Bug 107384

Summary:	NTLM Auth against MS Exchange 2003 fails
Product:	[Unmaintained] kio	Reporter:	Dominik Fritz <kdebugs>
Component:	http	Assignee:	Unassigned bugs <unassigned-bugs-null>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	adawit
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	openSUSE
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Dominik Fritz 2005-06-14 11:48:33 UTC

Version:            (using KDE KDE 3.4.1)
Installed from:    SuSE RPMs
OS:                Linux

If I try to access the webaccess page of our MS Excange 2003 server the authorization fails. Accessing it with Firefox works fine.
After analyzing the transmitted packets it seems that the user and domainname have an wrong offset of one byte.

NTLMSSP
            NTLMSSP identifier: NTLMSSP
            NTLM Message Type: NTLMSSP_AUTH (0x00000003)
            Lan Manager Response: Empty
            NTLM Response: 444D9AD001E4FC52E869E737D4D978AE...
            Domain name: ??
            User name: ?????
            Host name: NULL

I can find the user and domainname in the packet but it seems that they have the wrong offset and therefore ethereal shows only ???
It does not change anything if I add the domainname or not.

Comment 1 Simone Gotti 2005-06-30 10:32:45 UTC

I think this is a dup of bug #93454 (fixed).

Comment 2 Ludovic Drolez 2005-09-01 12:40:52 UTC

Is there a way to disable ntlm auth in kde ?

Comment 3 Karl Kaputnik 2005-12-03 22:53:12 UTC

Hello, I have a similar Problem:

I use konqueror from KDE 3.5. NTLM Auth with a plain MS IIS works (tested with http), however
authentication with a MS Exchange Outlook web access does not work (using https).
As I use https to access the server normally, so I set up an apache server working
as reverse  proxy, "translating" from http to https:
client --http--> reverse_proxy --https--> outlook web access

Thats what happens when I use konqueror to access the site:
1. Konq sends get
2. Server replies:
    HTTP/1.1 401 Access Denied\r\n
        Request Version: HTTP/1.1
        Response Code: 401
    Date: Sat, 03 Dec 2005 20:59:41 GMT\r\n
    Server: Microsoft-IIS/5.0\r\n
    WWW-Authenticate: Negotiate\r\n
    WWW-Authenticate: NTLM\r\n
    Content-Length: 4609\r\n
    WWW-Authenticate: Digest qop="auth", realm="owa.test.de", nonce="abcdef"\r\n
    Content-Type: text/html; charset=ISO-8859-1\r\n
3. Konq tries to do auth:
   GET / HTTP/1.1\r\n
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.1
    Connection: Keep-Alive\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\n
    Accept: text/html, image/jpeg, image/png, text/*, image/*, */*\r\n
    Accept-Encoding: x-gzip, x-deflate, gzip, deflate\r\n
    Accept-Charset: utf-8, utf-8;q=0.5, *;q=0.5\r\n
    Accept-Language: de, en\r\n
    Host: owa.test.de\r\n
    Authorization: Digest username="kdetest", realm="owa.test.de", nonce="abcdef", uri="/", algorithm="MD5", qop="auth", cnonce="abc", nc=00000001, response="def
...
the auth windows pops up again


When trying that with firefox it works:
1. Fox sends get
2. Server replies:
    HTTP/1.1 401 Access Denied\r\n
        Request Version: HTTP/1.1
        Response Code: 401
    Date: Sat, 03 Dec 2005 21:05:37 GMT\r\n
    Server: Microsoft-IIS/5.0\r\n
    WWW-Authenticate: Negotiate\r\n
    WWW-Authenticate: NTLM\r\n
    Content-Length: 4609\r\n
    WWW-Authenticate: Digest qop="auth", realm="owa.test.de", nonce="abcdef"\r\n
    Content-Type: text/html; charset=ISO-8859-1\r\n
3. Fox tries to auth:
    GET / HTTP/1.1\r\n
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.1
    Host: owa.test.de\r\n
    User-Agent: Mozilla/5.0 (X11; U; Linux i686; de-DE; rv:1.7.12) Gecko/20050920 Firefox/1.0.7\r\n
    Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
    Accept-Language: de-de,en-us;q=0.7,en;q=0.3\r\n
    Accept-Encoding: gzip,deflate\r\n
    Accept-Charset: UTF-8,*\r\n
    Keep-Alive: 300\r\n
    Connection: keep-alive\r\n
    Authorization: NTLM ABCFE=\r\n
        NTLMSSP
            NTLMSSP identifier: NTLMSSP
            NTLM Message Type: NTLMSSP_NEGOTIATE (0x00000001)
            Flags: 0x00088207
                [... flags removed ... ]
            Calling workstation domain: NULL
            Calling workstation name: NULL
...
content shows up

Comment 4 Dawit Alemayehu 2010-04-23 04:34:11 UTC


*** This bug has been marked as a duplicate of bug 184588 ***