Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpClient User Discussion" <httpclient-users@hc.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Need help with ProxyClient tunneling through authenticatingproxy
Date: Mon, 11 Aug 2008 15:34:10 -0400
Message-ID: <BBBCC242C153304DBC48CF2DF606CF817E7B83@NEPTUNE.Axeda.com>
In-Reply-To: <1218476889.7178.12.camel@ubuntu>
Thread-Topic: Need help with ProxyClient tunneling through authenticatingproxy
Thread-Index: Acj72tYHuIUWBq1jSmaKXv065M+v1AABdptg
Priority: Urgent
Importance: high
References: <BBBCC242C153304DBC48CF2DF606CF817E7AB4@NEPTUNE.Axeda.com>
 <1218476889.7178.12.camel@ubuntu>
From: "Jignesh Malkan" <JMalkan@axeda.com>
To: "HttpClient User Discussion" <httpclient-users@hc.apache.org>

Hi Oleg,

Thanks for the info.

I don't think #1 is possible unless I types uid/pwd wrong for 100s of
time I tested and typed them correctly when browser prompted me when it
downloaded applet.

I am not even able to do "Basic" authentication.
I turned the TRACE on and found that=20

HttpMethodDirectorauthenticateProxy(final HttpMethod method)
Writes 2 of the following logs.

LOG.debug("Authenticating with " + authscope);=20
LOG.warn("Required proxy credentials not available for " + authscope);


Here is the code snippet between 2 of the logs.

if (authstate.isAuthRequested() || !authscheme.isConnectionBased()) {
            AuthScope authscope =3D new AuthScope(
                conn.getProxyHost(), conn.getProxyPort(),=20
                authscheme.getRealm(),=20
                authscheme.getSchemeName()); =20
            if (LOG.isDebugEnabled()) {
                LOG.debug("Authenticating with " + authscope);
            }
            Credentials credentials =3D
this.state.getProxyCredentials(authscope);
            if (credentials !=3D null) {
                String authstring =3D =
authscheme.authenticate(credentials,
method);
                if (authstring !=3D null) {
                    method.addRequestHeader(new Header(PROXY_AUTH_RESP,
authstring, true));
                }
            } else {
                if (LOG.isWarnEnabled()) {
                    LOG.warn("Required proxy credentials not available
for " + authscope);
                    if (method.getProxyAuthState().isPreemptive()) {
                        LOG.warn("Preemptive authentication requested
but no default " +
                            "proxy credentials available");=20
                    }
                }
            }
        }

It looks like Credentials credentials =3D
this.state.getProxyCredentials(authscope); is returning null and that is
why authentication is skipped.


This is how I am passing Credentials.

AuthScope authScope =3D new AuthScope(tunnelBean.getHost(),
tunnelBean.getPort());
Credentials credentials  =3D new NTCredentials(tunnelBean.getUserName(),
tunnelBean.getPassword(),
tunnelBean.getUserIp(), tunnelBean.getDomain());

proxyClient.getState().setProxyCredentials(authScope, credentials);


Am I doing anything wrong here?


I upgraded from 3.0.1 to 3.1 and now I am getting following error
"ProxyClient Connect failed: secure protocol socket factory may not be
used"

Here is how I set host.
proxyClient.getHostConfiguration().setHost(host, port, "https");


Jiggy.

-----Original Message-----
From: Oleg Kalnichevski [mailto:olegk@apache.org]=20
Sent: Monday, August 11, 2008 1:48 PM
To: HttpClient User Discussion
Subject: Re: Need help with ProxyClient tunneling through
authenticatingproxy

On Fri, 2008-08-08 at 11:33 -0400, Jignesh Malkan wrote:
> Hi,
>=20
> =20
>=20
> I am new to HttpClient and I am trying to open a Socket connection
from
> Applet to the Server tunneling through the ISA proxy.
>=20
> =20
>=20
> Proxy client works fine with Non-Authenticating Proxy but it fails
when
> I turn on "basic" or "Integrated" (NTLM) authentication. I have spent
a
> good amount of time and have not made much progress. So I decided to
> call help from experts :-)
>=20
> =20
>=20
> I am using httpclient-3.0.1 and client machine will have a JRE version
> >=3D1.5
>=20
> =20
>=20
> Here is my code flow:
>=20
> 1.	I detect proxy using ProxySelector.getDefault().select(new
> URI(uri));
> 2.	I set the System properties for https.proxySet=3Dtrue,
> https.proxyHost=3DproxyHost, https.proxyPort=3DproxyPort
> 3.	Next set these properties into TunnelBean and pass this to the
> following method:
>=20

The most likely reasons are:
(1) credentials are wrong
(2) the proxy server has been configured to disallow NTLMv1. HttpClient
3.1 supports NTLMv1 only. It does not support NTLMv2.

Oleg


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org