cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Error 407 with Proxy authentication

From: Ralph Mitchell <ralphmitchell_at_gmail.com>
Date: Wed, 29 Apr 2009 02:19:30 -0500

On Wed, Apr 29, 2009 at 2:13 AM, AMBROSINI Marco <m.ambrosini_at_itcgr.net>wrote:

> Hi,
>
> >Are you just making the one attempt to get through the proxy?? I once had
> a problem with a proxy where I had >to make the first attempt without the
> userid/passwd, get the "proxy auth required" response, then try again
> >*with* the userid/passwd. It would not let me get through on the first
> try, even with the userid/passwd.
>
> I'm making only one attempt, but I run the same curl instruction many
> times...how did you make 2 attempts? Simply running the instruction 2 times?
>
> >BTW, you should change that password - the encoding is really easy to
> reverse...
> My first goal is to make it work, after I'll adjust also this point :)
>
> Thank you for your help (I need to make it work! :P ) ... I copy here the
> tests I did with verbose and with -anyauth...same result:
>
>
> -----------------------------------------------------------------------------------
> C:\Program Files\CURL\CURL>curl -v -u DOMAIN\user -x 10.10.82.13:80 http:/
> /www.google.com
> Enter host password for user 'DOMAIN\user':
> * About to connect() to proxy 10.10.82.13 port 80 (#0)
> * Trying 10.10.82.13... connected
> * Connected to 10.10.82.13 (10.10.82.13) port 80 (#0)
> * Server auth using Basic with user 'DOMAIN\user'
> > GET http://www.google.com HTTP/1.1
> > Authorization: Basic RE9NSVRDXHUwMTAxMDExMTE6dGF0b3BpdHRhMzc=
> > User-Agent: curl/7.19.4 (i586-pc-mingw32msvc) libcurl/7.19.4
> OpenSSL/0.9.8k zl
> ib/1.2.3
> > Host: www.google.com
> > Accept: */*
> > Proxy-Connection: Keep-Alive
> >
> < HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires
> authoriza
> tion to fulfill the request. Access to the Web Proxy filter is denied. )
> < Via: 1.1 ISA02
> < Proxy-Authenticate: Negotiate
> < Proxy-Authenticate: Kerberos
> < Proxy-Authenticate: NTLM
>

Michael is right - you need to be using NTLM. I completely missed that in
the debug output. Been out of work too long, I think...

Ralph Mitchell
Received on 2009-04-29