Bug 138088 - NTLM authentication doesn't work
Summary: NTLM authentication doesn't work
Status: RESOLVED DUPLICATE of bug 184588
Alias: None
Product: kio
Classification: Frameworks and Libraries
Component: http (show other bugs)
Version: unspecified
Platform: Compiled Sources Linux
: NOR normal
Target Milestone: ---
Assignee: Unassigned bugs mailing-list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-11-29 13:55 UTC by Josef Spillner
Modified: 2010-04-23 01:17 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Josef Spillner 2006-11-29 13:55:55 UTC
Version:            (using KDE KDE 3.5.5)
Installed from:    Compiled From Sources
OS:                Linux

When trying to access a IIS 5.0 directory over SSL which is access-protected, I get the following headers:

# HTTP/1.1 401 Access Denied
# Server: Microsoft-IIS/5.0
# Date: Wed, 29 Nov 2006 08:48:20 GMT
# WWW-Authenticate: Negotiate
# WWW-Authenticate: NTLM
# WWW-Authenticate: Basic realm="XXXXX.XXX"
# Connection: close
# Content-Length: 4431
# WWW-Authenticate: Digest qop="auth", realm="XXXXX.XXX", nonce="FOOBAR"
# Content-Type: text/html

Now kio_http selects Digest, which might or might not work in general - I don't know any other tool which uses Digest here so I cannot confirm. Yet it didn't work for me, so I tried to force kio_http to use Auth_NTLM instead, which definitely works with Firefox.

Auth_NTLM doesn't work with kio_http either. I tried to look into the differences to Firefox and found a few but I'm not familar with either the codebase or NTLM.
For example, the flags also include Negotiate_OEM | Negotiate_NTLM2_Key | Negotiate_Always_Sign for Firefox, but even with them it doesn't work.

So my question is, if it works with Firefox but not with Konqueror, why is it so? It might be the parameters (i.e. workstation name, domain etc.) but this is really hard to debug. In general Konqueror is not very friendly about failed logins, but this is a separate issue :)
So all I need is a good pointer on continuing the debugging. I might also give access to the server to dedicated bughunters but then again it's really just a standard IIS server it seems.

Since there's a WebDAV folder also this bug prevents me from showing off in front of my students with a browser which at the same time is a file manager and could handle the task of syncing files smoother than any other application :(
Comment 1 hr 2007-03-11 14:30:32 UTC
This is a show stopper in corporate usage. All other apps (firefox, apt-get,
even lynx !) are working fine with http proxy authentication (ntlm) 
except konqueror (3.5.5, debian etch)
Comment 2 hr 2007-03-13 00:09:41 UTC
A workaround is to use http://ntlmaps.sourceforge.net/ at least for konqueror it works fine.
Comment 3 Raúl 2009-07-10 12:21:58 UTC
Even I use cntlm I think ntlm basic authentication is already supported in konqueror. Could anyone confirm?

Thanks.
Comment 4 Dawit Alemayehu 2010-04-23 01:17:54 UTC

*** This bug has been marked as a duplicate of bug 184588 ***