Maybe we should have an option in the proxy setup to indicate if it requires NTLM, and fall back to the JDK mechanism if so?
- Brett On 03/02/2012, at 3:49 AM, Olivier Lamy wrote: > Hello, > For performance reason we switch to wagon http (based on apache http client). > This doesn't support NTLM see > http://hc.apache.org/httpcomponents-client-ga/ntlm.html. > What you can try is to remove wagon-http-2.*.jar from WEB-INF/lib and > replace with the lightweight one here: > http://repo.maven.apache.org/maven2/org/apache/maven/wagon/wagon-http-lightweight/2.2/ > > Not tested :-) > > > 2012/2/2 Szelag, Lukasz <[email protected]>: >> I have been struggling recently to make the latest Archiva (1.4-M2) work >> through a corporate proxy without any success. I upgraded existing Archiva >> 1.3.5 installation where this problem didn't occur in respect to HTTP URLs. >> >> From below log it appears that "Proxy authentication error: Credentials >> cannot be used for NTLM authentication" is the root cause. Does this mean >> that NTLM proxies are not supported? Was NTLM support dropped between >> Archiva 1.3.5 (where the same works) and 1.4-M2? >> >> Thanks, >> Lukasz >> >> >> 2012-02-02 10:46:48,582 [qtp1120643297-21] DEBUG >> org.apache.archiva.proxy.common.DebugTransferListener - transferInitiated >> for resource org/codeh >> aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url >> http://repo1.maven.org/maven2/ >> 2012-02-02 10:46:48,834 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1. >> 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Cache-control: no-cache[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Cache-store: no-store[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Pragma: no-cache[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Expires: 0[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Accept-Encoding: gzip[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Host: repo1.maven.org[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Proxy-Connection: Keep-Alive[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "[\r][\n]" >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/ >> 1.1/plexus-utils-1.1.pom HTTP/1.1 >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Cache-control: no-cache >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Cache-store: no-store >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Pragma: no-cache >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Expires: 0 >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Accept-Encoding: gzip >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Host: repo1.maven.org >> 2012-02-02 10:46:48,835 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Proxy-Connection: Keep-Alive >> 2012-02-02 10:46:49,116 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "HTTP/1.1 407 Proxy Authentication Required[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Proxy-Authenticate: NTLM[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Cache-Control: no-cache[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Pragma: no-cache[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Content-Type: text/html; charset=utf-8[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Proxy-Connection: close[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Connection: close[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Content-Length: 895[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "[\r][\n]" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << HTTP/1.1 407 Proxy Authentication Required >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Proxy-Authenticate: NTLM >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap" >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Cache-Control: no-cache >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Pragma: no-cache >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Content-Type: text/html; charset=utf-8 >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Proxy-Connection: close >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/ >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Connection: close >> 2012-02-02 10:46:49,118 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Content-Length: 895 >> 2012-02-02 10:46:49,157 [qtp1120643297-21] ERROR >> org.apache.http.client.protocol.RequestProxyAuthentication - Proxy >> authentication error: Credent >> ials cannot be used for NTLM authentication: >> org.apache.http.auth.UsernamePasswordCredentials >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/1. >> 1/plexus-utils-1.1.pom HTTP/1.1[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Cache-control: no-cache[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Cache-store: no-store[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Pragma: no-cache[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Expires: 0[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Accept-Encoding: gzip[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Host: repo1.maven.org[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Proxy-Connection: Keep-Alive[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "Cookie: BCSI-CS-41D6D8BAA7362CE4=2[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.wire - >> >> "[\r][\n]" >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> GET http://repo1.maven.org/maven2/org/codehaus/plexus/plexus-utils/ >> 1.1/plexus-utils-1.1.pom HTTP/1.1 >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Cache-control: no-cache >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Cache-store: no-store >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Pragma: no-cache >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Expires: 0 >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Accept-Encoding: gzip >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Host: repo1.maven.org >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Proxy-Connection: Keep-Alive >> 2012-02-02 10:46:49,157 [qtp1120643297-21] DEBUG org.apache.http.headers - >> >> Cookie: BCSI-CS-41D6D8BAA7362CE4=2 >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "HTTP/1.1 407 Proxy Authentication Required[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Proxy-Authenticate: NTLM[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap"[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Cache-Control: no-cache[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Pragma: no-cache[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Content-Type: text/html; charset=utf-8[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Proxy-Connection: close[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Connection: close[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "Content-Length: 895[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.wire - << >> "[\r][\n]" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << HTTP/1.1 407 Proxy Authentication Required >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Proxy-Authenticate: NTLM >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Proxy-Authenticate: BASIC realm="Auth_Seq_NTLM_to_ldap" >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Cache-Control: no-cache >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Pragma: no-cache >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Content-Type: text/html; charset=utf-8 >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Proxy-Connection: close >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Set-Cookie: BCSI-CS-41D6D8BAA7362CE4=2; Path=/ >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Connection: close >> 2012-02-02 10:46:49,196 [qtp1120643297-21] DEBUG org.apache.http.headers - >> << Content-Length: 895 >> 2012-02-02 10:46:49,197 [qtp1120643297-21] DEBUG >> org.apache.archiva.proxy.common.DebugTransferListener - wagon debug >> http://repo1.maven.org/maven >> 2/org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom - Status code: >> 407, ReasonPhrase:Proxy Authentication Required. >> 2012-02-02 10:46:49,198 [qtp1120643297-21] DEBUG >> org.apache.archiva.proxy.common.DebugTransferListener - transferError for >> resource [org/codehaus >> /plexus/plexus-utils/1.1/plexus-utils-1.1.pom, >> http://repo1.maven.org/maven2/] on repository url >> org.apache.maven.wagon.authorization.Authorizatio >> nException: Not authorized by proxy, ReasonPhrase:Proxy Authentication >> Required. >> 2012-02-02 10:46:49,203 [qtp1120643297-21] WARN >> org.apache.archiva.proxy.DefaultRepositoryProxyConnectors - Transfer error >> from repository "cent >> ral" for artifact org.codehaus.plexus:plexus-utils:1.1::pom, continuing to >> next repository. Error message: Download failure on resource [http://re >> po1.maven.org/maven2//org/codehaus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom]:Not >> authorized by proxy, ReasonPhrase:Proxy Authentication Requir >> ed. >> 2012-02-02 10:46:49,207 [qtp1120643297-21] DEBUG >> org.apache.archiva.proxy.common.DebugTransferListener - transferInitiated >> for resource org/codeh >> aus/plexus/plexus-utils/1.1/plexus-utils-1.1.pom on repository url >> http://download.java.net/maven/2/ >> >> ---------------------------------------------------------------------- >> This message w/attachments (message) is intended solely for the use of the >> intended recipient(s) and may contain information that is privileged, >> confidential or proprietary. If you are not an intended recipient, please >> notify the sender, and then please delete and destroy all copies and >> attachments, and be advised that any review or dissemination of, or the >> taking of any action in reliance on, the information contained in or >> attached to this message is prohibited. >> Unless specifically indicated, this message is not an offer to sell or a >> solicitation of any investment products or other financial product or >> service, an official confirmation of any transaction, or an official >> statement of Sender. Subject to applicable law, Sender may intercept, >> monitor, review and retain e-communications (EC) traveling through its >> networks/systems and may produce any such EC to regulators, law enforcement, >> in litigation and as required by law. >> The laws of the country of each sender/recipient may impact the handling of >> EC, and EC may be archived, supervised and produced in countries other than >> the country in which you are located. This message cannot be guaranteed to >> be secure or free of errors or viruses. >> >> References to "Sender" are references to any subsidiary of Bank of America >> Corporation. Securities and Insurance Products: * Are Not FDIC Insured * Are >> Not Bank Guaranteed * May Lose Value * Are Not a Bank Deposit * Are Not a >> Condition to Any Banking Service or Activity * Are Not Insured by Any >> Federal Government Agency. Attachments that are part of this EC may have >> additional important disclosures and disclaimers, which you should read. >> This message is subject to terms available at the following link: >> http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender you >> consent to the foregoing. > > > > -- > Olivier Lamy > Talend: http://coders.talend.com > http://twitter.com/olamy | http://linkedin.com/in/olamy -- Brett Porter [email protected] http://brettporter.wordpress.com/ http://au.linkedin.com/in/brettporter http://twitter.com/brettporter
