Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpClient User Discussion" <httpclient-users@hc.apache.org>
Received-SPF: pass (athena.apache.org: domain of dkmishra001@gmail.com
 designates 209.85.212.48 as permitted sender)
MIME-Version: 1.0
Date: Tue, 18 Dec 2012 17:22:16 +0530
Message-ID: 
 <CAKE3y_+PPxgCb+hx835rtPhsWpzsfhDxeYDz+hTju9wM5ja80w@mail.gmail.com>
Subject: "Proxy Authentication Required" error in using kerberos
 authentication with Proxy Server
From: Deepak Mishra <dkmishra001@gmail.com>
To: httpclient-users@hc.apache.org
Content-Type: multipart/alternative; boundary=f46d0438936f22125904d11f21c8

--f46d0438936f22125904d11f21c8
Content-Type: text/plain; charset=ISO-8859-1

Hi,
We need to communicate to an internet URL through a Proxy Server, the Proxy
Server has kerberos authentication integrated with an active directory.
I am using HttpClient-4.2 with JRE 1.6.0_37. When I try to connect to an
internet URL through the Proxy server, it returns "Proxy Authentication
Required" error.

On the other hand, when I try to communicate to a target host which has
kerberos authentication, the communication succeeds.
After debugging I found that in GGSSchemeBase.java, in method
"authenticate" we get the token from KDC and then create a header
"Authorization" with value "Negotiate token(in base 64 encoded format)".
So, using this header the communication with Target Server succeeds but
communication with Proxy Server fails. Because for Proxy Server, the Header
name should be "Proxy-Authenticate".

I have not modified the HttpClient code for my purpose, but it seems that
for successful Proxy Server authentication using kerberos, the header name
in request should be "Proxy-Authenticate".
Can any one please look into this problem and help me in getting a patch
that will work with Proxy Server using Kerberos authentication?

Thank You,
Deepak

--f46d0438936f22125904d11f21c8--