cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: problem using NTLM authentication with default OS credentials

From: Michael-O <1983-01-06_at_gmx.net>
Date: Fri, 30 May 2014 10:21:23 +0200

Am 2014-05-30 10:13, schrieb jasper_ro_at_yahoo.com:
> Hello
>
>
>
> I am using libcurl built from 7.37 with gssapi support and I am facing the following problem:
>
> When running my application on a centos machine joined into an Active Directory Domain and accessing url's over a squid 3.10 proxy that uses NTLM Authentication I get an error when trying to use linux system credentials. Code snippet is the following:
>
> curl_easy_setopt(curl_handle,CURL_PROXYAUTH,CURLAUTH_NTLM | CURLAUTH_NTLM_WB | CURLAUTH_GSSNEGOTIATE);
> curl_easy_setopt(curl_handle,CURL_PROXYUSERPWD,":");
> curl_easy_perform(curl_handle) ;

> Same code snippet works on Windows machine if libcurl is compiled with USE_WINDOWS_SSPI.
>
> Is there a known problem in curl for running this way in linux ?

Providing ':' will only work with SSPI, on Linux/Unix, there is not NTLM
password cache. ':' works only with a Kerberos credential cache.

Provide a downgrade name and a password or move to Kerberos.

Michael

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-05-30