hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ji, Yuan" <Yuan...@celcorp.com>
Subject NTLM Proxy Authentication + Digest Web Server Authentication failed
Date Tue, 02 Nov 2004 22:19:04 GMT
I tried to test HttpClient to access a Web site with digest
authentication through an NTLM proxy server, and it failed. But when I
changed to Proxy Server with Basic or Digest Authentication, it works.
I'm using HttpClient 3.0 source code from CVS on Nov. 2, 2004. Is this
an unfinished feature or I did something wrong?
 
The log is here:
 
[DEBUG] header - ->> "GET http://10.0.1.159:4492/index.html
HTTP/1.1[\r][\n]"

[DEBUG] HttpMethodBase - -Adding Host request header

[DEBUG] header - ->> "User-Agent: Jakarta
Commons-HttpClient/3.0-alpha2[\r][\n]"

[DEBUG] header - ->> "Host: 10.0.1.159:4492[\r][\n]"

[DEBUG] header - ->> "Proxy-Connection: Keep-Alive[\r][\n]"

[DEBUG] header - ->> "[\r][\n]"

[DEBUG] header - -<< "HTTP/1.1 407 Proxy Authentication
Required[\r][\n]"

[DEBUG] header - -<< "Server: FreeProxy/3.72[\r][\n]"

[DEBUG] header - -<< "Date: Tue, 02 Nov 2004 21:48:06 GMT[\r][\n]"

[DEBUG] header - -<< "Proxy-Connection: Close[\r][\n]"

[DEBUG] header - -<< "Content-Length: 202[\r][\n]"

[DEBUG] header - -<< "Proxy-Authenticate: NTLM[\r][\n]"

[DEBUG] HttpMethodDirector - -Authorization required

[DEBUG] AuthChallengeProcessor - -Supported authentication schemes in
the order of preference: [ntlm, digest, basic]

[INFO] AuthChallengeProcessor - -ntlm authentication scheme selected

[DEBUG] AuthChallengeProcessor - -Using authentication scheme: ntlm

[DEBUG] HttpMethodBase - -Should close connection in response to
Proxy-Connection: Close

[DEBUG] HttpConnection - -Connection is locked. Call to
releaseConnection() ignored.

[DEBUG] HttpMethodDirector - -Authenticating with NTLM <any
realm>@10.0.1.184:4480

[DEBUG] header - ->> "GET http://10.0.1.159:4492/index.html
HTTP/1.1[\r][\n]"

[DEBUG] HttpMethodBase - -Adding Host request header

[DEBUG] header - ->> "User-Agent: Jakarta
Commons-HttpClient/3.0-alpha2[\r][\n]"

[DEBUG] header - ->> "Proxy-Authorization: NTLM
TlRMTVNTUAABAAAABlIAAAYABgAqAAAACgAKACAAAAAxMC4wLjEuMTg0U0lSSVVT[\r][\n]
"

[DEBUG] header - ->> "Host: 10.0.1.159:4492[\r][\n]"

[DEBUG] header - ->> "Proxy-Connection: Keep-Alive[\r][\n]"

[DEBUG] header - ->> "[\r][\n]"

[DEBUG] header - -<< "HTTP/1.1 407 Proxy Authentication
Required[\r][\n]"

[DEBUG] header - -<< "Server: FreeProxy/3.72[\r][\n]"

[DEBUG] header - -<< "Date: Tue, 02 Nov 2004 21:48:06 GMT[\r][\n]"

[DEBUG] header - -<< "Content-Length: 202[\r][\n]"

[DEBUG] header - -<< "Proxy-Authenticate: NTLM
TlRMTVNTUAACAAAABgAGADgAAAAGAoECFILBclqvmPEAAAAAAAAAAJIAkgA+AAAABQCTCAAA
AA9TSVJJVVMCAAwAUwBJAFIASQBVAFMAAQAUAFQARQBTAFQARgBBAFIATQAtADcABAAkAHMA
aQByAGkAdQBzAC4AYwBlAGwAYwBvAHIAcAAuAGMAbwBtAAMAOgB0AGUAcwB0AGYAYQByAG0A
LQA3AC4AcwBpAHIAaQB1AHMALgBjAGUAbABjAG8AcgBwAC4AYwBvAG0AAAAAAA==[\r][\n]
"

[DEBUG] header - -<< "Proxy-Connection: Keep-Alive[\r][\n]"

[DEBUG] HttpMethodDirector - -Authorization required

[DEBUG] AuthChallengeProcessor - -Using authentication scheme: ntlm

[DEBUG] HttpMethodBase - -Should NOT close connection in response to
Proxy-Connection: Keep-Alive

[DEBUG] HttpConnection - -Connection is locked. Call to
releaseConnection() ignored.

[DEBUG] HttpMethodDirector - -Authenticating with NTLM <any
realm>@10.0.1.184:4480

[DEBUG] header - ->> "GET http://10.0.1.159:4492/index.html
HTTP/1.1[\r][\n]"

[DEBUG] HttpMethodBase - -Adding Host request header

[DEBUG] header - ->> "User-Agent: Jakarta
Commons-HttpClient/3.0-alpha2[\r][\n]"

[DEBUG] header - ->> "Proxy-Authorization: NTLM
TlRMTVNTUAADAAAAGAAYAFYAAAAAAAAAbgAAAAYABgBAAAAABgAGAEYAAAAKAAoATAAAAAAA
AABuAAAABlIAAFNJUklVU01LUkFGVDEwLjAuMS4xODRbOFGxorkG7rZFjk8LuUTPABaC6lU4
nOk=[\r][\n]"

[DEBUG] header - ->> "Host: 10.0.1.159:4492[\r][\n]"

[DEBUG] header - ->> "Proxy-Connection: Keep-Alive[\r][\n]"

[DEBUG] header - ->> "[\r][\n]"

[DEBUG] header - -<< "HTTP/1.1 401 Unauthorized[\r][\n]"

[DEBUG] header - -<< "Server: FreeProxy/3.72[\r][\n]"

[DEBUG] header - -<< "Date: Tue, 02 Nov 2004 21:48:06 GMT[\r][\n]"

[DEBUG] header - -<< "Connection: Keep-Alive[\r][\n]"

[DEBUG] header - -<< "Content-Length: 168[\r][\n]"

[DEBUG] header - -<< "WWW-Authenticate: Digest realm="DigestWebRealm",
qop="auth", nonce="CgABuA==", opaque="MuJvtG2/s9xyNPY7Kyy5pkoS",
algorithm="MD5"[\r][\n]"

[DEBUG] HttpMethodDirector - -Authorization required

[DEBUG] AuthChallengeProcessor - -Supported authentication schemes in
the order of preference: [ntlm, digest, basic]

[DEBUG] AuthChallengeProcessor - -Challenge for ntlm authentication
scheme not available

[INFO] AuthChallengeProcessor - -digest authentication scheme selected

[DEBUG] AuthChallengeProcessor - -Using authentication scheme: digest

[DEBUG] HttpMethodBase - -Should NOT close connection in response to
Connection: Keep-Alive

[DEBUG] HttpConnection - -Connection is locked. Call to
releaseConnection() ignored.

[DEBUG] HttpMethodDirector - -Authenticating with DIGEST
'DigestWebRealm'@10.0.1.159:4492

[DEBUG] HttpMethodParams - -Credential charset not configured, using
HTTP element charset

[DEBUG] DigestScheme - -Using qop method auth

[DEBUG] header - ->> "GET http://10.0.1.159:4492/index.html
HTTP/1.1[\r][\n]"

[DEBUG] HttpMethodBase - -Adding Host request header

[DEBUG] header - ->> "User-Agent: Jakarta
Commons-HttpClient/3.0-alpha2[\r][\n]"

[DEBUG] header - ->> "Authorization: Digest username="DigestWebUser",
realm="DigestWebRealm", nonce="CgABuA==", uri="/index.html",
response="926e355cb219877121648e598d7b2b8e", qop="auth", nc=00000001,
cnonce="1d43bae46046bdbda093247f361003e3", algorithm="MD5",
opaque="MuJvtG2/s9xyNPY7Kyy5pkoS"[\r][\n]"

[DEBUG] header - ->> "Host: 10.0.1.159:4492[\r][\n]"

[DEBUG] header - ->> "Proxy-Connection: Keep-Alive[\r][\n]"

[DEBUG] header - ->> "[\r][\n]"

[DEBUG] HttpMethodDirector - -Closing the connection.

[INFO] HttpMethodDirector - -I/O exception caught when processing
request: The server 10.0.1.159 failed to respond

[DEBUG] HttpMethodDirector - -The server 10.0.1.159 failed to respond
<org.apache.commons.httpclient.NoHttpResponseException: The server
10.0.1.159 failed to
respond>org.apache.commons.httpclient.NoHttpResponseException: The
server 10.0.1.159 failed to respond

at
org.apache.commons.httpclient.HttpMethodBase.readStatusLine(HttpMethodBa
se.java:1828)

at
org.apache.commons.httpclient.HttpMethodBase.readResponse(HttpMethodBase
.java:1588)

at
org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java
:999)

at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMe
thodDirector.java:382)

at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMetho
dDirector.java:168)

at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:3
93)

at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:3
24)

at
com.celcorp.test.TestHttpClient.testHttpRequestWithNTLMProxyAuth(TestHtt
pClient.java:200)

at com.celcorp.test.TestHttpClient.main(TestHttpClient.java:57)

[INFO] HttpMethodDirector - -Retrying request

[DEBUG] header - ->> "GET http://10.0.1.159:4492/index.html
HTTP/1.1[\r][\n]"

[DEBUG] HttpMethodBase - -Adding Host request header

[DEBUG] header - ->> "User-Agent: Jakarta
Commons-HttpClient/3.0-alpha2[\r][\n]"

[DEBUG] header - ->> "Authorization: Digest username="DigestWebUser",
realm="DigestWebRealm", nonce="CgABuA==", uri="/index.html",
response="926e355cb219877121648e598d7b2b8e", qop="auth", nc=00000001,
cnonce="1d43bae46046bdbda093247f361003e3", algorithm="MD5",
opaque="MuJvtG2/s9xyNPY7Kyy5pkoS"[\r][\n]"

[DEBUG] header - ->> "Host: 10.0.1.159:4492[\r][\n]"

[DEBUG] header - ->> "Proxy-Connection: Keep-Alive[\r][\n]"

[DEBUG] header - ->> "[\r][\n]"

[DEBUG] header - -<< "HTTP/1.1 407 Proxy Authentication
Required[\r][\n]"

[DEBUG] header - -<< "Server: FreeProxy/3.72[\r][\n]"

[DEBUG] header - -<< "Date: Tue, 02 Nov 2004 21:48:06 GMT[\r][\n]"

[DEBUG] header - -<< "Proxy-Connection: Close[\r][\n]"

[DEBUG] header - -<< "Content-Length: 202[\r][\n]"

[DEBUG] header - -<< "Proxy-Authenticate: NTLM[\r][\n]"

[DEBUG] HttpMethodDirector - -Authorization required

[DEBUG] AuthChallengeProcessor - -Using authentication scheme: ntlm

[INFO] HttpMethodDirector - -Failure authenticating with NTLM <any
realm>@10.0.1.184:4480

[DEBUG] HttpMethodBase - -Buffering response body

[DEBUG] HttpMethodBase - -Should close connection in response to
Proxy-Connection: Close

[DEBUG] HttpConnection - -Releasing connection back to connection
manager.

The HttpClient sent a challenge response for "401 Unauthorized" with
"Authorization" header, but no "Proxy-Authorization" header. Is it a
bug?

Yuan Ji


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-dev-help@jakarta.apache.org


Mime
View raw message