Return-Path:
Delivered-To: apmail-hc-httpclient-users-archive@www.apache.org
Received: (qmail 68360 invoked from network); 11 Dec 2009 13:37:03 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
by minotaur.apache.org with SMTP; 11 Dec 2009 13:37:03 -0000
Received: (qmail 75348 invoked by uid 500); 11 Dec 2009 13:37:03 -0000
Delivered-To: apmail-hc-httpclient-users-archive@hc.apache.org
Received: (qmail 75250 invoked by uid 500); 11 Dec 2009 13:37:03 -0000
Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm
Precedence: bulk
List-Help:
List-Unsubscribe:
List-Post:
List-Id:
Reply-To: "HttpClient User Discussion"
Delivered-To: mailing list httpclient-users@hc.apache.org
Received: (qmail 75240 invoked by uid 99); 11 Dec 2009 13:37:03 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 11 Dec 2009 13:37:03 +0000
X-ASF-Spam-Status: No, hits=1.5 required=10.0
tests=SPF_PASS,WEIRD_PORT
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of sebster@sebster.com designates
193.46.80.82 as permitted sender)
Received: from [193.46.80.82] (HELO mail.sebster.com) (193.46.80.82)
by apache.org (qpsmtpd/0.29) with SMTP; Fri, 11 Dec 2009 13:36:51 +0000
Received: (qmail 72434 invoked from network); 11 Dec 2009 11:35:23 -0000
Received: from unknown (HELO ?10.0.1.6?) (sebster@85.147.225.232)
by 10.0.98.3 with SMTP; 11 Dec 2009 11:35:22 -0000
Message-ID: <4B224ADE.6010800@sebster.com>
Date: Fri, 11 Dec 2009 14:36:30 +0100
From: Sebastiaan van Erk
User-Agent: Thunderbird 2.0.0.23 (X11/20090817)
MIME-Version: 1.0
To: "httpclient-users@hc.apache.org"
Subject: Kerberos proxy authentication issue
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=sha1; boundary="------------ms030003000001030200040402"
X-Virus-Checked: Checked by ClamAV on apache.org
--------------ms030003000001030200040402
Content-Type: multipart/mixed;
boundary="------------010300000600020206060606"
This is a multi-part message in MIME format.
--------------010300000600020206060606
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Hi,
I'm not sure it's supported yet in httpclient-4.1-alpha1, but continuing
on my kerberos quest, I was trying the next phase: kerberos proxy
authentication.
This time I'm requesting a public url from the target server via a
kerberos protected squid proxy. Again I tested this with firefox, and it
works fine. (The final phase, kerberos proxy AND kerberos server, also
works with firefox).
However, when I add the following two lines to the Kerberos http client
example:
HttpHost proxy = new HttpHost("tunnelproxy.servoy.com", 3128);
httpclient.getParams().setParameter(ConnRoutePNames.DEFAULT_PROXY, proxy);
The proxy authentication fails. It tries to authenticate to the service
for the target web server instead of for the proxy service, that is, I
get the following entry in my kdc.log:
2009-12-11T14:22:12 TGS-REQ testuser@SERVOY.COM from IPv4:85.147.225.232
for HTTP/tunneltest.servoy.com@SERVOY.COM
But for the proxy service you need a ticket to
HTTP/tunnelproxy.servoy.com@SERVOY.COM.
Is this a setup issue on my side, or is Kerberos proxy auth not yet
supported, or is this a bug?
Again I included the wirelog for further details.
Best regards,
Sebastiaan
--------------010300000600020206060606
Content-Type: text/plain;
name="wirelog"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="wirelog"
14:26:19.172 DEBUG [main] org.apache.http.impl.conn.SingleClientConnManager
Get connection for route HttpRoute[{}->http://tunnelproxy.servoy.com:3128->http://tunneltest.servoy.com]
14:26:19.275 DEBUG [main] org.apache.http.client.protocol.RequestAddCookies
CookieSpec selected: best-match
14:26:19.295 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Attempt 1 to execute request
14:26:19.296 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Sending request: GET http://tunneltest.servoy.com/public/ HTTP/1.1
14:26:19.297 DEBUG [main] org.apache.http.wire
>> "GET http://tunneltest.servoy.com/public/ HTTP/1.1[EOL]"
14:26:19.298 DEBUG [main] org.apache.http.wire
>> "Host: tunneltest.servoy.com[EOL]"
14:26:19.298 DEBUG [main] org.apache.http.wire
>> "Proxy-Connection: Keep-Alive[EOL]"
14:26:19.299 DEBUG [main] org.apache.http.wire
>> "User-Agent: Apache-HttpClient/4.1-alpha1 (java 1.5)[EOL]"
14:26:19.299 DEBUG [main] org.apache.http.wire
>> "[EOL]"
14:26:19.299 DEBUG [main] org.apache.http.headers
>> GET http://tunneltest.servoy.com/public/ HTTP/1.1
14:26:19.299 DEBUG [main] org.apache.http.headers
>> Host: tunneltest.servoy.com
14:26:19.299 DEBUG [main] org.apache.http.headers
>> Proxy-Connection: Keep-Alive
14:26:19.299 DEBUG [main] org.apache.http.headers
>> User-Agent: Apache-HttpClient/4.1-alpha1 (java 1.5)
14:26:19.349 DEBUG [main] org.apache.http.wire
<< "HTTP/1.0 407 Proxy Authentication Required[EOL]"
14:26:19.355 DEBUG [main] org.apache.http.wire
<< "Server: squid/2.7.STABLE7[EOL]"
14:26:19.356 DEBUG [main] org.apache.http.wire
<< "Date: Fri, 11 Dec 2009 13:22:11 GMT[EOL]"
14:26:19.356 DEBUG [main] org.apache.http.wire
<< "Content-Type: text/html[EOL]"
14:26:19.356 DEBUG [main] org.apache.http.wire
<< "Content-Length: 1376[EOL]"
14:26:19.356 DEBUG [main] org.apache.http.wire
<< "X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0[EOL]"
14:26:19.356 DEBUG [main] org.apache.http.wire
<< "Proxy-Authenticate: Negotiate[EOL]"
14:26:19.356 DEBUG [main] org.apache.http.wire
<< "X-Cache: MISS from tunneltest.esxnet1.servoy.com[EOL]"
14:26:19.356 DEBUG [main] org.apache.http.wire
<< "Via: 1.0 tunneltest.esxnet1.servoy.com:3128 (squid/2.7.STABLE7)[EOL]"
14:26:19.357 DEBUG [main] org.apache.http.wire
<< "Connection: close[EOL]"
14:26:19.357 DEBUG [main] org.apache.http.wire
<< "[EOL]"
14:26:19.359 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Receiving response: HTTP/1.0 407 Proxy Authentication Required
14:26:19.359 DEBUG [main] org.apache.http.headers
<< HTTP/1.0 407 Proxy Authentication Required
14:26:19.359 DEBUG [main] org.apache.http.headers
<< Server: squid/2.7.STABLE7
14:26:19.359 DEBUG [main] org.apache.http.headers
<< Date: Fri, 11 Dec 2009 13:22:11 GMT
14:26:19.359 DEBUG [main] org.apache.http.headers
<< Content-Type: text/html
14:26:19.359 DEBUG [main] org.apache.http.headers
<< Content-Length: 1376
14:26:19.359 DEBUG [main] org.apache.http.headers
<< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
14:26:19.359 DEBUG [main] org.apache.http.headers
<< Proxy-Authenticate: Negotiate
14:26:19.359 DEBUG [main] org.apache.http.headers
<< X-Cache: MISS from tunneltest.esxnet1.servoy.com
14:26:19.360 DEBUG [main] org.apache.http.headers
<< Via: 1.0 tunneltest.esxnet1.servoy.com:3128 (squid/2.7.STABLE7)
14:26:19.360 DEBUG [main] org.apache.http.headers
<< Connection: close
14:26:19.366 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Proxy requested authentication
14:26:19.367 DEBUG [main] org.apache.http.impl.client.DefaultProxyAuthenticationHandler
Authentication schemes in the order of preference: [negotiate, NTLM, Digest, Basic]
14:26:19.367 DEBUG [main] org.apache.http.impl.client.DefaultProxyAuthenticationHandler
negotiate authentication scheme selected
14:26:19.372 DEBUG [main] org.apache.http.impl.auth.NegotiateScheme
Will NOT strip ports off Service Names e.g. HTTP/server:8080 -> HTTP/server
14:26:19.372 DEBUG [main] org.apache.http.impl.auth.NegotiateScheme
Challenge header: Proxy-Authenticate: Negotiate
14:26:19.372 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Authorization challenge processed
14:26:19.372 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Authentication scope: NEGOTIATE @tunnelproxy.servoy.com:3128
14:26:19.372 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Found credentials
14:26:19.372 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Connection closed
14:26:19.422 DEBUG [main] org.apache.http.client.protocol.RequestAddCookies
CookieSpec selected: best-match
14:26:19.423 DEBUG [main] org.apache.http.impl.auth.NegotiateScheme
init tunneltest.servoy.com
Debug is true storeKey false useTicketCache true useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
Acquire TGT from Cache
>>>KinitOptions cache name is /tmp/krb5cc_1000
>>>DEBUG client principal is testuser@SERVOY.COM
>>>DEBUG server principal is krbtgt/SERVOY.COM@SERVOY.COM
>>>DEBUG key type: 16
>>>DEBUG auth time: Fri Dec 11 12:59:30 CET 2009
>>>DEBUG start time: Fri Dec 11 12:59:30 CET 2009
>>>DEBUG end time: Fri Dec 11 23:03:37 CET 2009
>>>DEBUG renew_till time: Thu Jan 01 01:00:00 CET 1970
>>> CCacheInputStream: readFlags() INITIAL;
>>>DEBUG
>>>DEBUG client principal is testuser@SERVOY.COM
>>>DEBUG server principal is HTTP/tunneltest.servoy.com@SERVOY.COM
>>>DEBUG key type: 16
>>>DEBUG auth time: Fri Dec 11 12:59:30 CET 2009
>>>DEBUG start time: Fri Dec 11 14:15:39 CET 2009
>>>DEBUG end time: Fri Dec 11 23:03:37 CET 2009
>>>DEBUG renew_till time: Thu Jan 01 01:00:00 CET 1970
>>> CCacheInputStream: readFlags()
>>>DEBUG
Principal is testuser@SERVOY.COM
Commit Succeeded
Found ticket for testuser@SERVOY.COM to go to krbtgt/SERVOY.COM@SERVOY.COM expiring on Fri Dec 11 23:03:37 CET 2009
Entered Krb5Context.initSecContext with state=STATE_NEW
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
Using builtin default etypes for default_tgs_enctypes
default etypes for default_tgs_enctypes: 3 1 23 16 17.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.Des3CbcHmacSha1KdEType
>>> KrbKdcReq send: kdc=tunneltest.servoy.com UDP:88, timeout=30000, number of retries =3, #bytes=589
>>> KDCCommunication: kdc=tunneltest.servoy.com UDP:88, timeout=30000,Attempt =1, #bytes=589
>>> KrbKdcReq send: #bytes read=553
>>> KrbKdcReq send: #bytes read=553
>>> EType: sun.security.krb5.internal.crypto.Des3CbcHmacSha1KdEType
>>> KrbApReq: APOptions are 00100000 00000000 00000000 00000000
>>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
Krb5Context setting mySeqNumber to: 1045843081
Created InitSecContextToken:
0000: 01 00 6E 82 01 D5 30 82 01 D1 A0 03 02 01 05 A1 ..n...0.........
0010: 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 01 ......... ......
0020: 01 61 81 FE 30 81 FB A0 03 02 01 05 A1 0C 1B 0A .a..0...........
0030: 53 45 52 56 4F 59 2E 43 4F 4D A2 28 30 26 A0 03 SERVOY.COM.(0&..
0040: 02 01 01 A1 1F 30 1D 1B 04 48 54 54 50 1B 15 74 .....0...HTTP..t
0050: 75 6E 6E 65 6C 74 65 73 74 2E 73 65 72 76 6F 79 unneltest.servoy
0060: 2E 63 6F 6D A3 81 BB 30 81 B8 A0 03 02 01 03 A1 .com...0........
0070: 03 02 01 01 A2 81 AB 04 81 A8 E0 AE F9 3D 13 E9 .............=..
0080: FA 42 5B 89 98 D5 5B 40 E9 4E 34 D1 D7 56 4D B2 .B[...[@.N4..VM.
0090: D8 03 63 E3 4D CB CD 56 97 5E 44 9B 5E A1 21 22 ..c.M..V.^D.^.!"
00A0: 62 7E 0B 9C B1 46 6B 86 54 DC 33 EC C6 B8 26 2D b....Fk.T.3...&-
00B0: AC 7D 98 69 C2 05 B8 1A 48 4A 5E 8A 07 14 CC 1C ...i....HJ^.....
00C0: BE F1 9D 30 49 D0 FA 05 7B 46 D7 37 84 F2 71 8B ...0I....F.7..q.
00D0: CE 75 D2 4A 1D 78 48 4D 82 88 B4 D9 E1 0E FF E6 .u.J.xHM........
00E0: C7 34 C9 25 81 BC E4 3A 31 B4 CC 9F 0C 22 5F B3 .4.%...:1...."_.
00F0: 9C 99 81 9B 13 6A 46 FD BA 29 36 A1 60 48 F0 D7 .....jF..)6.`H..
0100: 3E 16 83 F3 94 EF ED 26 9E 6A 05 06 69 A6 85 53 >......&.j..i..S
0110: 0D B7 F3 BE C5 B8 DD A9 59 A4 40 15 7A 2A AD 42 ........Y.@.z*.B
0120: 98 1B A4 81 B6 30 81 B3 A0 03 02 01 03 A2 81 AB .....0..........
0130: 04 81 A8 B4 8A DD 7D B5 60 92 BF 6F E4 11 03 61 ........`..o...a
0140: 4E 1E 1B 76 1C 12 86 22 EE 07 3B 79 6F 87 00 53 N..v..."..;yo..S
0150: EB FC A3 AA D5 A1 8B 0B 10 4E 47 1B 54 A0 08 51 .........NG.T..Q
0160: B6 10 FE F5 DF 8B 23 2F 5A A2 EB 77 81 8F 99 31 ......#/Z..w...1
0170: 16 E9 D9 6F 80 70 C1 64 5C 6B D4 06 65 6C 76 F6 ...o.p.d\k..elv.
0180: 34 F9 82 47 2E 00 A6 E6 35 3A AC A2 8F 2D 6C 2F 4..G....5:...-l/
0190: 04 A1 69 0A A9 4A 99 AA E1 93 CE 35 F2 AC FA 09 ..i..J.....5....
01A0: 76 53 AF F0 CA 36 64 9C 24 BC A7 77 C4 8D 59 E4 vS...6d.$..w..Y.
01B0: 2F A4 43 AB BA EF D6 66 30 AB 04 A1 BA DA E7 4F /.C....f0......O
01C0: 0C 5F 4F 17 8D DA 3B 09 8F 9C 86 55 2C CD 35 64 ._O...;....U,.5d
01D0: AC 1B 58 DF B2 CD 92 2B 7C DB 5D ..X....+..]
14:26:20.373 INFO [main] org.apache.http.impl.auth.NegotiateScheme
got token, sending 539 bytes to server
14:26:20.379 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Attempt 2 to execute request
14:26:20.379 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Sending request: GET http://tunneltest.servoy.com/public/ HTTP/1.1
14:26:20.379 DEBUG [main] org.apache.http.wire
>> "GET http://tunneltest.servoy.com/public/ HTTP/1.1[EOL]"
14:26:20.379 DEBUG [main] org.apache.http.wire
>> "Host: tunneltest.servoy.com[EOL]"
14:26:20.379 DEBUG [main] org.apache.http.wire
>> "Proxy-Connection: Keep-Alive[EOL]"
14:26:20.379 DEBUG [main] org.apache.http.wire
>> "User-Agent: Apache-HttpClient/4.1-alpha1 (java 1.5)[EOL]"
14:26:20.379 DEBUG [main] org.apache.http.wire
>> "Authorization: Negotiate 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[EOL]"
14:26:20.379 DEBUG [main] org.apache.http.wire
>> "[EOL]"
14:26:20.379 DEBUG [main] org.apache.http.headers
>> GET http://tunneltest.servoy.com/public/ HTTP/1.1
14:26:20.380 DEBUG [main] org.apache.http.headers
>> Host: tunneltest.servoy.com
14:26:20.380 DEBUG [main] org.apache.http.headers
>> Proxy-Connection: Keep-Alive
14:26:20.380 DEBUG [main] org.apache.http.headers
>> User-Agent: Apache-HttpClient/4.1-alpha1 (java 1.5)
14:26:20.380 DEBUG [main] org.apache.http.headers
>> Authorization: Negotiate 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
14:26:20.449 DEBUG [main] org.apache.http.wire
<< "HTTP/1.0 407 Proxy Authentication Required[EOL]"
14:26:20.449 DEBUG [main] org.apache.http.wire
<< "Server: squid/2.7.STABLE7[EOL]"
14:26:20.449 DEBUG [main] org.apache.http.wire
<< "Date: Fri, 11 Dec 2009 13:22:12 GMT[EOL]"
14:26:20.449 DEBUG [main] org.apache.http.wire
<< "Content-Type: text/html[EOL]"
14:26:20.449 DEBUG [main] org.apache.http.wire
<< "Content-Length: 1376[EOL]"
14:26:20.449 DEBUG [main] org.apache.http.wire
<< "X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0[EOL]"
14:26:20.450 DEBUG [main] org.apache.http.wire
<< "Proxy-Authenticate: Negotiate[EOL]"
14:26:20.450 DEBUG [main] org.apache.http.wire
<< "X-Cache: MISS from tunneltest.esxnet1.servoy.com[EOL]"
14:26:20.450 DEBUG [main] org.apache.http.wire
<< "Via: 1.0 tunneltest.esxnet1.servoy.com:3128 (squid/2.7.STABLE7)[EOL]"
14:26:20.450 DEBUG [main] org.apache.http.wire
<< "Connection: close[EOL]"
14:26:20.450 DEBUG [main] org.apache.http.wire
<< "[EOL]"
14:26:20.450 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Receiving response: HTTP/1.0 407 Proxy Authentication Required
14:26:20.450 DEBUG [main] org.apache.http.headers
<< HTTP/1.0 407 Proxy Authentication Required
14:26:20.450 DEBUG [main] org.apache.http.headers
<< Server: squid/2.7.STABLE7
14:26:20.450 DEBUG [main] org.apache.http.headers
<< Date: Fri, 11 Dec 2009 13:22:12 GMT
14:26:20.450 DEBUG [main] org.apache.http.headers
<< Content-Type: text/html
14:26:20.450 DEBUG [main] org.apache.http.headers
<< Content-Length: 1376
14:26:20.450 DEBUG [main] org.apache.http.headers
<< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
14:26:20.450 DEBUG [main] org.apache.http.headers
<< Proxy-Authenticate: Negotiate
14:26:20.450 DEBUG [main] org.apache.http.headers
<< X-Cache: MISS from tunneltest.esxnet1.servoy.com
14:26:20.450 DEBUG [main] org.apache.http.headers
<< Via: 1.0 tunneltest.esxnet1.servoy.com:3128 (squid/2.7.STABLE7)
14:26:20.450 DEBUG [main] org.apache.http.headers
<< Connection: close
14:26:20.450 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Proxy requested authentication
14:26:20.451 DEBUG [main] org.apache.http.impl.auth.NegotiateScheme
Challenge header: Proxy-Authenticate: Negotiate
14:26:20.451 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Authorization challenge processed
14:26:20.451 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Authentication scope: NEGOTIATE @tunnelproxy.servoy.com:3128
14:26:20.451 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Connection closed
14:26:20.512 DEBUG [main] org.apache.http.client.protocol.RequestAddCookies
CookieSpec selected: best-match
14:26:20.514 ERROR [main] org.apache.http.client.protocol.RequestProxyAuthentication
Proxy authentication error: Defective token detected (Mechanism level: Defective token detected (Mechanism level: Invalid SPNEGO NegTokenTarg token : DerInputStream.getLength(): lengthTag=127, too big.))
14:26:20.514 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Attempt 3 to execute request
14:26:20.514 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Sending request: GET http://tunneltest.servoy.com/public/ HTTP/1.1
14:26:20.514 DEBUG [main] org.apache.http.wire
>> "GET http://tunneltest.servoy.com/public/ HTTP/1.1[EOL]"
14:26:20.515 DEBUG [main] org.apache.http.wire
>> "Host: tunneltest.servoy.com[EOL]"
14:26:20.515 DEBUG [main] org.apache.http.wire
>> "Proxy-Connection: Keep-Alive[EOL]"
14:26:20.515 DEBUG [main] org.apache.http.wire
>> "User-Agent: Apache-HttpClient/4.1-alpha1 (java 1.5)[EOL]"
14:26:20.515 DEBUG [main] org.apache.http.wire
>> "[EOL]"
14:26:20.515 DEBUG [main] org.apache.http.headers
>> GET http://tunneltest.servoy.com/public/ HTTP/1.1
14:26:20.515 DEBUG [main] org.apache.http.headers
>> Host: tunneltest.servoy.com
14:26:20.515 DEBUG [main] org.apache.http.headers
>> Proxy-Connection: Keep-Alive
14:26:20.515 DEBUG [main] org.apache.http.headers
>> User-Agent: Apache-HttpClient/4.1-alpha1 (java 1.5)
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "HTTP/1.0 407 Proxy Authentication Required[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "Server: squid/2.7.STABLE7[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "Date: Fri, 11 Dec 2009 13:22:12 GMT[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "Content-Type: text/html[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "Content-Length: 1376[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "Proxy-Authenticate: Negotiate[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "X-Cache: MISS from tunneltest.esxnet1.servoy.com[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "Via: 1.0 tunneltest.esxnet1.servoy.com:3128 (squid/2.7.STABLE7)[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "Connection: close[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.wire
<< "[EOL]"
14:26:20.568 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Receiving response: HTTP/1.0 407 Proxy Authentication Required
14:26:20.568 DEBUG [main] org.apache.http.headers
<< HTTP/1.0 407 Proxy Authentication Required
14:26:20.569 DEBUG [main] org.apache.http.headers
<< Server: squid/2.7.STABLE7
14:26:20.569 DEBUG [main] org.apache.http.headers
<< Date: Fri, 11 Dec 2009 13:22:12 GMT
14:26:20.569 DEBUG [main] org.apache.http.headers
<< Content-Type: text/html
14:26:20.569 DEBUG [main] org.apache.http.headers
<< Content-Length: 1376
14:26:20.569 DEBUG [main] org.apache.http.headers
<< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
14:26:20.569 DEBUG [main] org.apache.http.headers
<< Proxy-Authenticate: Negotiate
14:26:20.569 DEBUG [main] org.apache.http.headers
<< X-Cache: MISS from tunneltest.esxnet1.servoy.com
14:26:20.569 DEBUG [main] org.apache.http.headers
<< Via: 1.0 tunneltest.esxnet1.servoy.com:3128 (squid/2.7.STABLE7)
14:26:20.569 DEBUG [main] org.apache.http.headers
<< Connection: close
14:26:20.569 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Proxy requested authentication
14:26:20.569 DEBUG [main] org.apache.http.impl.auth.NegotiateScheme
Challenge header: Proxy-Authenticate: Negotiate
14:26:20.569 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Authorization challenge processed
14:26:20.569 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Authentication scope: NEGOTIATE @tunnelproxy.servoy.com:3128
14:26:20.569 DEBUG [main] org.apache.http.impl.client.DefaultHttpClient
Authentication failed
----------------------------------------
HTTP/1.0 407 Proxy Authentication Required
----------------------------------------
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "ERROR: Cache Access Denied[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "ERROR
[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "Cache Access Denied
[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "While trying to retrieve the URL:[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "http://tunneltest.servoy.com/public/[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.579 DEBUG [main] org.apache.http.wire
<< "The following error was encountered:[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "- [\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "Cache Access Denied.[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "Sorry, you are not currently allowed to request:[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "
http://tunneltest.servoy.com/public/
[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "from this cache until you have authenticated yourself.[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "You need to use Netscape version 2.0 or greater, or Microsoft Internet[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "Explorer 3.0, or an HTTP/1.1 compliant browser for this to work. Please[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "contact the cache administrator if you have[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "difficulties authenticating yourself or [\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "change your default password.[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.580 DEBUG [main] org.apache.http.wire
<< "
[\n]"
14:26:20.581 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.581 DEBUG [main] org.apache.http.wire
<< "Generated Fri, 11 Dec 2009 13:22:12 GMT by tunneltest.esxnet1.servoy.com (squid/2.7.STABLE7)[\n]"
14:26:20.581 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.581 DEBUG [main] org.apache.http.wire
<< "[\n]"
14:26:20.581 DEBUG [main] org.apache.http.impl.conn.SingleClientConnManager
Releasing connection org.apache.http.impl.conn.SingleClientConnManager$ConnAdapter@289d2e
14:26:20.581 DEBUG [main] org.apache.http.impl.conn.SingleClientConnManager
Released connection open but not reusable.
14:26:20.581 DEBUG [main] org.apache.http.impl.conn.DefaultClientConnection
Connection shut down
ERROR: Cache Access Denied
ERROR
Cache Access Denied
While trying to retrieve the URL:
http://tunneltest.servoy.com/public/
The following error was encountered:
Sorry, you are not currently allowed to request:
http://tunneltest.servoy.com/public/
from this cache until you have authenticated yourself.
You need to use Netscape version 2.0 or greater, or Microsoft Internet
Explorer 3.0, or an HTTP/1.1 compliant browser for this to work. Please
contact the cache administrator if you have
difficulties authenticating yourself or
change your default password.
Generated Fri, 11 Dec 2009 13:22:12 GMT by tunneltest.esxnet1.servoy.com (squid/2.7.STABLE7)
----------------------------------------
--------------010300000600020206060606--
--------------ms030003000001030200040402
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJUTCC
AwMwggJsoAMCAQICEGLYTbNs7ILV8FjWe4hYppAwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UE
BhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMT
I1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA5MDcwMTA1MjIxMVoX
DTEwMDcwMTA1MjIxMVowaDEQMA4GA1UEBBMHdmFuIEVyazETMBEGA1UEKhMKU2ViYXN0aWFh
bjEbMBkGA1UEAxMSU2ViYXN0aWFhbiB2YW4gRXJrMSIwIAYJKoZIhvcNAQkBFhNzZWJzdGVy
QHNlYnN0ZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnkA/HlKscOk
7wNt76nwOKIIsm3qlgX3Sf3jNOl+gVBi4Fq3n5BfDR0FBj4pbiQT+Q9s2oTJcoX3/AdZuNga
UH/6+dhcyD2kxgvVK8WK41WG9WyzPkfw4M2g3e51NrEsGC+H+eMbbvlrzvPa/asUwqERy60u
6XIlj5kwO/QxHx2iJpgUFtkOYr1BSkP0FC/Qe8VbF7Fi1fu3I5Rk/+9j49OM/IBMbmEkKFoD
/e8KgyhCgREAv08/yntwHRos5m6AK27zR+4dTsbb/B8fCjRT8tttCvbo1C/UiuM7u/YcfY0d
8mLp+dRI7xpHl/9Fp86q31OmAfwD1tw9UYL1DnIbHwIDAQABozAwLjAeBgNVHREEFzAVgRNz
ZWJzdGVyQHNlYnN0ZXIuY29tMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEFBQADgYEAw63Z
9kpNbme1LCtCeAvXVM8oTGJy0L85qtbO5DUBxjmBTBMSe1Kbn160wibMP++Cv1p/PwCumRbe
XjJSI3HclQasaF8FpDWtRQlHFj/w/3Q2GsBpoHxSOENjY/+jgtDTOnX5+0lPHaN/iQTAdW8+
rm0P+FIKeYRpdOjFsIoeudYwggMDMIICbKADAgECAhBi2E2zbOyC1fBY1nuIWKaQMA0GCSqG
SIb3DQEBBQUAMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAo
UHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBD
QTAeFw0wOTA3MDEwNTIyMTFaFw0xMDA3MDEwNTIyMTFaMGgxEDAOBgNVBAQTB3ZhbiBFcmsx
EzARBgNVBCoTClNlYmFzdGlhYW4xGzAZBgNVBAMTElNlYmFzdGlhYW4gdmFuIEVyazEiMCAG
CSqGSIb3DQEJARYTc2Vic3RlckBzZWJzdGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZ5APx5SrHDpO8Dbe+p8DiiCLJt6pYF90n94zTpfoFQYuBat5+QXw0dBQY+
KW4kE/kPbNqEyXKF9/wHWbjYGlB/+vnYXMg9pMYL1SvFiuNVhvVssz5H8ODNoN3udTaxLBgv
h/njG275a87z2v2rFMKhEcutLulyJY+ZMDv0MR8doiaYFBbZDmK9QUpD9BQv0HvFWxexYtX7
tyOUZP/vY+PTjPyATG5hJChaA/3vCoMoQoERAL9PP8p7cB0aLOZugCtu80fuHU7G2/wfHwo0
U/LbbQr26NQv1IrjO7v2HH2NHfJi6fnUSO8aR5f/RafOqt9TpgH8A9bcPVGC9Q5yGx8CAwEA
AaMwMC4wHgYDVR0RBBcwFYETc2Vic3RlckBzZWJzdGVyLmNvbTAMBgNVHRMBAf8EAjAAMA0G
CSqGSIb3DQEBBQUAA4GBAMOt2fZKTW5ntSwrQngL11TPKExictC/OarWzuQ1AcY5gUwTEntS
m59etMImzD/vgr9afz8ArpkW3l4yUiNx3JUGrGhfBaQ1rUUJRxY/8P90NhrAaaB8UjhDY2P/
o4LQ0zp1+ftJTx2jf4kEwHVvPq5tD/hSCnmEaXToxbCKHrnWMIIDPzCCAqigAwIBAgIBDTAN
BgkqhkiG9w0BAQUFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTES
MBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UE
CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBl
cnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0
aGF3dGUuY29tMB4XDTAzMDcxNzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMC
WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro
YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GN
ADCBiQKBgQDEpjxVc1X7TrnKmVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAK
MNcCY1osiRVwjt3J8CuFWqo/cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTX
p6a7n2XRxSpUhQ9IBH+nttE8YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYB
Af8CAQAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBl
cnNvbmFsRnJlZW1haWxDQS5jcmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYD
VQQDExFQcml2YXRlTGFiZWwyLTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2as
Zw9/r6y+whehQ5aUnX9MIbj4Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSe
JVCUYsfbJ3FXJY3dqZw5jowgT2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHT
HUb/XV9lTzGCA3EwggNtAgEBMHYwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBD
b25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFp
bCBJc3N1aW5nIENBAhBi2E2zbOyC1fBY1nuIWKaQMAkGBSsOAwIaBQCgggHQMBgGCSqGSIb3
DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA5MTIxMTEzMzYzMFowIwYJKoZI
hvcNAQkEMRYEFFIMBgpBhx+RNM1KZfk3sHjGSo5fMF8GCSqGSIb3DQEJDzFSMFAwCwYJYIZI
AWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUr
DgMCBzANBggqhkiG9w0DAgIBKDCBhQYJKwYBBAGCNxAEMXgwdjBiMQswCQYDVQQGEwJaQTEl
MCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3Rl
IFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEGLYTbNs7ILV8FjWe4hYppAwgYcGCyqG
SIb3DQEJEAILMXigdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRp
bmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vp
bmcgQ0ECEGLYTbNs7ILV8FjWe4hYppAwDQYJKoZIhvcNAQEBBQAEggEAhAvwf4OaW3p8qtuZ
GiLQF9A8G9Z2bb3/oDEJM8Gted0RXzVp1dQvaCJVMpMwn/wr2GLduQEgKBxTGoICGmb89EFG
9RlSiFa/zuDsohj8/48+0HSt3fNn/09L0Ds+3/UfZRcYc/FXUa9vrn5QOCoCo1sRWREgN84u
kObbUnWz4vZoozEODuWV9dHSbdBhLXdf3lpMBiWXhbUwmheknxVG0PTxpRqu1oJO542IJp09
JmlqbDCajW+JFx8IeCKw+Ejm1WGnV5IDnyyI4Zz8AcOT9x2SIPRYKzVAor8Aon0qciW/hLtz
5pVlTtTjeZHed5CMR8v3kwPB3U8fq1Ot8ckRVAAAAAAAAA==
--------------ms030003000001030200040402--