Ivy
  1. Ivy
  2. IVY-1094

Problem with NTLM proxy authentication

    Details

    • Type: Improvement Improvement
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 2.1.0-RC1
    • Fix Version/s: 2.1.0-RC2
    • Component/s: Core
    • Labels:
      None

      Description

      I had problems to resolve and retrieve artifacts from an IBiblio Resolver. I was behind a corporate proxy and even if this proxy was correctly configured in Ivy, I was permanently denied access.
      After looking at the HttpClientHandler source code, I found that this was due to a lack of support for NTLM authentication. So I added this behavior in the submitted patch trying not to break the original behavior.

      Now, Ivy supports NTLM authentication if -Dhttp.proxyRealm=<your_domain> is set in ANT_OPTS. I could not test Basic Authentication but it seems to work also. Maybe someone can confirm ?

      Moreover, in order to avoid breaking an old bug, I put NTLM AuthPolicy after the Basic one in the list authPrefs to make it of less priority during the scheme selection.

      1. HttpClientHandler.txt
        8 kB
        Mathieu Anquetin

        Activity

        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open Resolved Resolved
        11h 56m 1 Maarten Coene 12/Jun/09 22:01
        Maarten Coene made changes -
        Fix Version/s 2.1.0-RC2 [ 12314062 ]
        Fix Version/s trunk [ 12313426 ]
        Hide
        Mathieu Anquetin added a comment -

        Works for me!

        But I am still wondering if this solution works for users who use basic authentication for their proxy. Maybe using the UsernamePasswordCredentials when no realm has been set will still be needed.

        I am not closing this issue until some feedback on basic authentication is provided.

        Thanks for accepting my contribution to your great project!
        Mathieu

        Show
        Mathieu Anquetin added a comment - Works for me! But I am still wondering if this solution works for users who use basic authentication for their proxy. Maybe using the UsernamePasswordCredentials when no realm has been set will still be needed. I am not closing this issue until some feedback on basic authentication is provided. Thanks for accepting my contribution to your great project! Mathieu
        Maarten Coene made changes -
        Status Open [ 1 ] Resolved [ 5 ]
        Resolution Fixed [ 1 ]
        Hide
        Maarten Coene added a comment -

        I've applied a little updated version of your patch.
        Could you please give it a try?

        Note: I've reused the standard "http.auth.ntlm.domain" System property instead of the non-standard "http.proxyRealm" System property.

        Thanks a lot for the contribution!
        Maarten

        Show
        Maarten Coene added a comment - I've applied a little updated version of your patch. Could you please give it a try? Note: I've reused the standard "http.auth.ntlm.domain" System property instead of the non-standard "http.proxyRealm" System property. Thanks a lot for the contribution! Maarten
        Maarten Coene made changes -
        Issue Type Bug [ 1 ] Improvement [ 4 ]
        Assignee Maarten Coene [ maartenc ]
        Affects Version/s 2.1.0-RC1 [ 12313696 ]
        Affects Version/s trunk [ 12313426 ]
        Mathieu Anquetin made changes -
        Field Original Value New Value
        Attachment HttpClientHandler.txt [ 12410464 ]
        Mathieu Anquetin created issue -

          People

          • Assignee:
            Maarten Coene
            Reporter:
            Mathieu Anquetin
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development