[
https://issues.apache.org/jira/browse/HTTPCLIENT-1272?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13528390#comment-13528390
]
Daz DeBoer commented on HTTPCLIENT-1272:
----------------------------------------
Ok understood. I didn't realise that HTTPCLIENT-1107 was about the case where
HttpClient could not attempt the first authentication, rather than attempting
the first authentication and having it fail.
We don't presently require explicit proxy configuration for NTLM
authentication, nor do we provide a mechanism to define which authentication
scheme should be used. We attempt to deduce the values for Domain and
Workstation for NTLM authentication. This means that a user may provide their
Basic Auth credentials and we'll try to use them for NTLM authentication where
the server requests it.
I'm comfortable if you want to mark this as will-not-fix, and we'll need to
consider ways to empower the user to choose the appropriate scheme. Proxy
authenticate is a source of much frustration for our new users who are working
behing corporate firewalls. Ideally, we'd have a solution that 'just works',
and NTLM authentication is often an example of something that just doesn't.
> HttpClient does not retry failed PROXY authentication when multiple
> challenges are present
> ------------------------------------------------------------------------------------------
>
> Key: HTTPCLIENT-1272
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1272
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpClient
> Affects Versions: 4.2.2
> Reporter: Daz DeBoer
>
> Similar to HTTPCLIENT-1107, but for Proxy authentication. It appears that
> subsequent authentication schemes are not attempted if an earlier scheme
> fails.
> In our case, a proxy supports Negotiate, NTLM and BASIC authentication. When
> NTML authentication fails due to the wrong credentials being supplied, BASIC
> authentication is never attempted against the proxy.
> I am a Gradle core developer, and we use HttpClient internally for dependency
> resolution. This issue was reported by one of our users.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
