Unable to authenticate using Microsoft ISA Server

[Dave & Lisa <wa...@ozemail.com.au>]

Hi,

 

I'm having trouble setting up the SVN client behind a Microsoft ISA Proxy
server from a windows XP SP1 workstation. This proxy does not require
authentication, it uses integrated windows authentication. I've tried
leaving the user and password blank in the server file, and also supplied my
domain credentials but both gives a PROPFIND request failed error 407 Proxy
Authentication Required. 

 

Has anyone successfully set up SVN client behind an ISA Microsoft Proxy
server?

 

Also I am able to use a separate proxy which requires standard credentials.
However I get a PROPFIND 500 ERROR (internal server error) when I issue any
SVN command. Could this indicate that the second proxy does not support
WebDAV?

 

Regards

 

Dave

Re: Unable to authenticate using Microsoft ISA Server

[JM Ibanez <jm...@gmail.com>]

On 6/1/05, Dave & Lisa <wa...@ozemail.com.au> wrote: 
> 
>  Hi,
> 
>  I'm having trouble setting up the SVN client behind a Microsoft ISA Proxy 
> server from a windows XP SP1 workstation. This proxy does not require 
> authentication, it uses integrated windows authentication. 
> 
"Integrated Windows Authentication" is still authentication, and is just 
another name for the NTLM method for authentication that Windows uses. The 
underlying Neon libraries do not support NTLM as a method for 
authentication. However, there is a solution, see below.
 
 I've tried leaving the user and password blank in the server file, and also 
> supplied my domain credentials but both gives a PROPFIND request failed 
> error 407 Proxy Authentication Required. 
> 
 You'll have to supply your domain credentials and use another proxy between 
your SVN client and your real proxy.
 I was in a similar situation before, and had used ntlmaps[1], which is a 
passthrough proxy server. You'll have to download Python to use it though.
 
  Also I am able to use a separate proxy which requires standard 
> credentials. However I get a PROPFIND 500 ERROR (internal server error) when 
> I issue any SVN command. Could this indicate that the second proxy does not 
> support WebDAV?
> 
You can bypass the WebDAV non-support if your proxy does support HTTPS. 
Since the whole HTTP transaction (including the request line) is encrypted 
under HTTPS, the proxy will simply pass everything through to the 
destination host (provided of course you've already authenticated to the 
proxy if need be)
 [1] http://ntlmaps.sourceforge.net/
-- 
JM Ibanez --
A good world needs knowledge, kindliness, and courage; it does 
not need a regretful hankering after the past or a fettering of the 
free intelligence by the words uttered long ago by ignorant men.
-- Bertrand Russell
-----
http://www.livejournal.com/~jmibanez/
http://www.mycgiserver.com/~butiki/