Re: Proxy authentication with Negotiate uses wrong host

> On Tue, Aug 23, 2011 at 10:47:35PM +0200, Michael-O wrote:
> > I made some digging in the subversion and neon code and notices some
> > interesting and odd stuff.
> >
> > If you take a look at the aforementioned session.c in line 865 [1]
> > you'll see that the code is correct, Negotiate auth is added if no
> > proxy_username is set. So my assumption was correct. It should work
> > out-of-the box.
>
> Yes, you're right. It seems I misread this and didn't notice
> the 'else' part which also enables Negotiate auth. Sorry.
>

Stefan,

another note. I tried a different proxy machine (we have a farm of) and tried:
H:\Projekte>svn ls http://svn.apache.org/repos/asf/
The TGS-REQ body is as follows
Server Name (Service and Instance): HTTP/harmonia.apache.org
+ some other stuff
The KDC responses with:
Error: KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN
Server Name (Service and Instance): HTTP/harmonia.apache.org

This is the output of Wirshark on FreeBSD:
The TGS-REQ body is as follows
Server Name (Service and Instance): HTTP/my.proxy.server

And so forth.

I can privately send you both wireshark dumps if you'd like.

Mike

-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de