PHP Classes

proxy auth negotiate

Recommend this page to a friend!

      PHP HTTP protocol client  >  All threads  >  proxy auth negotiate  >  (Un) Subscribe thread alerts  
Subject:proxy auth negotiate
Summary:Connectivity through webproxy
Messages:5
Author:Andreas Horn
Date:2016-03-09 14:19:14
 

  1. proxy auth negotiate   Reply   Report abuse  
Picture of Andreas Horn Andreas Horn - 2016-03-09 14:19:14
Hi all,
I need to connect through a webproxy to get access to the www and its websites. The webproxy is based on Windows IIS7 and forces authentication "negotiate" (not basic, not digest, not raw ntlm). Can I do it with this HTTP protocol client?

If not, are there any ideas how to do it?

Best Regards

  2. Re: proxy auth negotiate   Reply   Report abuse  
Picture of Manuel Lemos Manuel Lemos - 2016-03-09 23:35:57 - In reply to message 1 from Andreas Horn
A new driver class would need to be added to the SASL class. I do not have a proxy that supports negotiate authenticantion mechanism so I would not have a way to try it. Would it be possible to provide some kind of access to that proxy so I could test it?

  3. Re: proxy auth negotiate   Reply   Report abuse  
Picture of Andreas Horn Andreas Horn - 2016-03-10 07:14:21 - In reply to message 2 from Manuel Lemos
Thx for your reply. I'm sorry, but there's no way to grant access to this proxy for it's part of a company gateway. From inside the company environment I need this authentication to reach the web. Browsers do it by themselves, but php doesn't.

If you've got an idea how to solve, I could probably run some tests and/or provide you with some debug information of the auth communication

Thanks in advance

  4. Re: proxy auth negotiate   Reply   Report abuse  
Picture of Manuel Lemos Manuel Lemos - 2016-03-10 08:27:17 - In reply to message 3 from Andreas Horn
I could try to implement it but I would need a Windows machine to try it and I do not use Windows.

Anyway, if you can take a look and figure how to create a SASL driver for that protocol looking at the others, I can help you to integrate it.

Looking at the RFC it seems negotiate works with either Kerberos or NTLM support. The SASL package already supports NTLM, so I suppose it is possibly not a big deal but I would need time to investigate. If you can do it yourself looking at the code and the RFC, it would be nice to contribute back what you implemented.

ietf.org/rfc/rfc4559.txt

Other than that, feel free to ask questions so I can help you to do it.

  5. Re: proxy auth negotiate   Reply   Report abuse  
Picture of Andreas Horn Andreas Horn - 2016-03-10 10:22:19 - In reply to message 4 from Manuel Lemos
Thank you for your quick response.

I'm probably not that experienced to integrate it by myself - I wished to get a solution off-the-shelf.
But I try to understand your SASL and HTTP package and setup some simple connections with your packages - hopefully I'll find back to ask some questions.

Thank you so far