NTLM authentication with proxy server (General questions)
Hi,
I'm trying to connect to the internet via a Microsoft ISA server using NTLM authentication with your wodHTTPDLX component using Delphi.
What I did:
wodHttpDLXCom1.Blocking:=true;
wodHttpDLXCom1.AutoRedirect:=true;
wodHttpDLXCom1.ProxyType:=ProxyWindows; //the proxy server is set in my IE settings correctly
wodHttpDLXCom1.ProxyAuthentication:=AuthAutomatic; //should do NTLM is asked
wodHttpDLXCom1.ProxyLogin :=eLogin.text; //format:DOMAINLogin
wodHttpDLXCom1.ProxyPassword:=ePassword.text;
wodHttpDLXCom1.Get('http://www.weonlydo.com/Images/weonlydo.gif');
Unfortunately the component does not answer the authentication request for NTLM correctly and returns me the HTML error page (407-auth. required) from the proxy server as the result.
I've used the debug option and got a debug file that I'm going to send directly to your mail address.
What did I wrong?
Thanks for your help,
Stefan Grube
Re: NTLM authentication with proxy server
Stefan,
I'm 99.99 sure that component does answer correctly, I remember that we had many issues like this, but I don't personally remember how we solved them.
Anyway, can I connect to your ISA and try it out? I would need some debugging to do.
Re: NTLM authentication with proxy server
Unfortunately the ISA proxy server is only accessible from inside our company network.
I'm happy to assist you with debugging, just let me know what to do...
Cheers,
Stefan
Re: NTLM authentication with proxy server
Stefan,
then I guess I have to install it locally.
Tell me
1. which version of wodHttpDLX do you use?
2. What OS?
3. What version of ISA?
Re: NTLM authentication with proxy server
Hi,
we have an MS ISA 2000 server, using NTLM for the proxy.
I'm using WinXPPro SP2 and the latest WodHTTPDLX 1.3.8.
Hope that helps,
Stefan
Re: NTLM authentication with proxy server
Stefan,
it took a while, sorry about that, I had to get all the neccessary software. I found Windows 2000 and MS ISA 2000 and installed them. Then I made ISA accept only authenticated clients for HTTP connections.
I took latest wodHttpDLX, set ProxyType to ProxyWebStandard on port 8080, and made it request google page through that ISA server.
It worked correctly. I double-checked logs for NTLM, and I see NTLM was really used for this connection.
So, seems things are working correctly, for me at least. I can give you access to my ISA server if you can change it so wodHttpDLX doesn't work anymore with it.
Regards,
Kreso
Re: NTLM authentication with proxy server
Hi Keso,
After changing the ProxyType to ProxyWebstandard it works.
Why did it not work with ProxyWindows ? All the info is setup correctly in my LAN settings as I could connect to the internet with IE and Firefox etc?
Thanks for your help anyway,
Stefan
Re: NTLM authentication with proxy server
Stefan,
good point - let me try that, I'll post my results here.
Re: NTLM authentication with proxy server
Hi Kreso,
any news on the topic? Any luck with ProxyWindows?
Cheers,
Stefan
Re: NTLM authentication with proxy server
Stefan,
I think this is fixed. Can you please request update and try it out?
Re: NTLM authentication with proxy server
Hi,
I can confirm that the proxytype ProxyWindows works now as exptected with version 1.3.9 of wodHttpDLX.
Thanks for your help,
Stefan
Re: NTLM authentication with proxy server
Version 1.3.9.101
It does not work for me if I set 'Automatically detect settings' in 'Local Area Network (LAN) settings' in Internet Explorer.
It works if I set manually proxy server and proxy port in IE
Any ideas?
Thanks
Re: NTLM authentication with proxy server
Paco,
what exactly are you proxy settings in Windows? I can try to use them locally and see what's going on. What type of proxy is used?
Re: NTLM authentication with proxy server
Proxy: ISA 2000 with NTLM
Proxy Settings in IE (LAN settings): Automatically detect settings
Re: NTLM authentication with proxy server
Any news on the topic?
Re: NTLM authentication with proxy server
Paco,
no news. Seems that 'automatically detect settings' doesn't write anything to registry to appropriate place where we would read about it. I don't think we can handle such cases.
Kreso