cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: NTLM proxy nightmare - POST problem?

From: Jonathan Arnold <jarnold_at_insors.com>
Date: Thu, 08 Mar 2007 10:05:55 -0500

Dan Fandrich wrote:
> On Wed, Mar 07, 2007 at 03:19:35PM -0500, Jonathan Arnold wrote:
>> That didn't seem to help. It seems to work okay if I just do a GET before
>> doing a post. Ie, it seems the post logic doesn't do the retries correctly?
>
> Let's see the logs for these cases.

I've attached the '--trace-ascii' log for the hang. It doesn't show much. A POST
by curl, followed by a receive of the proxy auth error. Then nothing. It's not
surprising there's no auth info in the first POST, as the key is that I'm doing
an 'anyauth', so it first starts with nothing and tries to figure it out from there.
If it does a GET, it works correctly, as you can see from the second log.

>> I'm
>> flailing around here, I most freely admit! I am working on addng a "GET" or
>> "HEADER" before every post as a work around in my program, and that seems to
>> be helping.
>
> Someone else posted a problem with NTLM proxy authentication recently;
> see http://curl.haxx.se/mail/lib-2007-01/0056.html There are also a couple
> of NTLM problems listed in the KNOWN_BUGS document.

Yes, I checked those out. The KNOWN_BUGS and the FAQ have NTLM things, but nothing
quite like this, although the multiple connection one might come back and bite me
if I ever get past this one. The recent NTLM proxy bug isn't it, because actually
proxy auth works in most cases, just not a POST with anyauth.

-- 
Jonathan Arnold           Software Engineer
inSORS Integrated Communications, Inc
jarnold_at_insors.com Office/fax: 781.391.2818

$ curl --trace-ascii proxy.log --proxy-anyauth --proxy-user pusr:ppwd -x isa.insors.net:8080 -u "husr:hpwd" http://igmeeting.insors.net/igpix/ -d REMURL=1

$ curl --trace-ascii proxy.log --proxy-anyauth --proxy-user pusr:ppwd -x isa.insors.net:8080 -u "husr:hpwd" http://igmeeting.insors.net/igpix/ -G -d REMURL=1

== Info: About to connect() to proxy isa.insors.net port 8080
== Info: Trying 64.157.28.48... == Info: connected
== Info: Connected to isa.insors.net (64.157.28.48) port 8080
== Info: Server auth using Basic with user 'husr'
=> Send header, 291 bytes (0x123)
0000: GET http://igmeeting.insors.net/igpix/?REMURL=1 HTTP/1.1
003a: Authorization: Basic amFybm9sZEBpbnNvcnMuY29tOmlnbTEyMw==
0075: User-Agent: curl/7.15.4 (i686-pc-cygwin) libcurl/7.15.4 OpenSSL/
00b5: 0.9.8e zlib/1.2.3
00c8: Host: igmeeting.insors.net
00e4: Pragma: no-cache
00f6: Accept: */*
0103: Proxy-Connection: Keep-Alive
0121:
<= Recv header, 154 bytes (0x9a)
0000: HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requ
0040: ires authorization to fulfill the request. Access to the Web Pro
0080: xy service is denied. )
<= Recv header, 24 bytes (0x18)
0000: Via: 1.1 INSORS-SERVER
<= Recv header, 31 bytes (0x1f)
0000: Proxy-Authenticate: Negotiate
<= Recv header, 30 bytes (0x1e)
0000: Proxy-Authenticate: Kerberos
<= Recv header, 26 bytes (0x1a)
0000: Proxy-Authenticate: NTLM
<= Recv header, 24 bytes (0x18)
0000: Connection: Keep-Alive
<= Recv header, 30 bytes (0x1e)
0000: Proxy-Connection: Keep-Alive
<= Recv header, 18 bytes (0x12)
0000: Pragma: no-cache
<= Recv header, 25 bytes (0x19)
0000: Cache-Control: no-cache
<= Recv header, 25 bytes (0x19)
0000: Content-Type: text/html
<= Recv header, 24 bytes (0x18)
0000: Content-Length: 4099
== Info: Ignoring the response-body
<= Recv data, 3640 bytes (0xe38)
0000: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
0040: <HTML><HEAD><TITLE>Error Message</TITLE>
006a: <META http-equiv=Content-Type content="text/html; charset=UTF-8"
00aa: >
00ad: <STYLE id=L_default_1>A {
00c8: .FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #005a80; FONT-FAMILY
0108: : tahoma
0112: }
0115: A:hover {
0120: .FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #0d3372; FONT-FAMILY
0160: : tahoma
016a: }
016d: TD {
0173: .FONT-SIZE: 8pt; FONT-FAMILY: tahoma
0199: }
019c: TD.titleBorder {
01ae: .BORDER-RIGHT: #955319 1px solid; BORDER-TOP: #955319 1px solid;
01ee: PADDING-LEFT: 8px; FONT-WEIGHT: bold; FONT-SIZE: 12pt; VERTICAL
022e: -ALIGN: middle; BORDER-LEFT: #955319 0px solid; COLOR: #955319;
026e: BORDER-BOTTOM: #955319 1px solid; FONT-FAMILY: tahoma; HEIGHT: 3
02ae: 5px; BACKGROUND-COLOR: #d2b87a; TEXT-ALIGN: left
02e0: }
02e3: TD.titleBorder_x {
02f7: .BORDER-RIGHT: #955319 0px solid; BORDER-TOP: #955319 1px solid;
0337: PADDING-LEFT: 8px; FONT-WEIGHT: bold; FONT-SIZE: 12pt; VERTICAL
0377: -ALIGN: middle; BORDER-LEFT: #955319 1px solid; COLOR: #978c79;
03b7: BORDER-BOTTOM: #955319 1px solid; FONT-FAMILY: tahoma; HEIGHT: 3
03f7: 5px; BACKGROUND-COLOR: #d2b87a; TEXT-ALIGN: left
0429: }
042c: .TitleDescription {
0441: .FONT-WEIGHT: bold; FONT-SIZE: 12pt; COLOR: black; FONT-FAMILY:
0481: tahoma
0489: }
048c: SPAN.explain {
049c: .FONT-WEIGHT: normal; FONT-SIZE: 10pt; COLOR: #934225
04d3: }
04d6: SPAN.TryThings {
04e8: .FONT-WEIGHT: normal; FONT-SIZE: 10pt; COLOR: #934225
051f: }
0522: .TryList {
052e: .MARGIN-TOP: 5px; FONT-WEIGHT: normal; FONT-SIZE: 8pt; COLOR: bl
056e: ack; FONT-FAMILY: tahoma
0588: }
058b: .X {
0591: .BORDER-RIGHT: #955319 1px solid; BORDER-TOP: #955319 1px solid;
05d1: FONT-WEIGHT: normal; FONT-SIZE: 12pt; BORDER-LEFT: #955319 1px
0611: solid; COLOR: #7b3807; BORDER-BOTTOM: #955319 1px solid; FONT-FA
0651: MILY: verdana; BACKGROUND-COLOR: #d1c2b4
067b: }
067e: .adminList {
068c: .MARGIN-TOP: 2px
069e: }
06a1: </STYLE>
06ab: <META content="MSHTML 6.00.2800.1170" name=GENERATOR></HEAD>
06e9: <BODY bgColor=#f3f3ed>
0701: <TABLE cellSpacing=0 cellPadding=0 width="100%">
0733: <TBODY>
073e: <TR>
0746: <TD class=titleborder_x width=30>
076d: <TABLE height=25 cellSpacing=2 cellPadding=0 width=25 bgCo
07ad: lor=black>
07b9: <TBODY>
07ca: <TR>
07d8: <TD class=x vAlign=center align=middle>X</TD>
0811: </TR>
0820: </TBODY>
0832: </TABLE>
0842: </TD>
084d: <TD class=titleBorder id=L_default_2>Network Access Message:
088d: <SPAN class=TitleDescription> The page cannot be displayed</SPAN
08cd: > </TD>
08d6: </TR>
08df: </TBODY>
08eb: </TABLE>
08f5:
08f7: <TABLE id=spacer>
090a: <TBODY>
0915: <TR>
091d: <TD height=10></TD></TR></TBODY></TABLE>
094b: <TABLE width=400>
095e: <TBODY>
0969: <TR>
0971: <TD noWrap width=25></TD>
0990: <TD width=400><SPAN class=explain><ID id=L_default_3><B>Expl
09d0: anation:</B></ID></SPAN><ID id=L_default_4> There is a problem w
0a10: ith the page you are trying to reach and it cannot be displayed.
0a50: </ID><BR><BR>
0a60: <B><SPAN class=tryThings><ID id=L_default_5><B>Try the follo
0aa0: wing:</B></ID></SPAN></B>
0abc: <UL class=TryList>
0ad6: <LI id=L_default_6><B>Refresh page:</B> Search for the p
0b16: age again by clicking the Refresh button. The timeout may have o
0b56: ccurred due to Internet congestion.
0b7b: <LI id=L_default_7><B>Check spelling:</B> Check that you typed t
0bbb: he Web page address correctly. The address may have been mistype
0bfb: d.
0bff: <LI id=L_default_8><B>Access from a link:</B> If there is a link
0c3f: to the page you are looking for, try accessing the page from th
0c7f: at link.
0c89:
0c8b: </UL>
0c98: <ID id=L_default_9>If you are still not able to view the request
0cd8: ed page, try contacting your administrator or Helpdesk.</ID> <BR
0d18: ><BR>
0d1f: </TD>
0d2a: </TR>
0d33: </TBODY>
0d3f: </TABLE>
0d49:
0d4b: <TABLE id=spacer><TBODY><TR><TD height=15></TD></TR></TBODY></TA
0d8b: BLE>
0d91:
0d93: <TABLE width=400>
0da6: <TBODY>
0db1: <TR>
0db9: <TD noWrap width=25></TD>
0dd8: <TD width=400 id=L_default_10><B>Technical Information (for
0e18: support personnel)</B>
0e31: <
<= Recv data, 459 bytes (0x1cb)
0000: UL class=adminList>
0015: <LI id=L_default_11>Error Code: 407 Proxy Authentication
0055: Required. The ISA Server requires authorization to fulfill the
0095: request. Access to the Web Proxy service is denied. (12209)
00d2: <LI id=L_default_12>IP Address: 192.168.0.1
00ff: <LI id=L_default_13>Date: 3/8/2007 3:02:03 PM
012e: <LI id=L_default_14>Server: INSORS-SERVER
0159: <LI id=L_default_15>Source: proxy
017c:
017e: </UL>
018b: </TD>
0196: </TR>
019f: </TBODY>
01ab: </TABLE>
01b5:
01b7: </BODY>
01c0: </HTML>
01c9:
== Info: Connection #0 to host isa.insors.net left intact
== Info: Issue another request to this URL: 'http://igmeeting.insors.net/igpix/?REMURL=1'
== Info: Re-using existing connection! (#0) with host isa.insors.net
== Info: Connected to isa.insors.net (64.157.28.48) port 8080
== Info: Proxy auth using NTLM with user 'pusr'
== Info: Server auth using Basic with user 'husr'
=> Send header, 363 bytes (0x16b)
0000: GET http://igmeeting.insors.net/igpix/?REMURL=1 HTTP/1.1
003a: Proxy-Authorization: NTLM TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAA
007a: AAAAA=
0082: Authorization: Basic amFybm9sZEBpbnNvcnMuY29tOmlnbTEyMw==
00bd: User-Agent: curl/7.15.4 (i686-pc-cygwin) libcurl/7.15.4 OpenSSL/
00fd: 0.9.8e zlib/1.2.3
0110: Host: igmeeting.insors.net
012c: Pragma: no-cache
013e: Accept: */*
014b: Proxy-Connection: Keep-Alive
0169:
<= Recv header, 67 bytes (0x43)
0000: HTTP/1.1 407 Proxy Authentication Required ( Access is denied.
0040: )
<= Recv header, 24 bytes (0x18)
0000: Via: 1.1 INSORS-SERVER
<= Recv header, 287 bytes (0x11f)
0000: Proxy-Authenticate: NTLM TlRMTVNTUAACAAAADQANADgAAAAGgooC2AvOUpi
0040: 6rGwAAAAAAAAAAHwAfABFAAAABQCTCAAAAA9JTlNPUlMtU0VSVkVSAgAaAEkATgB
0080: TAE8AUgBTAC0AUwBFAFIAVgBFAFIAAQAaAEkATgBTAE8AUgBTAC0AUwBFAFIAVgB
00c0: FAFIABAAaAEkATgBTAE8AUgBTAC0AUwBFAFIAVgBFAFIAAwAaAEkATgBTAE8AUgB
0100: TAC0AUwBFAFIAVgBFAFIAAAAAAA==
<= Recv header, 24 bytes (0x18)
0000: Connection: Keep-Alive
<= Recv header, 30 bytes (0x1e)
0000: Proxy-Connection: Keep-Alive
<= Recv header, 18 bytes (0x12)
0000: Pragma: no-cache
<= Recv header, 25 bytes (0x19)
0000: Cache-Control: no-cache
<= Recv header, 25 bytes (0x19)
0000: Content-Type: text/html
<= Recv header, 24 bytes (0x18)
0000: Content-Length: 0
== Info: Connection #0 to host isa.insors.net left intact
== Info: Issue another request to this URL: 'http://igmeeting.insors.net/igpix/?REMURL=1'
== Info: Re-using existing connection! (#0) with host isa.insors.net
== Info: Connected to isa.insors.net (64.157.28.48) port 8080
== Info: Proxy auth using NTLM with user 'pusr'
== Info: Server auth using Basic with user 'husr
=> Send header, 491 bytes (0x1eb)
0000: GET http://igmeeting.insors.net/igpix/?REMURL=1 HTTP/1.1
003a: Proxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAAA
007a: AAAABwAAAABgAGAHAAAAALAAsAdgAAAAAAAAAAAAAABoKKAmj5TRix5j9WAAAAAA
00ba: AAAAAAAAAAAAAAAG753TV8A6xTUYJitho7YKAv0Qc87JwSHWluc29yc0Jsb29kU2
00fa: ltcGxl
0102: Authorization: Basic amFybm9sZEBpbnNvcnMuY29tOmlnbTEyMw==
013d: User-Agent: curl/7.15.4 (i686-pc-cygwin) libcurl/7.15.4 OpenSSL/
017d: 0.9.8e zlib/1.2.3
0190: Host: igmeeting.insors.net
01ac: Pragma: no-cache
01be: Accept: */*
01cb: Proxy-Connection: Keep-Alive
01e9:
<= Recv header, 17 bytes (0x11)
0000: HTTP/1.1 200 OK
<= Recv header, 24 bytes (0x18)
0000: Via: 1.1 INSORS-SERVER
<= Recv header, 24 bytes (0x18)
0000: Connection: Keep-Alive
<= Recv header, 30 bytes (0x1e)
0000: Proxy-Connection: Keep-Alive
<= Recv header, 28 bytes (0x1c)
0000: Transfer-Encoding: chunked
<= Recv header, 39 bytes (0x27)
0000: Expires: Sat, 1 Jan 2000 00:00:01 GMT
<= Recv header, 37 bytes (0x25)
0000: Date: Thu, 08 Mar 2007 15:00:48 GMT
<= Recv header, 47 bytes (0x2f)
0000: Content-Type: text/html; charset="ISO-8859-1"
<= Recv header, 33 bytes (0x21)
0000: Server: Apache/2.0.46 (Red Hat)
<= Recv header, 18 bytes (0x12)
0000: Pragma: no-cache
<= Recv header, 61 bytes (0x3d)
0000: Cache-control: private, no-store, no-cache, must-revalidate
<= Recv data, 72 bytes (0x48)
0000: 3d
0004: PIXU-OK=http://igmeeting.insors.net/igpix/jarnold@insors.com.
0043: 0
0046:
== Info: Connection #0 to host isa.insors.net left intact
== Info: Closing connection #0
Received on 2007-03-08

This message: [ Message body ]
Next message: Shmulik Regev: "Re: [PATCH] SSL_CTX caching"
Previous message: Michael Wallner: "Re: [PATCH] SSL_CTX caching"
In reply to: Dan Fandrich: "Re: NTLM proxy nightmare - POST problem?"
Next in thread: Daniel Stenberg: "Re: NTLM proxy nightmare - POST problem?"
Reply: Daniel Stenberg: "Re: NTLM proxy nightmare - POST problem?"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]