Hi Matt,
It's tough to get much out of a failed connection to help with the
process. The way you're going about it sounds fine, and the log does
seem to indicate a straight forward authentication failure.
What you're seeing in the log is this:
Step one is client to server, plain request.
Step two is server to client, 407 authentication required.
Step three is client to server, this time with a "Type 1" NTLM message
containing the host, domain and a set of flags.
Step four is server to client, with a "Type 2" NTLM message containing
a challenge.
Step five is client to server, with a "Type 3" NTLM message with a
response.
The next packet is supposed to be the page requested, but in this case
the server is returning the original 407 authentication required page.
It didn't like something about the authentication provided, and I'm
afraid it's near impossible to tell what the problem was from this end.
Does anyone else have any experience with this style of proxy, and
have any suggestions of things for Matt to try?
Heath
On 09/07/2008, at 6:56 AM, Matt Rosenberg wrote:
Hi Heath and everyone,
I am unable to make Authoxy 3.4 work with my company’s ISA 2006
proxy. I
have absolutely no access to the proxy configuration, so any info I
can
provide is all discovered via client testing. Authoxy worked fine
with our
old proxy, which was an earlier ISA version, without the NTLM
option. I
simply put in domain\username and password and it worked.
In the new one, I have tried both the same configuration as before
and with
the NTLM option. I have tried several variations for the “domain” and
“username” settings. For username, I’ve done domain\username and
[EMAIL PROTECTED] For domain, I’ve done DOMAIN, domain.org, and
maybe a
couple of others. I’ve put the output from a Text Authoxy session
below.
Anyone know how to get this working? Does it look like the mechanics
are
correct and I just don’t have the right combination of domain and
username
settings?
Thanks,
Matt
------------------
Test connection for authoxyd has begun.
GET http://www.hrsoftworks.net/TestConnection.html HTTP/1.1
Host: www.hrsoftworks.net
Pragma: no-cache
Accept: */*
Proxy-Connection: Keep-Alive
<<<
HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires
authorization to fulfill the request. Access to the Web Proxy filter
is
denied. )
Via: 1.1 BGISA03
Proxy-Authenticate: Negotiate
Proxy-Authenticate: Kerberos
Proxy-Authenticate: NTLM
Connection: Keep-Alive
Proxy-Connection: Keep-Alive
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Content-Length: 4123
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Error Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=UTF-8">
[A bunch of HTML removed here]
<TABLE id=spacer><TBODY><TR><TD height=15></TD></TR></TBODY></TABLE>
<TABLE width=400>
<TBODY>
<TR>
<TD noWrap width=25></TD>
<TD width=400 id=L_default_10><B>Technical Information (for support
personnel)</B>
<UL class=adminList>
<LI id=L_default_11>Error Code: 407 Proxy Authentication
Required.
The ISA Server requires authorization to fulfill the request. Access
to the
Web Proxy filter is denied. (12209)
<LI id=L_default_12>IP Address: 192.168.103.11
<LI id=L_default_13>Date: 7/8/2008 8:37:01 PM [GMT]
<LI id=L_default_14>Server: bgisa03.caldera.MGMMIRAGE.ORG
<LI id=L_default_15>Source: proxy
</UL>
</TD>
</TR>
</TBODY>
</TABLE>
</BODY>
</HTML>
GET http://www.hrsoftworks.net/TestConnection.html HTTP/1.1
Proxy-Authorization: NTLM
TlRMTVNTUAABAAAABjIAAA0ADQApAAAACQAJACAAAABTVEFUSU9OMjJNR01NSVJBR0UuT1JH
Host: www.hrsoftworks.net
Pragma: no-cache
Accept: */*
Proxy-Connection: Keep-Alive
<<<
HTTP/1.1 407 Proxy Authentication Required ( Access is denied. )
Via: 1.1 BGISA03
Proxy-Authenticate: NTLM
TlRMTVNTUAACAAAABwAHADgAAAAGAoECJXexYTUZVucAAAAAAAAAALIAsgA/
AAAABQLODgAAAA9D
QUxERVJBAgAOAEMAQQBMAEQARQBSAEEAAQAOAEIARwBJAFMAQQAwADMABAAqAGMAYQBsAGQAZQBy
AGEALgBNAEcATQBNAEkAUgBBAEcARQAuAE8AUgBHAAMAOgBiAGcAaQBzAGEAMAAzAC4AYwBhAGwA
ZABlAHIAYQAuAE0ARwBNAE0ASQBSAEEARwBFAC4ATwBSAEcABQAaAE0ARwBNAE0ASQBSAEEARwBF
AC4ATwBSAEcAAAAAAA==
Connection: Keep-Alive
Proxy-Connection: Keep-Alive
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Content-Length: 0
GET http://www.hrsoftworks.net/TestConnection.html HTTP/1.1
Proxy-Authorization: NTLM
TlRMTVNTUAADAAAAGAAYAHIAAAAYABgAigAAAA0ADQBAAAAAGAAYAE0AAAANAA0AZQAAAAAAAACi
AAAABjIAAE1HTU1JUkFHRS5PUkdNUk9TRU5CRVJHQE1HTU1JUkFHRS5PUkdTVEFUSU9OMjIAUEFU
dC5s6EVvF6R0LmzoRW8XpHQubOhFbxekdC5s6EVvF6R0LmzoRW8XpHQubOhFbxek
Host: www.hrsoftworks.net
Pragma: no-cache
Accept: */*
Proxy-Connection: Keep-Alive
<<<
HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires
authorization to fulfill the request. Access to the Web Proxy filter
is
denied. )
Via: 1.1 BGISA03
Proxy-Authenticate: Negotiate
Proxy-Authenticate: Kerberos
Proxy-Authenticate: NTLM
Connection: close
Proxy-Connection: close
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Content-Length: 4123
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Error Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=UTF-8">
[A bunch of HTML removed here]
<TABLE id=spacer><TBODY><TR><TD height=15></TD></TR></TBODY></TABLE>
<TABLE width=400>
<TBODY>
<TR>
<TD noWrap width=25></TD>
<TD width=400 id=L_default_10><B>Technical Information (for support
personnel)</B>
<UL class=adminList>
<LI id=L_default_11>Error Code: 407 Proxy Authentication
Required.
The ISA Server requires authorization to fulfill the request. Access
to the
Web Proxy filter is denied. (12209)
<LI id=L_default_12>IP Address: 192.168.103.11
<LI id=L_default_13>Date: 7/8/2008 8:37:01 PM [GMT]
<LI id=L_default_14>Server: bgisa03.caldera.MGMMIRAGE.ORG
<LI id=L_default_15>Source: proxy
</UL>
</TD>
</TR>
</TBODY>
</TABLE>
</BODY>
</HTML>
--
________________________________________________________
| Heath Raftery <[EMAIL PROTECTED]> |
| HRSoftWorks <http://www.hrsoftworks.net> |
| |
| *There's nothing like a depressant to cheer you up* |
| - Heard at Moe's Tavern |
| _\|/_ |
|____________________________________m(. .)m_____________|
