From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wg0-x229.google.com (mail-wg0-x229.google.com [IPv6:2a00:1450:400c:c00::229]) by hurricane.the-brannons.com (Postfix) with ESMTPS id 7150378B22 for ; Mon, 11 Aug 2014 08:25:22 -0700 (PDT) Received: by mail-wg0-f41.google.com with SMTP id z12so8810673wgg.24 for ; Mon, 11 Aug 2014 08:24:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=7iV/lbqMaMvVd69VToCLGljUnwYf19wQif9gyAJ0KFY=; b=HLs+BRk4ladrDGZf3TtV/ZD81S+oBlVPrMt2Bv/bLyLi7w5sRow2EpNq828CGJxSri nNy6YWSPf8oqOaw7qOHwXsy/cXynANkrIGcYvEwGe0/lkbWY8Xa5/l/IpkH2oPc5dkSA qjcUWeg4anlo/3vBmol74EeYR2X8iBlMaxnOMR2p1EDyjW59wXbwHoVFCTqQfbN/HABT qdUSG4LxdkmxEvfsuZVyIqWPNaPj1w16FVqQZEn+6x/dDZnviN3hIYd817KNXa1NaUyF 0EFn6VQFSIdRzXtSbprk2Y3uEerOiekG4YOmTRmTuanRDD5QS6b/aK5bRlHfMtfNTur3 aOuQ== X-Received: by 10.180.88.167 with SMTP id bh7mr26973705wib.12.1407770664539; Mon, 11 Aug 2014 08:24:24 -0700 (PDT) Received: from toaster.adamthompson.me.uk (toaster.adamthompson.me.uk. [2001:8b0:1142:9042::2]) by mx.google.com with ESMTPSA id ez1sm45007468wib.15.2014.08.11.08.24.22 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Mon, 11 Aug 2014 08:24:22 -0700 (PDT) Date: Mon, 11 Aug 2014 16:24:20 +0100 From: Adam Thompson To: Chris Brannon Message-ID: <20140811152420.GB16817@toaster.adamthompson.me.uk> References: <20140811094117.GC5637@toaster.adamthompson.me.uk> <87zjfbjey1.fsf@mushroom.PK5001Z> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="EuxKj2iCbKjpUGkD" Content-Disposition: inline In-Reply-To: <87zjfbjey1.fsf@mushroom.PK5001Z> User-Agent: Mutt/1.5.23 (2014-03-12) Cc: Edbrowse-dev@lists.the-brannons.com Subject: Re: [Edbrowse-dev] NTLM in edbrowse X-BeenThere: edbrowse-dev@lists.the-brannons.com X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Edbrowse Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Aug 2014 15:25:23 -0000 --EuxKj2iCbKjpUGkD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 11, 2014 at 07:09:26AM -0700, Chris Brannon wrote: > Adam Thompson writes: >=20 > > I also see no evidence of any kind of auth header during the requests. >=20 > That's strange. No authentication header? Can you try using another > browser that is known to work and comparing the headers that it receives > and sends with the ones you are getting when trying to access the > service with edbrowse? > The lack of a WWW-Authenticate header makes me wonder if there could be > some JS magic going on here as well. Ok, so it looks like (from running a couple of curl commands) the problem is a libcurl one. Basically when I use --ntlm the request with curl succeeds, however when I use --anya= uth, libcurl tries Negotiate which obviously fails since I haven't got it set up. Since I suspect this is probably the case for almost everyone, I'm tempted to make edbrowse tell libcurl only to do basic, Digest and NTLM by default (testing with curl --basic --digest --ntlm works against the service concerned). We could then allow other auth methods in the config file. Any thoughts? Cheers, adam. --EuxKj2iCbKjpUGkD Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJT6OAkAAoJELZ22lNQBzHONrQIAItZ1uJS+b7HnqdTPLSuYEV7 RoTifN/VxiNLfk52crROijeR4XAcapRhnCjjZLHg7iOVSe2Q1zWmvjFjFiq+zU4J b4y/q7XfjS2l97pJlIIcpi4XXFJUOtM5+DnW2MSweHtr8bP87IBIfyuRSBBCwUXn Dmb7+yZvojTpK55qqtC8XnE4wtot4qA6mgM+6SaYH51kRwMaza9CF/3I1tLVJUL+ OSFQ7oGczVK0VGAV2gVtHhOcz1oZRazGFCQ91KTL78xiEVANqJSu+oWrdZ/BL6vD lQCf2pUAxg0J5vMadYoxAAzD91FsDcwCCjFlBAeTi4eQW+JOweiQaJe2CKdBiJU= =me5/ -----END PGP SIGNATURE----- --EuxKj2iCbKjpUGkD--