Can't pass Proxy RC4

[TonP]

Hello all,

 

I have an issue with RC4 and my proxy, it worked before but our proxy changed and I don't know the type.

 

However I can bypass the proxy with TotalCommander (settings_TC.png), and use the same settings for VIPM (settings_VIPM.png).

 

The error file is attached as well.

december_18_2006.txt

[Jim Kring]

I have an issue with RC4 and my proxy, it worked before but our proxy changed and I don't know the type.

 

However I can bypass the proxy with TotalCommander (settings_TC.png), and use the same settings for VIPM (settings_VIPM.png).

 

Ton,

 

Is there a chance that the new proxy configuration does not support "basic" authentication and requires a more sophisticated authentication style? Can you ask your network admin to check this and possibly add support for basic authentication? Or, if you are able to find out more information, we might be able to implement the specific authentication mechanism.

 

Thank you,

 

-Jim Kring

 

One more thing... are you using an empty username, or did you simply remove that for the screenshot? If you are using an empty username, that might be a possible source of the issue in VIPM.

[TonP]

One more thing... are you using an empty username, or did you simply remove that for the screenshot? If you are using an empty username, that might be a possible source of the issue in VIPM.

Removed it, for some sore of security/privacy reasons... , but I can give you one hint, the name is in the form of:

server\department_name so maybe the backslash or the underscore bugged me?

 

I haven't got into contact with the IT-department, I have some sort of issues with them, so I'll let this wait until other things have passed

[Jim Kring]

Removed it, for some sore of security/privacy reasons... , but I can give you one hint, the name is in the form of:

server\department_name so maybe the backslash or the underscore bugged me?

 

I haven't got into contact with the IT-department, I have some sort of issues with them, so I'll let this wait until other things have passed

 

Ton,

 

It sounds like your proxy is using NTLM authentication a proprietary Microsoft standard (based on the domain\user_account format).

 

Can you possibly send (by email) a log of the HTTP transaction with the proxy? You can capture this with a program, such as ethereal.

 

Thank you,

 

-Jim Kring

[TonP]

Hi Jim,

 

(we figured it out) it is NTLM.

Are you planning on building a NTLM client, or should I install a local proxy?

I found some low level information.

Ton

[Jim Kring]

(we figured it out) it is NTLM.

Are you planning on building a NTLM client, or should I install a local proxy?

I found some low level information.

 

Hi Ton,

 

Thanks for the link to NTLM info. At this time, there is no plan to support NTLM, since (1) we have not received many requests for this and (2) it would require a significant ammount of development and testing on our part (for example, we would need to set up a Windows proxy server, etc.). Also, since work-arounds (like the local proxy) are possible, those few users who do need NTLM support, still have a way of making VIPM work on thier network. That said, OpenG does have an HTTP library (which is not yet available on VIPM) and if someone were to add support for NTLM proxy authentication, it would make it easy for us to support it in VIPM.

 

Thank you,

 

-Jim

[TonP]

Hi Ton,

 

Thanks for the link to NTLM info. At this time, there is no plan to support NTLM, since (1) we have not received many requests for this and (2) it would require a significant ammount of development and testing on our part (for example, we would need to set up a Windows proxy server, etc.). Also, since work-arounds (like the local proxy) are possible, those few users who do need NTLM support, still have a way of making VIPM work on thier network. That said, OpenG does have an HTTP library (which is not yet available on VIPM) and if someone were to add support for NTLM proxy authentication, it would make it easy for us to support it in VIPM.

 

Thank you,

 

-Jim

Jim,

 

I realised recently a solution with data-socket to penetrate our proxy, where I was triggered by your post on LAVA, and this post.

Maybe that's an option for VIPM?

 

Ton

[Jim Kring]

Jim,

 

I realised recently a solution with data-socket to penetrate our proxy, where I was triggered by your post on LAVA, and this post.

Maybe that's an option for VIPM?

 

Ton

 

Hi Ton,

 

Yes, that might be an option. The thing that I don't like about Data Socket is that you have almost no visibility into or control of the data transfer. Also, it is not cross-platform. Another alternative would be to simply have an option to use the Windows API functions (WinInet) for downloads.

 

Thanks,

 

-Jim

[TonP]

Hi Jim,

Are you planning on building a NTLM client, or should I install a local proxy?

Ton

I installed the NTLM local proxy and it works like charm!

The NTLM proxy is even accesible from other computers (it can be turned off).

 

Ton

[Jim Kring]

I installed the NTLM local proxy and it works like charm!

The NTLM proxy is even accesible from other computers (it can be turned off).

 

Hi Ton,

 

Thanks for the update. That's good news. I've added a brief comment about this, in the FAQ:

• How do I configure VIPM to use a proxy server?
  

Thanks,

 

-Jim