[squeak-dev] Re: WebClient with proxy NTLM authentication

Denis Kudriashov dionisiydk at gmail.com
Fri Sep 24 12:04:29 UTC 2010


Hello, Andreas.

New versions not work for me too. Send you logs

(WebClientSSP new )
    debugLog: Transcript;
    proxyUser: 'GONDOR\mmuhin';
    proxyPass: '111';
    httpGet: 'http://www.google.com/' .


GET http://www.google.com/ HTTP/1.1
User-Agent: WebClient/1.4 (; Squeak4.1-9957; Win32)
Host: www.google.com
Proxy-Connection: keep-alive

HTTP/1.0 407 Proxy Authentication Required
server: squid/2.6.STABLE21
date: Fri, 24 Sep 2010 11:53:32 GMT
content-type: text/html
content-length: 1289
expires: Fri, 24 Sep 2010 11:53:32 GMT
x-squid-error: ERR_CACHE_ACCESS_DENIED 0
proxy-authenticate: NTLM
x-cache: MISS from cache.gondor.fors
x-cache-lookup: NONE from cache.gondor.fors:3128
via: 1.0 cache.gondor.fors:3128 (squid/2.6.STABLE21)
proxy-connection: close

GET http://www.google.com/ HTTP/1.1
User-Agent: WebClient/1.4 (; Squeak4.1-9957; Win32)
Host: www.google.com
Proxy-Connection: keep-alive
Proxy-Authorization: NTLM
TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==

HTTP/1.0 407 Proxy Authentication Required
server: squid/2.6.STABLE21
date: Fri, 24 Sep 2010 11:53:32 GMT
content-type: text/html
content-length: 1289
expires: Fri, 24 Sep 2010 11:53:32 GMT
x-squid-error: ERR_CACHE_ACCESS_DENIED 0
proxy-authenticate: NTLM
TlRMTVNTUAACAAAADAAMADAAAAAFgomicUzumBUHieUAAAAAAAAAAGIAYgA8AAAARwBPAE4ARABPAFIAAgAMAEcATwBOAEQATwBSAAEACgBDAEEAQwBIAEUABAAWAGcAbwBuAGQAbwByAC4AZgBvAHIAcwADACIAYwBhAGMAaABlAC4AZwBvAG4AZABvAHIALgBmAG8AcgBzAAAAAAA=
x-cache: MISS from cache.gondor.fors
x-cache-lookup: NONE from cache.gondor.fors:3128
via: 1.0 cache.gondor.fors:3128 (squid/2.6.STABLE21)
proxy-connection: keep-alive

GET http://www.google.com/ HTTP/1.1
User-Agent: WebClient/1.4 (; Squeak4.1-9957; Win32)
Host: www.google.com
Proxy-Connection: keep-alive
Proxy-Authorization: NTLM
TlRMTVNTUAADAAAAGAAYAGoAAAAYABgAggAAAAwADABIAAAADAAMAFQAAAAKAAoAYAAAAAAAAACaAAAABYKIogUBKAoAAAAPRwBPAE4ARABPAFIAbQBtAHUAaABpAG4ATQBVAEgASQBOAOiy90rHw+exAAAAAAAAAAAAAAAAAAAAAHi//hvGv5UhEv6kKpIziFD4YaIrdLL6IA==

HTTP/1.0 407 Proxy Authentication Required
server: squid/2.6.STABLE21
date: Fri, 24 Sep 2010 11:53:32 GMT
content-type: text/html
content-length: 1289
expires: Fri, 24 Sep 2010 11:53:32 GMT
x-squid-error: ERR_CACHE_ACCESS_DENIED 0
proxy-authenticate: NTLM
x-cache: MISS from cache.gondor.fors
x-cache-lookup: NONE from cache.gondor.fors:3128
via: 1.0 cache.gondor.fors:3128 (squid/2.6.STABLE21)
proxy-connection: close


Empty token (invalid credentials)


Now I cant get logs from proxy server

Best regards,
Denis


24 сентября 2010 г. 5:58 пользователь Andreas Raab <andreas.raab at gmx.de>написал:

> Hi Denis -
>
> FWIW, it seems that Squid has a (yet again) a few particularities in its
> handling of client connections. Apparently, it will not accept NTLM
> authentication unless a Proxy-Connection header is present (it should really
> take the hint from the HTTP/1.1 header but whatever...)
>
> In any case, with the latest updates to WebClient-Core and WebClient-SSP I
> have been able to use squid w/ NTLM proxy authentication successfully. Give
> it a try.
>
> Cheers,
>  - Andreas
>
>
> On 9/21/2010 9:39 AM, Andreas Raab wrote:
>
>> On 9/21/2010 2:28 AM, Denis Kudriashov wrote:
>>
>>> Hello, I send you log.
>>>
>>
>> Thanks.
>>
>> <... snip ...>
>>
>>> GET http://www.google.com/ HTTP/1.1
>>> User-Agent: WebClient/1.4 (; Squeak4.1-9957; Win32)
>>> Host: www.google.com
>>> Proxy-Authorization: NTLM
>>> TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==
>>>
>>> HTTP/1.0 407 Proxy Authentication Required
>>> server: squid/2.6.STABLE21
>>> date: Tue, 21 Sep 2010 08:57:44 GMT
>>> content-type: text/html
>>> content-length: 1289
>>> expires: Tue, 21 Sep 2010 08:57:44 GMT
>>> x-squid-error: ERR_CACHE_ACCESS_DENIED 0
>>> x-cache: MISS from cache.gondor.fors
>>> x-cache-lookup: NONE from cache.gondor.fors:3128
>>> via: 1.0 cache.gondor.fors:3128 (squid/2.6.STABLE21)
>>> proxy-connection: close
>>>
>>
>> This is weird. Squid responds as if the client had absolutely no proxy
>> authentication header sent. I.e., it doesn't even respond with the
>> challenge to the NTLM auth header although it lists NTLM as
>> authentication scheme. Are you certain that NTLM is set up properly? If
>> you are, can you check the squid log files to see if they say anything
>> "interesting" (i.e., perhaps there's something wrong about the request
>> but I don't see what that would be.
>>
>> Cheers,
>> - Andreas
>>
>>
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.squeakfoundation.org/pipermail/squeak-dev/attachments/20100924/b63ff335/attachment.htm


More information about the Squeak-dev mailing list