Maven can get through firewall from Windows XP host but artifactory can't

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Maven can get through firewall from Windows XP host but artifactory can't

maf-2

I have been successfully using maven from behind our corporate firewall using
a proxy entry in my settings.xml like the following:

  <proxies>
    <proxy>
      <active>true</active>
      <protocol>http</protocol>
      <host>corpproxy</host>
      <port>8080</port>
    </proxy>
  </proxies>

In attempting to add artifactory locally, I removed the above proxy from the
settings.xml and inserted the mirrors and repositories configuration
specified in the artifactory documentation. In the artifactory admin UI, I
created a proxy by defining a proxy key with the host and port set to the
above values and NT Domain, Username, and Password left blank. I then used
the proxy key to assign this proxy to all the remote repositories.

When I attempt a build that needs to download an artifact that is not in my
local repository, the build fails due to the inability to download the
artifact from the artifactory repository. In the Artifactory log I get the
following INFO messages:

2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080
2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080
2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080

As I am able to navigate through our firewall with just the host/port
combination (without realm/username/password) using web browsers, Eclipse
updates, and maven, it would seem that artifactory should be able to do the
same.

If I do add my username/password to the proxy, the build still fails and the
log content changes to:

2009-05-07 17:55:31,433 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
Basic authentication scheme selected
2009-05-07 17:55:31,558 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
Basic authentication scheme selected
2009-05-07 17:55:31,605 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
Basic authentication scheme selected

Finally, if I do add my Windows domain to the proxy parameters, the messages
change to:

2009-05-07 17:57:36,948 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:57:37,261 [INFO ] (o.a.c.h.HttpMethodDirector:781) - Failure
authenticating with NTLM @corpproxy:8080
2009-05-07 17:57:37,276 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:57:37,354 [INFO ] (o.a.c.h.HttpMethodDirector:781) - Failure
authenticating with NTLM @corpproxy:8080
2009-05-07 17:57:37,386 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:57:37,464 [INFO ] (o.a.c.h.HttpMethodDirector:781) - Failure
authenticating with NTLM @corpproxy:8080

--
View this message in context: http://www.nabble.com/Maven-can-get-through-firewall-from-Windows-XP-host-but-artifactory-can%27t-tp23436279p23436279.html
Sent from the Artifactory-Users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Maven can get through firewall from Windows XP host but artifactory can't

Yoav Landman
Administrator
Hi,

Could you try again with the 2.0.6 release candidate at http://www.jfrog.org/files/artifactory-2.0.6-5528.zip?

Thanks,

Yoav

On Fri, May 8, 2009 at 1:03 AM, maf <[hidden email]> wrote:

I have been successfully using maven from behind our corporate firewall using
a proxy entry in my settings.xml like the following:

 <proxies>
   <proxy>
     <active>true</active>
     <protocol>http</protocol>
     <host>corpproxy</host>
     <port>8080</port>
   </proxy>
 </proxies>

In attempting to add artifactory locally, I removed the above proxy from the
settings.xml and inserted the mirrors and repositories configuration
specified in the artifactory documentation. In the artifactory admin UI, I
created a proxy by defining a proxy key with the host and port set to the
above values and NT Domain, Username, and Password left blank. I then used
the proxy key to assign this proxy to all the remote repositories.

When I attempt a build that needs to download an artifact that is not in my
local repository, the build fails due to the inability to download the
artifact from the artifactory repository. In the Artifactory log I get the
following INFO messages:

2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080
2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080
2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080

As I am able to navigate through our firewall with just the host/port
combination (without realm/username/password) using web browsers, Eclipse
updates, and maven, it would seem that artifactory should be able to do the
same.

If I do add my username/password to the proxy, the build still fails and the
log content changes to:

2009-05-07 17:55:31,433 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
Basic authentication scheme selected
2009-05-07 17:55:31,558 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
Basic authentication scheme selected
2009-05-07 17:55:31,605 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
Basic authentication scheme selected

Finally, if I do add my Windows domain to the proxy parameters, the messages
change to:

2009-05-07 17:57:36,948 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:57:37,261 [INFO ] (o.a.c.h.HttpMethodDirector:781) - Failure
authenticating with NTLM @corpproxy:8080
2009-05-07 17:57:37,276 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:57:37,354 [INFO ] (o.a.c.h.HttpMethodDirector:781) - Failure
authenticating with NTLM @corpproxy:8080
2009-05-07 17:57:37,386 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-07 17:57:37,464 [INFO ] (o.a.c.h.HttpMethodDirector:781) - Failure
authenticating with NTLM @corpproxy:8080

--
View this message in context: http://www.nabble.com/Maven-can-get-through-firewall-from-Windows-XP-host-but-artifactory-can%27t-tp23436279p23436279.html
Sent from the Artifactory-Users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Maven can get through firewall from Windows XP host but artifactory can't

maf-2

Yoav,

Thanks for the prompt response. I downloaded and installed the 2.0.6 RC but
had the same result as before. I edited the logback.xml to increase the
httpclient library debug level to DEBUG and got the following output when
just host/port are specified for the proxy:

2009-05-08 10:59:59,241 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:412) -
HttpConnectionManager.getConnection: config =
HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080], timeout = 0
2009-05-08 10:59:59,241 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:760) - Allocating new
connection, hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 10:59:59,241 [DEBUG] (o.a.c.h.HttpConnection:692) - Open
connection to corpproxy:8080
2009-05-08 10:59:59,288 [DEBUG] (o.a.c.h.HttpMethodBase:1352) - Adding Host
request header
2009-05-08 10:59:59,319 [DEBUG] (o.a.c.h.HttpMethodBase:1014) - Should NOT
close connection in response to directive: Keep-Alive
2009-05-08 10:59:59,319 [DEBUG] (o.a.c.h.HttpMethodDirector:843) -
Authorization required
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.a.AuthChallengeProcessor:90) -
Supported authentication schemes in the order of preference: [ntlm, digest,
basic]
2009-05-08 10:59:59,335 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.a.AuthChallengeProcessor:155) -
Using authentication scheme: ntlm
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.a.AuthChallengeProcessor:163) -
Authorization challenge processed
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpMethodDirector:773) - Proxy
authentication scope: NTLM @corpproxy:8080
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpMethodDirector:889) - Proxy
credentials required
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpMethodDirector:907) - Proxy
credentials provider not available
2009-05-08 10:59:59,335 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpConnection:1178) - Releasing
connection back to connection manager.
2009-05-08 10:59:59,335 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:979) - Freeing connection,
hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]


If I add just username and password without specifying the NT Domain, the
debugging output becomes:

2009-05-08 11:09:48,737 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:412) -
HttpConnectionManager.getConnection: config =
HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080], timeout = 0
2009-05-08 11:09:48,737 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:760) - Allocating new
connection, hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.HttpMethodDirector:161) -
Preemptively sending default basic credentials
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.HttpMethodDirector:316) -
Authenticating with BASIC @corpproxy:8080
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.p.HttpMethodParams:384) -
Credential charset not configured, using HTTP element charset
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.HttpMethodDirector:278) -
Authenticating with BASIC @repo1.maven.org:80
2009-05-08 11:09:48,737 [WARN ] (o.a.c.h.HttpMethodDirector:288) - Required
credentials not available for BASIC @repo1.maven.org:80
2009-05-08 11:09:48,737 [WARN ] (o.a.c.h.HttpMethodDirector:290) -
Preemptive authentication requested but no default credentials available
2009-05-08 11:09:48,753 [DEBUG] (o.a.c.h.HttpConnection:692) - Open
connection to corpproxy:8080
2009-05-08 11:09:48,753 [DEBUG] (o.a.c.h.HttpMethodBase:1352) - Adding Host
request header
2009-05-08 11:09:48,831 [DEBUG] (o.a.c.h.HttpMethodBase:1008) - Should close
connection in response to directive: Close
2009-05-08 11:09:48,831 [DEBUG] (o.a.c.h.HttpConnection:1178) - Releasing
connection back to connection manager.
2009-05-08 11:09:48,831 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:979) - Freeing connection,
hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:09:48,831 [DEBUG] (o.a.c.h.u.IdleConnectionHandler:76) -
Adding connection at: 1241795388831
2009-05-08 11:09:48,831 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:961) - Notifying no-one, there
are no waiting threads

Finally, if I add the domain to the credentials, the debugging output
becomes:

2009-05-08 11:14:19,110 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:412) -
HttpConnectionManager.getConnection: config =
HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080], timeout = 0
2009-05-08 11:14:19,110 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:760) - Allocating new
connection, hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpMethodDirector:161) -
Preemptively sending default basic credentials
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpMethodDirector:316) -
Authenticating with BASIC @corpproxy:8080
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.p.HttpMethodParams:384) -
Credential charset not configured, using HTTP element charset
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpMethodDirector:278) -
Authenticating with BASIC @repo1.maven.org:80
2009-05-08 11:14:19,110 [WARN ] (o.a.c.h.HttpMethodDirector:288) - Required
credentials not available for BASIC @repo1.maven.org:80
2009-05-08 11:14:19,110 [WARN ] (o.a.c.h.HttpMethodDirector:290) -
Preemptive authentication requested but no default credentials available
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpConnection:692) - Open
connection to corpproxy:8080
2009-05-08 11:14:19,142 [DEBUG] (o.a.c.h.HttpMethodBase:1352) - Adding Host
request header
2009-05-08 11:14:19,188 [DEBUG] (o.a.c.h.HttpMethodBase:1008) - Should close
connection in response to directive: Close
2009-05-08 11:14:19,188 [DEBUG] (o.a.c.h.HttpConnection:1178) - Releasing
connection back to connection manager.
2009-05-08 11:14:19,188 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:979) - Freeing connection,
hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:14:19,188 [DEBUG] (o.a.c.h.u.IdleConnectionHandler:76) -
Adding connection at: 1241795659188
2009-05-08 11:14:19,188 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:961) - Notifying no-one, there
are no waiting threads



Yoav  Landman wrote:

>
> Hi,
>
> Could you try again with the 2.0.6 release candidate at
> http://www.jfrog.org/files/artifactory-2.0.6-5528.zip?
>
> Thanks,
>
> Yoav
>
> On Fri, May 8, 2009 at 1:03 AM, maf <[hidden email]> wrote:
>
>>
>> I have been successfully using maven from behind our corporate firewall
>> using
>> a proxy entry in my settings.xml like the following:
>>
>>  <proxies>
>>    <proxy>
>>      <active>true</active>
>>      <protocol>http</protocol>
>>      <host>corpproxy</host>
>>      <port>8080</port>
>>    </proxy>
>>  </proxies>
>>
>> In attempting to add artifactory locally, I removed the above proxy from
>> the
>> settings.xml and inserted the mirrors and repositories configuration
>> specified in the artifactory documentation. In the artifactory admin UI,
>> I
>> created a proxy by defining a proxy key with the host and port set to the
>> above values and NT Domain, Username, and Password left blank. I then
>> used
>> the proxy key to assign this proxy to all the remote repositories.
>>
>> When I attempt a build that needs to download an artifact that is not in
>> my
>> local repository, the build fails due to the inability to download the
>> artifact from the artifactory repository. In the Artifactory log I get
>> the
>> following INFO messages:
>>
>> 2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
>> credentials available for NTLM @corpproxy:8080
>> 2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
>> credentials available for NTLM @corpproxy:8080
>> 2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
>> credentials available for NTLM @corpproxy:8080
>>
>> As I am able to navigate through our firewall with just the host/port
>> combination (without realm/username/password) using web browsers, Eclipse
>> updates, and maven, it would seem that artifactory should be able to do
>> the
>> same.
>>
>> If I do add my username/password to the proxy, the build still fails and
>> the
>> log content changes to:
>>
>> 2009-05-07 17:55:31,433 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> Basic authentication scheme selected
>> 2009-05-07 17:55:31,558 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> Basic authentication scheme selected
>> 2009-05-07 17:55:31,605 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> Basic authentication scheme selected
>>
>> Finally, if I do add my Windows domain to the proxy parameters, the
>> messages
>> change to:
>>
>> 2009-05-07 17:57:36,948 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:57:37,261 [INFO ] (o.a.c.h.HttpMethodDirector:781) -
>> Failure
>> authenticating with NTLM @corpproxy:8080
>> 2009-05-07 17:57:37,276 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:57:37,354 [INFO ] (o.a.c.h.HttpMethodDirector:781) -
>> Failure
>> authenticating with NTLM @corpproxy:8080
>> 2009-05-07 17:57:37,386 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:57:37,464 [INFO ] (o.a.c.h.HttpMethodDirector:781) -
>> Failure
>> authenticating with NTLM @corpproxy:8080
>
>
>

--
View this message in context: http://www.nabble.com/Maven-can-get-through-firewall-from-Windows-XP-host-but-artifactory-can%27t-tp23436279p23448272.html
Sent from the Artifactory-Users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Maven can get through firewall from Windows XP host but artifactory can't

khmarbaise
In reply to this post by maf-2
Hi there,
i have observed the same thing with an installation of Artifactory 2.0.5 on an machine which needed access to the internet via proxy...

I have done as a work a round ...the information of the proxy on the command line of the -Dhttp.proxyHost=proxy -Dhttp.proxyPort=8080 ...username and password...

With this configuration it worked..

Kind regards
Karl Heinz Marbaise
Kind regards
Karl Heinz Marbaise
--
SoftwareEntwicklung Beratung Schulung    Tel.: +49 (0) 2405 / 415 893
Dipl.Ing.(FH) Karl Heinz Marbaise        ICQ#: 135949029
Hauptstrasse 177                     USt.IdNr: DE191347579
52146 Würselen                           http://www.soebes.de
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Maven can get through firewall from Windows XP host but artifactory can't

Yoav Landman
Administrator
In reply to this post by maf-2
Hi,

Thanks for the detailed input. I have created http://issues.jfrog.org/jira/browse/RTFACT-1669 to follow it up.

Yoav

On Fri, May 8, 2009 at 6:31 PM, maf <[hidden email]> wrote:

Yoav,

Thanks for the prompt response. I downloaded and installed the 2.0.6 RC but
had the same result as before. I edited the logback.xml to increase the
httpclient library debug level to DEBUG and got the following output when
just host/port are specified for the proxy:

2009-05-08 10:59:59,241 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:412) -
HttpConnectionManager.getConnection: config =
HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080], timeout = 0
2009-05-08 10:59:59,241 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:760) - Allocating new
connection, hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 10:59:59,241 [DEBUG] (o.a.c.h.HttpConnection:692) - Open
connection to corpproxy:8080
2009-05-08 10:59:59,288 [DEBUG] (o.a.c.h.HttpMethodBase:1352) - Adding Host
request header
2009-05-08 10:59:59,319 [DEBUG] (o.a.c.h.HttpMethodBase:1014) - Should NOT
close connection in response to directive: Keep-Alive
2009-05-08 10:59:59,319 [DEBUG] (o.a.c.h.HttpMethodDirector:843) -
Authorization required
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.a.AuthChallengeProcessor:90) -
Supported authentication schemes in the order of preference: [ntlm, digest,
basic]
2009-05-08 10:59:59,335 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
ntlm authentication scheme selected
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.a.AuthChallengeProcessor:155) -
Using authentication scheme: ntlm
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.a.AuthChallengeProcessor:163) -
Authorization challenge processed
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpMethodDirector:773) - Proxy
authentication scope: NTLM @corpproxy:8080
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpMethodDirector:889) - Proxy
credentials required
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpMethodDirector:907) - Proxy
credentials provider not available
2009-05-08 10:59:59,335 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
credentials available for NTLM @corpproxy:8080
2009-05-08 10:59:59,335 [DEBUG] (o.a.c.h.HttpConnection:1178) - Releasing
connection back to connection manager.
2009-05-08 10:59:59,335 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:979) - Freeing connection,
hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]


If I add just username and password without specifying the NT Domain, the
debugging output becomes:

2009-05-08 11:09:48,737 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:412) -
HttpConnectionManager.getConnection: config =
HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080], timeout = 0
2009-05-08 11:09:48,737 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:760) - Allocating new
connection, hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.HttpMethodDirector:161) -
Preemptively sending default basic credentials
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.HttpMethodDirector:316) -
Authenticating with BASIC @corpproxy:8080
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.p.HttpMethodParams:384) -
Credential charset not configured, using HTTP element charset
2009-05-08 11:09:48,737 [DEBUG] (o.a.c.h.HttpMethodDirector:278) -
Authenticating with BASIC @repo1.maven.org:80
2009-05-08 11:09:48,737 [WARN ] (o.a.c.h.HttpMethodDirector:288) - Required
credentials not available for BASIC @repo1.maven.org:80
2009-05-08 11:09:48,737 [WARN ] (o.a.c.h.HttpMethodDirector:290) -
Preemptive authentication requested but no default credentials available
2009-05-08 11:09:48,753 [DEBUG] (o.a.c.h.HttpConnection:692) - Open
connection to corpproxy:8080
2009-05-08 11:09:48,753 [DEBUG] (o.a.c.h.HttpMethodBase:1352) - Adding Host
request header
2009-05-08 11:09:48,831 [DEBUG] (o.a.c.h.HttpMethodBase:1008) - Should close
connection in response to directive: Close
2009-05-08 11:09:48,831 [DEBUG] (o.a.c.h.HttpConnection:1178) - Releasing
connection back to connection manager.
2009-05-08 11:09:48,831 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:979) - Freeing connection,
hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:09:48,831 [DEBUG] (o.a.c.h.u.IdleConnectionHandler:76) -
Adding connection at: 1241795388831
2009-05-08 11:09:48,831 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:961) - Notifying no-one, there
are no waiting threads

Finally, if I add the domain to the credentials, the debugging output
becomes:

2009-05-08 11:14:19,110 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:412) -
HttpConnectionManager.getConnection: config =
HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080], timeout = 0
2009-05-08 11:14:19,110 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:760) - Allocating new
connection, hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpMethodDirector:161) -
Preemptively sending default basic credentials
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpMethodDirector:316) -
Authenticating with BASIC @corpproxy:8080
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.p.HttpMethodParams:384) -
Credential charset not configured, using HTTP element charset
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpMethodDirector:278) -
Authenticating with BASIC @repo1.maven.org:80
2009-05-08 11:14:19,110 [WARN ] (o.a.c.h.HttpMethodDirector:288) - Required
credentials not available for BASIC @repo1.maven.org:80
2009-05-08 11:14:19,110 [WARN ] (o.a.c.h.HttpMethodDirector:290) -
Preemptive authentication requested but no default credentials available
2009-05-08 11:14:19,110 [DEBUG] (o.a.c.h.HttpConnection:692) - Open
connection to corpproxy:8080
2009-05-08 11:14:19,142 [DEBUG] (o.a.c.h.HttpMethodBase:1352) - Adding Host
request header
2009-05-08 11:14:19,188 [DEBUG] (o.a.c.h.HttpMethodBase:1008) - Should close
connection in response to directive: Close
2009-05-08 11:14:19,188 [DEBUG] (o.a.c.h.HttpConnection:1178) - Releasing
connection back to connection manager.
2009-05-08 11:14:19,188 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:979) - Freeing connection,
hostConfig=HostConfiguration[host=http://repo1.maven.org,
proxyHost=http://corpproxy:8080]
2009-05-08 11:14:19,188 [DEBUG] (o.a.c.h.u.IdleConnectionHandler:76) -
Adding connection at: 1241795659188
2009-05-08 11:14:19,188 [DEBUG]
(o.a.c.h.MultiThreadedHttpConnectionManager:961) - Notifying no-one, there
are no waiting threads



Yoav  Landman wrote:
>
> Hi,
>
> Could you try again with the 2.0.6 release candidate at
> http://www.jfrog.org/files/artifactory-2.0.6-5528.zip?
>
> Thanks,
>
> Yoav
>
> On Fri, May 8, 2009 at 1:03 AM, maf <[hidden email]> wrote:
>
>>
>> I have been successfully using maven from behind our corporate firewall
>> using
>> a proxy entry in my settings.xml like the following:
>>
>>  <proxies>
>>    <proxy>
>>      <active>true</active>
>>      <protocol>http</protocol>
>>      <host>corpproxy</host>
>>      <port>8080</port>
>>    </proxy>
>>  </proxies>
>>
>> In attempting to add artifactory locally, I removed the above proxy from
>> the
>> settings.xml and inserted the mirrors and repositories configuration
>> specified in the artifactory documentation. In the artifactory admin UI,
>> I
>> created a proxy by defining a proxy key with the host and port set to the
>> above values and NT Domain, Username, and Password left blank. I then
>> used
>> the proxy key to assign this proxy to all the remote repositories.
>>
>> When I attempt a build that needs to download an artifact that is not in
>> my
>> local repository, the build fails due to the inability to download the
>> artifact from the artifactory repository. In the Artifactory log I get
>> the
>> following INFO messages:
>>
>> 2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:50:01,467 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
>> credentials available for NTLM @corpproxy:8080
>> 2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:50:01,498 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
>> credentials available for NTLM @corpproxy:8080
>> 2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:50:01,529 [INFO ] (o.a.c.h.HttpMethodDirector:796) - No
>> credentials available for NTLM @corpproxy:8080
>>
>> As I am able to navigate through our firewall with just the host/port
>> combination (without realm/username/password) using web browsers, Eclipse
>> updates, and maven, it would seem that artifactory should be able to do
>> the
>> same.
>>
>> If I do add my username/password to the proxy, the build still fails and
>> the
>> log content changes to:
>>
>> 2009-05-07 17:55:31,433 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> Basic authentication scheme selected
>> 2009-05-07 17:55:31,558 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> Basic authentication scheme selected
>> 2009-05-07 17:55:31,605 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> Basic authentication scheme selected
>>
>> Finally, if I do add my Windows domain to the proxy parameters, the
>> messages
>> change to:
>>
>> 2009-05-07 17:57:36,948 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:57:37,261 [INFO ] (o.a.c.h.HttpMethodDirector:781) -
>> Failure
>> authenticating with NTLM @corpproxy:8080
>> 2009-05-07 17:57:37,276 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:57:37,354 [INFO ] (o.a.c.h.HttpMethodDirector:781) -
>> Failure
>> authenticating with NTLM @corpproxy:8080
>> 2009-05-07 17:57:37,386 [INFO ] (o.a.c.h.a.AuthChallengeProcessor:101) -
>> ntlm authentication scheme selected
>> 2009-05-07 17:57:37,464 [INFO ] (o.a.c.h.HttpMethodDirector:781) -
>> Failure
>> authenticating with NTLM @corpproxy:8080
>
>
>

--
View this message in context: http://www.nabble.com/Maven-can-get-through-firewall-from-Windows-XP-host-but-artifactory-can%27t-tp23436279p23448272.html
Sent from the Artifactory-Users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Maven can get through firewall from Windows XP host but artifactory can't

maf-2

Thanks Yoav, please let me know when you have a new RC I can try out. I tried
Karl's workaround but was unable to get it to work for me.

Marc


Hi,

Thanks for the detailed input. I have created
http://issues.jfrog.org/jira/browse/RTFACT-1669 to follow it up.

Yoav
--
View this message in context: http://www.nabble.com/Maven-can-get-through-firewall-from-Windows-XP-host-but-artifactory-can%27t-tp23436279p23487044.html
Sent from the Artifactory-Users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Maven can get through firewall from Windows XP host but artifactory can't

Yoav Landman
Administrator
Hi Marc,

We actually we have one at http://www.jfrog.org/files/artifactory-2.0.6-5575.zip, but we haven't got around to testing the new NTLM integration yet on the NT Domain. The main difference is that the NT host machine is now configurable, whereas before it was using the local host name by default, which may not necessarily yield a correct NT name.

Yoav

On Mon, May 11, 2009 at 7:45 PM, maf <[hidden email]> wrote:

Thanks Yoav, please let me know when you have a new RC I can try out. I tried
Karl's workaround but was unable to get it to work for me.

Marc


Hi,

Thanks for the detailed input. I have created
http://issues.jfrog.org/jira/browse/RTFACT-1669 to follow it up.

Yoav
--
View this message in context: http://www.nabble.com/Maven-can-get-through-firewall-from-Windows-XP-host-but-artifactory-can%27t-tp23436279p23487044.html
Sent from the Artifactory-Users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users


------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Artifactory-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/artifactory-users
Loading...