From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-we0-x22a.google.com (mail-we0-x22a.google.com [IPv6:2a00:1450:400c:c03::22a]) by hurricane.the-brannons.com (Postfix) with ESMTPS id EDFCD78AE0 for ; Mon, 11 Aug 2014 14:26:03 -0700 (PDT) Received: by mail-we0-f170.google.com with SMTP id w62so9194085wes.15 for ; Mon, 11 Aug 2014 14:25:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=4pGoRohLOzbp7cybB6wJuoD+ejvgdDuluFvF6qEyS/A=; b=1FP5YOxkYDEUZ3VLqnrqX7z6tE5RBSdzmoMvHrWfjCmV/nHG+PknO/uv1uz88hi9DK ksr+slJMNtWtik4dtPkmqyNmQcr84eHGDJWEr6o5Qka5hasmrA0cL/9sSFu2prkqgcWi PH7Juc3JoolcI1dh/j3IN8J/SSBZnUub9641HVZSMl+qM3PmvdRyF4NL/0CkZEKcepok edjsv/d+2kaOGNr+dwv4lpysqPs0szlI80GOwCChOC1mYNWMK2ambkdNH+SgNaZwZ8Gw obcUVwy2FzBDlQsNvArXKaPCV1ObKwjswW5XxEmaM2/vFhlAbjkG9sv+zDhgzBC0N0M4 zZ9w== X-Received: by 10.180.221.172 with SMTP id qf12mr27728962wic.18.1407792306197; Mon, 11 Aug 2014 14:25:06 -0700 (PDT) Received: from toaster.adamthompson.me.uk (toaster.adamthompson.me.uk. [2001:8b0:1142:9042::2]) by mx.google.com with ESMTPSA id w14sm31071145wij.2.2014.08.11.14.25.04 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Mon, 11 Aug 2014 14:25:05 -0700 (PDT) Date: Mon, 11 Aug 2014 22:25:02 +0100 From: Adam Thompson To: Chris Brannon Message-ID: <20140811212502.GD16817@toaster.adamthompson.me.uk> References: <20140811094117.GC5637@toaster.adamthompson.me.uk> <87zjfbjey1.fsf@mushroom.PK5001Z> <20140811152420.GB16817@toaster.adamthompson.me.uk> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="cQXOx3fnlpmgJsTP" Content-Disposition: inline In-Reply-To: <20140811152420.GB16817@toaster.adamthompson.me.uk> User-Agent: Mutt/1.5.23 (2014-03-12) Cc: Edbrowse-dev@lists.the-brannons.com Subject: Re: [Edbrowse-dev] NTLM in edbrowse X-BeenThere: edbrowse-dev@lists.the-brannons.com X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Edbrowse Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Aug 2014 21:26:04 -0000 --cQXOx3fnlpmgJsTP Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 11, 2014 at 04:24:20PM +0100, Adam Thompson wrote: > On Mon, Aug 11, 2014 at 07:09:26AM -0700, Chris Brannon wrote: > > Adam Thompson writes: > >=20 > > > I also see no evidence of any kind of auth header during the requests. > >=20 > > That's strange. No authentication header? Can you try using another > > browser that is known to work and comparing the headers that it receives > > and sends with the ones you are getting when trying to access the > > service with edbrowse? > > The lack of a WWW-Authenticate header makes me wonder if there could be > > some JS magic going on here as well. >=20 > Ok, so it looks like (from running a couple of curl commands) > the problem is a libcurl one. Basically > when I use --ntlm the request with curl succeeds, however when I use --an= yauth, > libcurl tries Negotiate which obviously fails since I haven't got it set = up. > Since I suspect this is probably the case for almost everyone, > I'm tempted to make edbrowse tell libcurl only to do basic, > Digest and NTLM by default (testing with curl --basic --digest --ntlm wor= ks > against the service concerned). I made this change to my local version (replace CURLAUTH_ANY with CURLAUTH_BASIC | CURLAUTH_DIGEST | CURLAUTH_NTLM) and all seems to work now. If you want I'll push this change unless anyone really wants Negotiate auth. Cheers, Adam. --cQXOx3fnlpmgJsTP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJT6TSuAAoJELZ22lNQBzHOjowIAI2+UoVHBEPtI7fSIiV8nscp +urgeAEmhpET3e1dC9NBuxeI8L2oT74QMQi5n/nXZRPCuo42zUSflVLWh6VLzOqj dZgsnJrSd38OWR5idVEn5wUoijL8RieHbYUX8vNX6YlDRX2rauV2FxhYdt4l7scd d1Wkv/Je2Ntms5sr2W7PGFSLB7ZmMiKxo3xzPvtFDS4OraEgJ1znDtwSoXMimmHz jHyvv50HdUSr54vFuoSaYOlmoFTD16QwRXUeW1sZyjRIlbErWdgiWN22d1ywmZpR d7Bi9jou0kI+PctSNMCIqIyOr3X1N3y3GpbiW0t0vRQ0v4huou435sV/8aoUn34= =LOjD -----END PGP SIGNATURE----- --cQXOx3fnlpmgJsTP--