hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Oleg Kalnichevski <ol...@apache.org>
Subject Re: AW: NTLM-Proxy authentication and SSL-target
Date Wed, 29 Oct 2008 20:29:59 GMT
On Wed, 2008-10-29 at 09:17 +0100, Cech. Ulrich wrote:
> Hi Oleg,
> 
> Thanks for your reply.
> Correct, I use the NTLM-support like it is described in the documentation
> (with jcifs etc.). And that worked fine for no-SSL-targets.
> 
> Thanks for your help,
> Ulrich
> 
> 

Ulrich,

The version of Squid you are using appears broken. The proxy keeps one
sending 'Proxy-Connection: close' which is wrong given the fact that
NTLM requires a persistent connection in order to function.

See wire log below

Oleg

============
[DEBUG] headers - >> CONNECT www.verisign.com:443
<http://www.verisign.com:443> HTTP/1.1
[DEBUG] headers - >> User-Agent: Apache-HttpClient/4.0-beta1 (java 1.4)
[DEBUG] headers - << HTTP/1.0 407 Proxy Authentication Required
[DEBUG] headers - << Server: squid/2.6.STABLE6-NT
[DEBUG] headers - << Date: Wed, 29 Oct 2008 07:36:24 GMT
[DEBUG] headers - << Content-Type: text/html
[DEBUG] headers - << Content-Length: 1347
[DEBUG] headers - << Expires: Wed, 29 Oct 2008 07:36:24 GMT
[DEBUG] headers - << X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
[DEBUG] headers - << Proxy-Authenticate: NTLM
[DEBUG] headers - << X-Cache: MISS from s-hqw2k3bd.pmbelz.de
[DEBUG] headers - << X-Cache-Lookup: NONE from s-hqw2k3bd.pmbelz.de:3128
[DEBUG] headers - << Via: 1.0 s-hqw2k3bd.pmbelz.de:3128
(squid/2.6.STABLE6-NT)
[DEBUG] headers - << Proxy-Connection: close
[DEBUG] headers - >> CONNECT www.verisign.com:443
<http://www.verisign.com:443> HTTP/1.1
[DEBUG] headers - >> User-Agent: Apache-HttpClient/4.0-beta1 (java 1.4)
[DEBUG] headers - >> Proxy-Authorization: NTLM
TlRMTVNTUAABAAAAATIAAAYABgAgAAAABwAHACYAAABQTUJFTFpQQy0xNjM0
[DEBUG] headers - << HTTP/1.0 407 Proxy Authentication Required
[DEBUG] headers - << Server: squid/2.6.STABLE6-NT
[DEBUG] headers - << Date: Wed, 29 Oct 2008 07:36:24 GMT
[DEBUG] headers - << Content-Type: text/html
[DEBUG] headers - << Content-Length: 1347
[DEBUG] headers - << Expires: Wed, 29 Oct 2008 07:36:24 GMT
[DEBUG] headers - << X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
[DEBUG] headers - << Proxy-Authenticate: NTLM
TlRMTVNTUAACAAAAAAAAADgAAAABAgACJxWYyBecHP8AAAAAAAAAAAAAAAA4AAAABQLODgAAAA8=
[DEBUG] headers - << X-Cache: MISS from s-hqw2k3bd.pmbelz.de
[DEBUG] headers - << X-Cache-Lookup: NONE from s-hqw2k3bd.pmbelz.de:3128
[DEBUG] headers - << Via: 1.0 s-hqw2k3bd.pmbelz.de:3128
(squid/2.6.STABLE6-NT)
[DEBUG] headers - << Proxy-Connection: close
[DEBUG] headers - >> CONNECT www.verisign.com:443
<http://www.verisign.com:443> HTTP/1.1
[DEBUG] headers - >> User-Agent: Apache-HttpClient/4.0-beta1 (java 1.4)
[DEBUG] headers - >> Proxy-Authorization: NTLM
TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAAAwADABwAAAACAAIAHwAAAAOAA4AhAAAAAAAAAAAAAAAAQIAAOOOenVD3rqAqXU7pJjbK5QyfrCD58Nj97AldWYk//1QtLyNjRSYH89g7e4f95Vx0lAATQBCAEUATABaAGMAZQBjAGgAUABDAC0AMQA2ADMANAA=
[DEBUG] headers - << HTTP/1.0 407 Proxy Authentication Required
[DEBUG] headers - << Server: squid/2.6.STABLE6-NT
[DEBUG] headers - << Date: Wed, 29 Oct 2008 07:36:24 GMT
[DEBUG] headers - << Content-Type: text/html
[DEBUG] headers - << Content-Length: 1347
[DEBUG] headers - << Expires: Wed, 29 Oct 2008 07:36:24 GMT
[DEBUG] headers - << X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
[DEBUG] headers - << Proxy-Authenticate: NTLM
[DEBUG] headers - << X-Cache: MISS from s-hqw2k3bd.pmbelz.de
[DEBUG] headers - << X-Cache-Lookup: NONE from s-hqw2k3bd.pmbelz.de:3128
[DEBUG] headers - << Via: 1.0 s-hqw2k3bd.pmbelz.de:3128
(squid/2.6.STABLE6-NT)
[DEBUG] headers - << Proxy-Connection: close


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org


Mime
View raw message