cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: Re: Negotiate broken even with "-u :"

From: Michael-O <1983-01-06_at_gmx.net>
Date: Wed, 29 Jan 2014 12:11:38 +0100 (CET)

David,

> On Jan 29, 2014, at 1:06 AM, Michael-O <1983-01-06_at_gmx.net> wrote:
> > Are you really sure about that?. I use that option quite often and it does work with '-u :' here.
>
> Fairly certain -- I was incredulous at first, too, until I compared 7.19.6 vs 7.31.0. I tested against 7.31.0 and 7.34.0 (built from source on RHEL5). Make sure you’re not injecting the username via another source (I see the URL and .netrc file as also toggling the relevant bits).

Tried freshly compiled on RHEL 6

$ bin/curl --version
curl 7.34.0 (x86_64-unknown-linux-gnu) libcurl/7.34.0 OpenSSL/1.0.1e zlib/1.2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smtp smtps telnet tftp
Features: GSS-Negotiate IPv6 Largefile NTLM NTLM_WB SSL libz

$ bin/curl --verbose --negotiate -u : http://hostname:8080/manager/html
* About to connect() to hostname port 8080 (#0)
* Trying 1.2.3.4... connected
* Connected to hostname (1.2.3.4) port 8080 (#0)
> GET /manager/html HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.14.3.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: hostname:8080
> Accept: */*
>
< HTTP/1.1 401 Unauthorized
< Server: Apache-Coyote/1.1
< Cache-Control: private
< Expires: Thu, 01 Jan 1970 01:00:00 CET
< WWW-Authenticate: Negotiate
< Content-Type: text/html;charset=utf-8
< Content-Length: 930
< Date: Wed, 29 Jan 2014 11:06:01 GMT
<
* Ignoring the response-body
* Connection #0 to host hostname left intact
* Issue another request to this URL: 'http://hostname:8080/manager/html'
* Re-using existing connection! (#0) with host hostname
* Connected to hostname (1.2.3.4) port 8080 (#0)
* Server auth using GSS-Negotiate with user ''
> GET /manager/html HTTP/1.1
> Authorization: Negotiate YIIQFwYJKoZIhvcSAQICAQBughAGMIIQAqADAgEFoQMCAQ6iBwMFAAAAAACjgg8lYYIPITCCDx2gAwIBBaETGxFXVzAwNC5TSUVNRU5TLk5FVKItMCugAwIBA6EkMCIbB

Are you sure that your setup is ok?

Michael

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-01-29