP/1.1
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Cache-control: no-cache
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Cache-store: no-store
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Pragma: no-cache
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Expires: 0
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Accept-Encoding: gzip
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Host: repo1.maven.org
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Proxy-Connection: Keep-Alive
>>> > 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - >> Cookie: BCSI-CS-41D6D8BAA7362CE4=2
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "HTTP/1.1 407 Proxy Authentication Required[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Proxy-Authenticate: NTLM[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Cache-Control: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Pragma: no-cache[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Content-Type: text/html; charset=utf-8[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Proxy-Connection: close[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Connection: close[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "Content-Length: 895[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire  -
>>> > << "[\r][\n]"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << HTTP/1.1 407 Proxy Authentication
>>> > Required
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Proxy-Authenticate: NTLM
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers
>>> >  - << Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Cache-Control: no-cache
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Pragma: no-cache
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Content-Type: text/html; charset=utf-8
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Proxy-Connection: close
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2;
>>> > Path=/
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Connection: close
>>> > 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG
>>> > org.apache.http.headers  - << Content-Length: 895
>>> > 2012-02-02 10:46:49,197 [qtp1120643297-21] DEBUG
>>> > org.apache.archiva.proxy.common.DebugTransferListener  - wagon debug
>>> > http://repo1.maven.org/maven
>>> > 2/org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom - Status code:
>>> > 407, ReasonPhrase:Proxy Authentication Required.
>>> > 2012-02-02 10:46:49,198 [qtp1120643297-21] DEBUG
>>> > org.apache.archiva.proxy.common.DebugTransferListener  - transferError
>>> > for resource [org/codehaus
>>> > /plexus/plexus-utils/1.1/plexus-utils-1.1.pom,
>>> > http://repo1.maven.org/maven2/] on repository url
>>> > org.apache.maven.wagon.authorization.Authorizatio
>>> > nException: Not authorized by proxy, ReasonPhrase:Proxy Authentication
>>> > Required.
>>> > 2012-02-02 10:46:49,203 [qtp1120643297-21] WARN
>>> > org.apache.archiva.proxy.DefaultRepositoryProxyConnectors  - Transfer
>>> > error from repository "cent ral" for artifact
>>> > org.codehaus.plexus:plexus-utils:1.1::pom, continuing to next
>>> > repository. Error message: Download failure on resource [http://re
>>> > po1.maven.org/maven2//org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom]:Not
>>> > authorized by proxy, ReasonPhrase:Proxy Authentication Requir ed.
>>> > 2012-02-02 10:46:49,207 [qtp1120643297-21] DEBUG
>>> > org.apache.archiva.proxy.common.DebugTransferListener  -
>>> > transferInitiated for resource org/codeh
>>> > aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url
>>> > http://download.java.net/maven/2/
>>> >
>>> > ----------------------------------------------------------------------
>>> > This message w/attachments (message) is intended solely for the use of
>>> > the intended recipient(s) and may contain information that is privileged,
>>> > confidential or proprietary. If you are not an intended recipient, please
>>> > notify the sender, and then please delete and destroy all copies and
>>> > attachments, and be advised that any review or dissemination of, or the
>>> > taking of any action in reliance on, the information contained in or
>>> > attached to this message is prohibited.
>>> > Unless specifically indicated, this message is not an offer to sell or a
>>> > solicitation of any investment products or other financial product or
>>> > service, an official confirmation of any transaction, or an official
>>> > statement of Sender. Subject to applicable law, Sender may intercept,
>>> > monitor, review and retain e-communications (EC) traveling through its
>>> > networks/systems and may produce any such EC to regulators, law enforcement,
>>> > in litigation and as required by law.
>>> > The laws of the country of each sender/recipient may impact the handling
>>> > of EC, and EC may be archived, supervised and produced in countries other
>>> > than the country in which you are located. This message cannot be guaranteed
>>> > to be secure or free of errors or viruses.
>>> >
>>> > References to "Sender" are references to any subsidiary of Bank of
>>> > America Corporation. Securities and Insurance Products: * Are Not FDIC
>>> > Insured * Are Not Bank Guaranteed * May Lose Value * Are Not a Bank Deposit
>>> > * Are Not a Condition to Any Banking Service or Activity * Are Not Insured
>>> > by Any Federal Government Agency. Attachments that are part of this EC may
>>> > have additional important disclosures and disclaimers, which you should
>>> > read. This message is subject to terms available at the following link:
>>> > http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender
>>> > you consent to the foregoing.
>>>
>>> --
>>> Brett Porter
>>> brett@apache.org
>>> http://brettporter.wordpress.com/
>>> http://au.linkedin.com/in/brettporter
>>> http://twitter.com/brettporter
>>>
>>>
>>>
>>>
>>>
>>> ----------------------------------------------------------------------
>>> This message w/attachments (message) is intended solely for the use of the
>>> intended recipient(s) and may contain information that is privileged,
>>> confidential or proprietary. If you are not an intended recipient, please
>>> notify the sender, and then please delete and destroy all copies and
>>> attachments, and be advised that any review or dissemination of, or the
>>> taking of any action in reliance on, the information contained in or
>>> attached to this message is prohibited.
>>> Unless specifically indicated, this message is not an offer to sell or a
>>> solicitation of any investment products or other financial product or
>>> service, an official confirmation of any transaction, or an official
>>> statement of Sender. Subject to applicable law, Sender may intercept,
>>> monitor, review and retain e-communications (EC) traveling through its
>>> networks/systems and may produce any such EC to regulators, law enforcement,
>>> in litigation and as required by law.
>>> The laws of the country of each sender/recipient may impact the handling
>>> of EC, and EC may be archived, supervised and produced in countries other
>>> than the country in which you are located. This message cannot be guaranteed
>>> to be secure or free of errors or viruses.
>>>
>>> References to "Sender" are references to any subsidiary of Bank of America
>>> Corporation. Securities and Insurance Products: * Are Not FDIC Insured * Are
>>> Not Bank Guaranteed * May Lose Value * Are Not a Bank Deposit * Are Not a
>>> Condition to Any Banking Service or Activity * Are Not Insured by Any
>>> Federal Government Agency. Attachments that are part of this EC may have
>>> additional important disclosures and disclaimers, which you should read.
>>> This message is subject to terms available at the following link:
>>> http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender you
>>> consent to the foregoing.



-- 
Olivier Lamy
Talend: http://coders.talend.com
http://twitter.com/olamy | http://linkedin.com/in/olamy

Mime
View raw message