On Tue, Mar 13, 2007 at 03:29:11PM +0100, Ulrich Eckhardt wrote:
...
> ..which is also the error message that svn displays (minus the "HTTP/1.0"). 
> BTW: if you use a https:// URL, the error message is rather 
> 
>   "Could not create SSL connection through proxy server .."
> 
> although the error message from the proxy is the same! This isn't exactly 
> helpful when trying to find out what is going wrong. Anyway, this is not the 
> immediate problem, I just wanted to mention it.

Good point, thanks for reporting that; it's simple to fix.

> Now, using the neon-debug-flags and strace, I see that Subversion/Neon 
> notices that some authentication is required:
> 
> > ah_create, for Proxy-Authenticate
> > ah_create, for WWW-Authenticate
> > ah_post_send (#0), code is 407 (want 407), Proxy-Authenticate is NTLM,
> > Basic realm="vProxy server" auth: Got challenge (code 407).
> > auth: Ignoring 'NTLM' challenge.
> > auth: Got 'Basic' challenge.
> > auth: Trying Basic challenge...
> > auth: Sending 'Basic' response.

This means that neon has asked Subversion to supply credentials, and 
Subversion has supplied some.  The request should then be resent with a 
a "Proxy-Authorization: Basic ..." header - can you confirm whether that 
is happening?  

This might be easier to diagnose if you send in the complete debug 
trace, use e.g. "http-debug-flags = 10" in the ~/.subversion/config, 
that will obscure the credentials used.

...
> The interesting thing here is that it only seems to consider the 'basic' 
> challenge and not NTLM. From the README I gather that Neon supports 'basic' 
> and 'digest' authentication, so NTLM is simply not implemented? I'm not sure 
> what the differences are, but if squid is configured to refuse the basic 
> variant, this will obviously fail. Since this is in a MS Windows network, 

neon doesn't support NTLM except in the Windows build.  But it doesn't 
make sense that the proxy would be issuing a Basic challenge if it 
wasn't prepared to accept Basic authentication; that sounds like a more 
subtle problem.

Regards,

joe
_______________________________________________
neon mailing list
[email protected]
http://mailman.webdav.org/mailman/listinfo/neon

Reply via email to