Hi,
2 questions:

1) How can you say that NTLM is requested? Reading these lines ?
< HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authoriza
tion to fulfill the request. Access to the Web Proxy filter is denied.  )
< Via: 1.1 ISA02
< Proxy-Authenticate: Negotiate
< Proxy-Authenticate: Kerberos
< Proxy-Authenticate: NTLM

2) I read the manual but I didn't find how I can set the NTLM authentication (and also Kerberos to tell the truth)...can you give me a trick?

Thanks&Regards,

From: curl-library-bounces_at_cool.haxx.se [mailto:curl-library-bounces_at_cool.haxx.se] On Behalf Of Ralph Mitchell
Sent: Wednesday, April 29, 2009 9:20 AM
To: libcurl development
Subject: Re: Error 407 with Proxy authentication

On Wed, Apr 29, 2009 at 2:13 AM, AMBROSINI Marco <m.ambrosini_at_itcgr.net> wrote:
Hi,

>Are you just making the one attempt to get through the proxy??  I once had a problem with a proxy where I had >to make the first attempt without the userid/passwd, get the "proxy auth required" response, then try again >*with* the userid/passwd.  It would not let me get through on the first try, even with the userid/passwd.
I'm making only one attempt, but I run the same curl instruction many times...how did you make 2 attempts? Simply running the instruction 2 times?

>BTW, you should change that password - the encoding is really easy to reverse...
My first goal is to make it work, after I'll adjust also this point :)

Thank you for your help (I need to make it work! :P ) ... I copy here the tests I did with verbose and with -anyauth...same result:

-----------------------------------------------------------------------------------
C:\Program Files\CURL\CURL>curl -v -u DOMAIN\user -x 10.10.82.13:80 http:/
/www.google.com
Enter host password for user 'DOMAIN\user':
* About to connect() to proxy 10.10.82.13 port 80 (#0)
*   Trying 10.10.82.13... connected
* Connected to 10.10.82.13 (10.10.82.13) port 80 (#0)
* Server auth using Basic with user 'DOMAIN\user'
> GET http://www.google.com HTTP/1.1
> Authorization: Basic RE9NSVRDXHUwMTAxMDExMTE6dGF0b3BpdHRhMzc=
> User-Agent: curl/7.19.4 (i586-pc-mingw32msvc) libcurl/7.19.4 OpenSSL/0.9.8k zl
ib/1.2.3
> Host: www.google.com
> Accept: */*
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authoriza
tion to fulfill the request. Access to the Web Proxy filter is denied.  )
< Via: 1.1 ISA02
< Proxy-Authenticate: Negotiate
< Proxy-Authenticate: Kerberos
< Proxy-Authenticate: NTLM

Michael is right - you need to be using NTLM.  I completely missed that in the debug output.  Been out of work too long, I think...

Ralph Mitchell
Received on 2009-04-29