Yann wrote:
> Hello,
>
> I try to contact an SVN server behind my corporate proxy which needs an
> NTLM authentication. The proxy is properly configured in Settings with
> IP address, port, username (using the domain\username format) and
> password. Using these credentials work from a web browser but Checkout
> from TSVN doesn't. The error message is the following:
> PROPFIND request failed on '/'
> PROPFIND of '/': Could not create SSL connection through proxy server:
> Could not authenticate to proxy server: could not parse challenge
>
> Using a network capture, I could find what the problem is:
> TSVN correctly replies to NTLM queries and challenges from the proxy but
> doesn't provide the appropriate credentials. It seems that the username
> and password provided in the Settings are ignored and the Windows
> session login credentials are used instead. Actually I am sure that the
> domain name is not the right one, I am not sure for the user name since
> it's the same for both the Windows login and the web proxy in my case.
Isn't NTLM *supposed* to use the windows login credentials? Otherwise it
would be pretty much useless.
Maybe what you want is basic authentication. You have to configure your
proxy accordingly.
> From the wireshark capture:
> - 1st CONNECT request
> Calling workstation domain: my_windowslogin_domain (ok, guess it's normal)
> Calling workstation name: my_machine
> - Proxy reply
> HTTP 407 Proxy Authentication Required
> Domain: my_proxy_domain (which is different than my_windowslogin_domain)
> - 2nd CONNECT request
> Domain name: my_windowslogin_domain (should be my_proxy_domain)
> User name: my_login_username (should be my_proxy_username)
> - Proxy reply
> HTTP 403 Forbidden
>
> Reading the capture, it becomes obvious that the credentials specified
> in the Settings of TSVN are not used and the authentication then fails
> (the windows session domain is different than the web proxy domain in my
> case).
>
> I'm using version 1.4.8 released on 2007.02.16.
You have to ask this question on the Subversion mailing list, because
proxy authentication is done by the Subversion library, not TSVN.
Stefan
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.net
Received on 2008-02-21 17:35:10 CET