Bug 199308 - proxy authenfication doesn't work
Summary: proxy authenfication doesn't work
Status: RESOLVED DUPLICATE of bug 155707
Alias: None
Product: kio
Classification: Unmaintained
Component: general (show other bugs)
Version: unspecified
Platform: unspecified Linux
: NOR normal
Target Milestone: ---
Assignee: Thiago Macieira
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-07-07 17:23 UTC by azymut
Modified: 2010-12-26 12:15 UTC (History)
6 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments
Disabled proxy auth setting (53.94 KB, image/png)
2009-08-13 10:23 UTC, Marian Kyral
Details
Proxy Auth TCP Dump Summary (40.53 KB, text/plain)
2010-01-11 16:49 UTC, Patrick Noffke
Details
Packet data for single proxy auth attempt. (1.92 KB, text/plain)
2010-01-11 16:52 UTC, Patrick Noffke
Details
Packet data for HTTPS connection via proxy (8.11 KB, text/plain)
2010-01-11 17:05 UTC, Patrick Noffke
Details

Note You need to log in before you can comment on or make changes to this bug.
Description azymut 2009-07-07 17:23:41 UTC
Version:            (using KDE 4.2.4)
Compiler:          gcc4.4 
OS:                Linux
Installed from:    Unlisted Binary Package

I can't set any username nor pasword to connect to a proxy: "prompt as needed" is the only possible option.
However, nothing prompts when konqueror (or kopete, kmail, etc.) is trying to connect.
I tried to manually change the kioslaverc file, but it doesn't work.

Is there a way to fix it?
Comment 1 azymut 2009-07-10 12:49:32 UTC
Precision: I'm using a squid proxy.
Comment 2 azymut 2009-08-04 17:12:32 UTC
Still not working under kde 4.3
This problem is kde-related providing this proxy works perfectly with arora.
Comment 3 Thiago Macieira 2009-08-04 19:48:11 UTC
I'm testing KDE 4.3 and I cannot reproduce the problem.

I get the password prompt.

My proxy is Squid 3.0, with Basic authentication.
Comment 4 Marian Kyral 2009-08-13 10:23:46 UTC
Created attachment 36124 [details]
Disabled proxy auth setting
Comment 5 Marian Kyral 2009-08-13 10:24:59 UTC
I can confirm it. See screenshot above. I'm behind ISA proxy and I never got the authentication dialog. Other applications like FF, TB. and Psi works correctly.

Maybe I miss some dependency.
Comment 6 Tom Lovasic 2009-09-11 16:27:58 UTC
I have the same problem. I am also behind an ISA firewall, and absolutely nothing happens.
Comment 7 Tom Lovasic 2009-09-21 13:10:21 UTC
I have more information on this. Essentially, like Marian, I am also behind ISA proxy which is essentially NTLM proxy. While playing with the proxy settings, I have actually discovered that the HTTPS proxy setting works (I do get prompted for credentials and I do get to the given site) while the HTTP proxy doesn't. The tcpdump shows that konqueror received a "proxy requires authentication" msg but nothing appears on the screen.
Comment 8 Tom Lovasic 2009-09-21 13:11:35 UTC
forgot to mention that this is fedora 11 with kde 4.3.1...
Comment 9 Marian Kyral 2009-09-21 15:29:12 UTC
Hi,
I can confirm that the auth. dialog is shown for https and not shown for http. But I still could not connect on https: proxy authorisation failed.

Maybe it is because I have to authorize as <domain>\<user_name>. Is this supported? Or how should be entered?
Comment 10 Patrick Noffke 2010-01-11 16:25:36 UTC
I have the same problem with KDE 4.3.4 on Fedora 12.  If I manually specify the proxy (specify the server:port for HTTP and select use same proxy server for all protocols), then I get the authentication dialog for HTTPS but not for HTTP.  I am able to enter my proxy username and password for HTTPS and connect successfully.  But for HTTP, konqueror just displays in the status bar:  "<hostname> contacted.  Waiting for reply..."

I believe our proxy server uses NTLM authentication, but I'm not sure how to determine this.

# rpm -q kdebase
kdebase-4.3.4-1.fc12.x86_64

Note to Marian, we use a windows domain, but for the proxy server, I just have to enter my username (no domain), and I can connect via HTTPS.
Comment 11 Patrick Noffke 2010-01-11 16:27:18 UTC
*** This bug has been confirmed by popular vote. ***
Comment 12 Patrick Noffke 2010-01-11 16:49:39 UTC
Created attachment 39777 [details]
Proxy Auth TCP Dump Summary

I started wireshark, then started Konqueror.  I set the display filter to tcp.srcport==80 or tcp.dstport==80.  This file shows the packet summary lines.  Repeated attempts are made to connect via the proxy.
Comment 13 Patrick Noffke 2010-01-11 16:52:54 UTC
Created attachment 39778 [details]
Packet data for single proxy auth attempt.

This is the same capture as for the TCP dump summary, except I selected one of the repeated attempts where konqueror sends the NTLMSSP_NEGOTIATE, and the proxy server responds with NTLMSSP_CHALLENGE, and in wireshark I chose "Follow TCP stream."
Comment 14 Patrick Noffke 2010-01-11 16:56:14 UTC
Note:  For both attachments that I added, I selected to "Manually specify the proxy settings," and our proxy server is http://qgproxy.qg.com:80.  I selected to use the same proxy server for all protocols.
Comment 15 Patrick Noffke 2010-01-11 17:05:02 UTC
Created attachment 39779 [details]
Packet data for HTTPS connection via proxy

This contains the packet data when I connect via HTTPS to the login page for my credit union.  The proxy authentication seems to fail on the first attempt but then succeeds with the authentication supplied in CONNECT message.

Again, I selected "Follow TCP stream" in wireshark, then saved off the data (stream content) to a text file.
Comment 16 Marian Kyral 2010-08-03 10:17:39 UTC
It still not works in KDE 4.4.5. I'll test 4.5 soon, but probably will not work as well :-(
Comment 17 Marian Kyral 2010-08-11 09:59:30 UTC
So I tested KDE 4.5.0 and it works.
Comment 18 Andreas Hartmetz 2010-12-26 12:15:23 UTC

*** This bug has been marked as a duplicate of bug 155707 ***