[ 
https://issues.apache.org/jira/browse/HTTPCLIENT-1488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13943024#comment-13943024
 ] 

Andreas Sewe commented on HTTPCLIENT-1488:
------------------------------------------

Fair enough.

FWIW, 
<http://squid-web-proxy-cache.1019090.n4.nabble.com/Problems-with-helper-ntlm-fake-auth-td4662460.html>
 may be related, although I frankly don't know enough about NTLM to follow the 
discussion all the way through.

> Built-in NTLM engine fails to authenticate against Squids ntlm_fake_auth, 
> JCIFS doesn't
> ---------------------------------------------------------------------------------------
>
>                 Key: HTTPCLIENT-1488
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1488
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>          Components: HttpClient
>    Affects Versions: 4.3.3
>         Environment: Squid 4.3.3
> JCIFS 1.3.17
>            Reporter: Andreas Sewe
>         Attachments: builtin.pcap.gz, builtin.txt, jcfis.pcap.gz, jcifs.txt
>
>
> I used the provided ClientProxyAuthentication example 
> <https://hc.apache.org/httpcomponents-client-4.2.x/httpclient/examples/org/apache/http/examples/client/ClientProxyAuthentication.java>
>  to authenticate with NTML against a local Squid instance, using its 
> ntlm_fake_auth helper (only does the handshake, all credentials are 
> considered valid).
> Unfortunately, this fails with the NTLM engine built into version 4.3.3 (also 
> tested with 4.2.1: same result). Following the guidance of 
> <http://hc.apache.org/httpcomponents-client-ga/ntlm.html>, I got it working 
> with JCIFS. Is Squid not implementing NTLM as expected by HttpComponents?
> I added two Wireshark captures to show the differences in handshake behaviour 
> between the built-in and JCIFS engines. Hope that helps.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to