Bug 107384 - NTLM Auth against MS Exchange 2003 fails
Summary: NTLM Auth against MS Exchange 2003 fails
Status: RESOLVED DUPLICATE of bug 184588
Alias: None
Product: kio
Classification: Frameworks and Libraries
Component: http (show other bugs)
Version: unspecified
Platform: openSUSE Linux
: NOR normal
Target Milestone: ---
Assignee: Unassigned bugs mailing-list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-06-14 11:48 UTC by Dominik Fritz
Modified: 2010-04-23 04:34 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dominik Fritz 2005-06-14 11:48:33 UTC
Version:            (using KDE KDE 3.4.1)
Installed from:    SuSE RPMs
OS:                Linux

If I try to access the webaccess page of our MS Excange 2003 server the authorization fails. Accessing it with Firefox works fine.
After analyzing the transmitted packets it seems that the user and domainname have an wrong offset of one byte.

NTLMSSP
            NTLMSSP identifier: NTLMSSP
            NTLM Message Type: NTLMSSP_AUTH (0x00000003)
            Lan Manager Response: Empty
            NTLM Response: 444D9AD001E4FC52E869E737D4D978AE...
            Domain name: ??
            User name: ?????
            Host name: NULL

I can find the user and domainname in the packet but it seems that they have the wrong offset and therefore ethereal shows only ???
It does not change anything if I add the domainname or not.
Comment 1 Simone Gotti 2005-06-30 10:32:45 UTC
I think this is a dup of bug #93454 (fixed). 
Comment 2 Ludovic Drolez 2005-09-01 12:40:52 UTC
Is there a way to disable ntlm auth in kde ?
Comment 3 Karl Kaputnik 2005-12-03 22:53:12 UTC
Hello, I have a similar Problem:

I use konqueror from KDE 3.5. NTLM Auth with a plain MS IIS works (tested with http), however
authentication with a MS Exchange Outlook web access does not work (using https).
As I use https to access the server normally, so I set up an apache server working
as reverse  proxy, "translating" from http to https:
client --http--> reverse_proxy --https--> outlook web access

Thats what happens when I use konqueror to access the site:
1. Konq sends get
2. Server replies:
    HTTP/1.1 401 Access Denied\r\n
        Request Version: HTTP/1.1
        Response Code: 401
    Date: Sat, 03 Dec 2005 20:59:41 GMT\r\n
    Server: Microsoft-IIS/5.0\r\n
    WWW-Authenticate: Negotiate\r\n
    WWW-Authenticate: NTLM\r\n
    Content-Length: 4609\r\n
    WWW-Authenticate: Digest qop="auth", realm="owa.test.de", nonce="abcdef"\r\n
    Content-Type: text/html; charset=ISO-8859-1\r\n
3. Konq tries to do auth:
   GET / HTTP/1.1\r\n
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.1
    Connection: Keep-Alive\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\n
    Accept: text/html, image/jpeg, image/png, text/*, image/*, */*\r\n
    Accept-Encoding: x-gzip, x-deflate, gzip, deflate\r\n
    Accept-Charset: utf-8, utf-8;q=0.5, *;q=0.5\r\n
    Accept-Language: de, en\r\n
    Host: owa.test.de\r\n
    Authorization: Digest username="kdetest", realm="owa.test.de", nonce="abcdef", uri="/", algorithm="MD5", qop="auth", cnonce="abc", nc=00000001, response="def
...
the auth windows pops up again


When trying that with firefox it works:
1. Fox sends get
2. Server replies:
    HTTP/1.1 401 Access Denied\r\n
        Request Version: HTTP/1.1
        Response Code: 401
    Date: Sat, 03 Dec 2005 21:05:37 GMT\r\n
    Server: Microsoft-IIS/5.0\r\n
    WWW-Authenticate: Negotiate\r\n
    WWW-Authenticate: NTLM\r\n
    Content-Length: 4609\r\n
    WWW-Authenticate: Digest qop="auth", realm="owa.test.de", nonce="abcdef"\r\n
    Content-Type: text/html; charset=ISO-8859-1\r\n
3. Fox tries to auth:
    GET / HTTP/1.1\r\n
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.1
    Host: owa.test.de\r\n
    User-Agent: Mozilla/5.0 (X11; U; Linux i686; de-DE; rv:1.7.12) Gecko/20050920 Firefox/1.0.7\r\n
    Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
    Accept-Language: de-de,en-us;q=0.7,en;q=0.3\r\n
    Accept-Encoding: gzip,deflate\r\n
    Accept-Charset: UTF-8,*\r\n
    Keep-Alive: 300\r\n
    Connection: keep-alive\r\n
    Authorization: NTLM ABCFE=\r\n
        NTLMSSP
            NTLMSSP identifier: NTLMSSP
            NTLM Message Type: NTLMSSP_NEGOTIATE (0x00000001)
            Flags: 0x00088207
                [... flags removed ... ]
            Calling workstation domain: NULL
            Calling workstation name: NULL
...
content shows up
Comment 4 Dawit Alemayehu 2010-04-23 04:34:11 UTC

*** This bug has been marked as a duplicate of bug 184588 ***