Apache HttpClient v5.0在Windows上无法使用NTLM进行身份验证。

huangapple
go评论104阅读模式
英文:

Apache HttpClient v5.0 doesn't authenticate with NTLM on Windows

问题

  1. 我正在尝试通过 NTLM 代理发出请求，代码如下：
  3. try (CloseableHttpClient httpClient = WinHttpClients.createDefault()) {
  4.     HttpHost target = HttpHost.create("http://example.com");
  5.     HttpHost proxy = new HttpHost("http", "localhost", 80);
  6.     RequestConfig config = RequestConfig.custom().setProxy(proxy).build();
  7.     HttpGet request = new HttpGet("/");
  8.     request.setConfig(config);
  9.     try (CloseableHttpResponse response = httpClient.execute(target, request)) {
  10.         StatusLine statusLine = new StatusLine(response);
  11.         if (statusLine.getStatusCode() == HttpStatus.SC_OK) {
  12.             System.out.println("Test OK");
  13.         } else if (statusLine.getStatusCode() == HttpStatus.SC_PROXY_AUTHENTICATION_REQUIRED) {
  14.             throw new CredentialException(statusLine.getReasonPhrase());
  15.         }
  16.     }
  17. } catch (Exception e) {
  18.     e.printStackTrace();
  19. }

错误日志如下：

[主要] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ex-00000001: 准备请求执行
...
...
javax.security.auth.login.CredentialException: 需要代理授权
at org.kpax.http_client_5_testing.App.main(App.java:47)

  2. 环境：
  3. - 操作系统：Windows 10
  4. - JRE：AdoptOpenJdk v11
  5. - 代理类型：NTLM（Wingate）
  6. 问题：上述代码是否存在问题？
  7. 注：相同的代码在 Apache Http Client v4.5.12 中正常工作。
  8. <details>
  9. <summary>英文:</summary>
  10. I&#39;m trying to make a request through a NTLM proxy like this:
  11. try (CloseableHttpClient httpClient = WinHttpClients.createDefault()) {
  12. HttpHost target = HttpHost.create(&quot;http://example.com&quot;);
  13. HttpHost proxy = new HttpHost(&quot;http&quot;, &quot;localhost&quot;, 80);
  14. RequestConfig config = RequestConfig.custom().setProxy(proxy).build();
  15. HttpGet request = new HttpGet(&quot;/&quot;);
  16. request.setConfig(config);
  17. try (CloseableHttpResponse response = httpClient.execute(target, request)) {
  18. StatusLine statusLine = new StatusLine(response);
  19. if (statusLine.getStatusCode() == HttpStatus.SC_OK) {
  20. System.out.println(&quot;Test OK&quot;);
  21. } else if (statusLine.getStatusCode() == HttpStatus.SC_PROXY_AUTHENTICATION_REQUIRED) {
  22. throw new CredentialException(statusLine.getReasonPhrase());
  23. }
  24. }
  25. } catch (Exception e) {
  26. e.printStackTrace();
  27. }
  28. but it fails, here is the log:
  29. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ex-00000001: preparing request execution
  30. [main] DEBUG org.apache.hc.client5.http.protocol.RequestAddCookies - Cookie spec selected: strict
  31. [main] DEBUG org.apache.hc.client5.http.protocol.RequestAuthCache - Auth cache not set in the context
  32. [main] DEBUG org.apache.hc.client5.http.impl.classic.ProtocolExec - ex-00000001: target auth state: UNCHALLENGED
  33. [main] DEBUG org.apache.hc.client5.http.impl.classic.ProtocolExec - ex-00000001: proxy auth state: UNCHALLENGED
  34. [main] DEBUG org.apache.hc.client5.http.impl.classic.ConnectExec - ex-00000001: acquiring connection with route {}-&gt;http://localhost:80-&gt;http://example.com:80
  35. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ex-00000001: acquiring endpoint (3 MINUTES)
  36. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ex-00000001: endpoint lease request (3 MINUTES) [route: {}-&gt;http://localhost:80-&gt;http://example.com:80][total available: 0; route allocated: 0 of 5; total allocated: 0 of 25]
  37. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ex-00000001: endpoint leased [route: {}-&gt;http://localhost:80-&gt;http://example.com:80][total available: 0; route allocated: 1 of 5; total allocated: 1 of 25]
  38. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ex-00000001: acquired ep-00000000
  39. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ex-00000001: acquired endpoint ep-00000000
  40. [main] DEBUG org.apache.hc.client5.http.impl.classic.ConnectExec - ex-00000001: opening connection {}-&gt;http://localhost:80-&gt;http://example.com:80
  41. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ep-00000000: connecting endpoint (3 MINUTES)
  42. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ep-00000000: connecting endpoint to http://localhost:80 (3 MINUTES)
  43. [main] DEBUG org.apache.hc.client5.http.impl.io.DefaultHttpClientConnectionOperator - http-outgoing-0: connecting to localhost/127.0.0.1:80
  44. [main] DEBUG org.apache.hc.client5.http.impl.io.DefaultHttpClientConnectionOperator - http-outgoing-0: connection established 127.0.0.1:57194&lt;-&gt;127.0.0.1:80
  45. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ep-00000000: connected http-outgoing-0
  46. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ep-00000000: endpoint connected
  47. [main] DEBUG org.apache.hc.client5.http.impl.classic.MainClientExec - ex-00000001: executing GET http://example.com/ HTTP/1.1
  48. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ep-00000000: start execution ex-00000001
  49. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ep-00000000: executing exchange ex-00000001 over http-outgoing-0
  50. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &gt;&gt; GET http://example.com/ HTTP/1.1
  51. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &gt;&gt; Accept-Encoding: gzip, x-gzip, deflate
  52. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &gt;&gt; Host: example.com
  53. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &gt;&gt; User-Agent: Apache-HttpClient/5.0 (Java/1.8.0_222)
  54. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &gt;&gt; &quot;GET http://example.com/ HTTP/1.1[\r][\n]&quot;
  55. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &gt;&gt; &quot;Accept-Encoding: gzip, x-gzip, deflate[\r][\n]&quot;
  56. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &gt;&gt; &quot;Host: example.com[\r][\n]&quot;
  57. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &gt;&gt; &quot;User-Agent: Apache-HttpClient/5.0 (Java/1.8.0_222)[\r][\n]&quot;
  58. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &gt;&gt; &quot;[\r][\n]&quot;
  59. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;HTTP/1.1 407 Proxy authorization required[\r][\n]&quot;
  60. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Proxy-Authenticate: NTLM[\r][\n]&quot;
  61. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Proxy-Authenticate: Basic realm=&quot;/&quot;, charset=&quot;UTF-8&quot;[\r][\n]&quot;
  62. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Proxy-Support: session-based-authentication[\r][\n]&quot;
  63. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Cache-control: no-store, no-cache[\r][\n]&quot;
  64. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Content-Type: text/html; charset=utf-8[\r][\n]&quot;
  65. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Content-Length: 855[\r][\n]&quot;
  66. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Date: Sun, 05 Apr 2020 06:15:20 GMT[\r][\n]&quot;
  67. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Server: WinGate Engine[\r][\n]&quot;
  68. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;Connection: Keep-Alive[\r][\n]&quot;
  69. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;[\r][\n]&quot;
  70. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;!DOCTYPE HTML PUBLIC &quot;-//W3C//DTD HTML 4.01 Transitional//EN&quot; &quot;http://www.w3.org/TR/html4/strict.dtd&quot;&gt;&lt;html&gt;&lt;head&gt;&lt;title&gt;Proxy authorization required&lt;/title&gt;[\r][\n]&quot;
  71. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;style&gt;[\r][\n]&quot;
  72. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;body { font-family:helvetica; font-size:11pt; color:#0071BB; margin:30px; padding:0px; }[\r][\n]&quot;
  73. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;h1 { color:#005395; margin:0px 0px 0px 0px; }[\r][\n]&quot;
  74. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;h2 { color:#005395; }[\r][\n]&quot;
  75. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;p { margin:6px 0px 6px 0px;}[\r][\n]&quot;
  76. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;p.footer { font-size:8pt; margin:3px 0px 0px 0px;}[\r][\n]&quot;
  77. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;b { font-weight:550; color:#7F7F7F; }[\r][\n]&quot;
  78. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;/style&gt;[\r][\n]&quot;
  79. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;/head&gt;[\r][\n]&quot;
  80. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;body&gt;&lt;h1&gt;Proxy authorization required&lt;/h1&gt;[\r][\n]&quot;
  81. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;div style=&quot;margin:12px 0px 12px 0px; padding:12px 0px 12px 0px; min-height:300px; border-top:1px solid #0071BB; border-bottom:1px solid #0071BB;&quot;&gt;You must authenticate to gain access to this resource&lt;/div&gt;[\r][\n]&quot;
  82. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;p class=&quot;footer&quot;&gt;&lt;a href=&quot;http://www.wingate.com&quot;&gt;WinGate&lt;/a&gt;&amp;trade; &amp;copy; Qbik New Zealand Limited 1995-2020[\r][\n]&quot;
  83. [main] DEBUG org.apache.hc.client5.http.wire - http-outgoing-0 &lt;&lt; &quot;&lt;/p&gt;&lt;/body&gt;&lt;/html&gt;[\r][\n]&quot;
  84. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; HTTP/1.1 407 Proxy authorization required
  85. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Proxy-Authenticate: NTLM
  86. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Proxy-Authenticate: Basic realm=&quot;/&quot;, charset=&quot;UTF-8&quot;
  87. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Proxy-Support: session-based-authentication
  88. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Cache-control: no-store, no-cache
  89. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Content-Type: text/html; charset=utf-8
  90. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Content-Length: 855
  91. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Date: Sun, 05 Apr 2020 06:15:20 GMT
  92. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Server: WinGate Engine
  93. [main] DEBUG org.apache.hc.client5.http.headers - http-outgoing-0 &lt;&lt; Connection: Keep-Alive
  94. [main] DEBUG org.apache.hc.client5.http.impl.classic.MainClientExec - ex-00000001: connection can be kept alive for 3 MINUTES
  95. [main] DEBUG org.apache.hc.client5.http.impl.classic.ProtocolExec - Authentication required
  96. [main] DEBUG org.apache.hc.client5.http.impl.classic.ProtocolExec - localhost:80 requested authentication
  97. [main] DEBUG org.apache.hc.client5.http.impl.DefaultAuthenticationStrategy - Authentication schemes in the order of preference: [Negotiate, Kerberos, NTLM, Digest, Basic]
  98. [main] DEBUG org.apache.hc.client5.http.impl.DefaultAuthenticationStrategy - Challenge for Negotiate authentication scheme not available
  99. [main] DEBUG org.apache.hc.client5.http.impl.DefaultAuthenticationStrategy - Challenge for Kerberos authentication scheme not available
  100. [main] DEBUG org.apache.hc.client5.http.impl.win.WindowsNegotiateScheme - Created WindowsNegotiateScheme using NTLM
  101. [main] DEBUG org.apache.hc.client5.http.impl.DefaultAuthenticationStrategy - Challenge for Digest authentication scheme not available
  102. [main] WARN org.apache.hc.client5.http.impl.classic.ProtocolExec - Missing auth challenge
  103. [main] DEBUG org.apache.hc.client5.http.impl.io.DefaultManagedHttpClientConnection - http-outgoing-0: close connection GRACEFUL
  104. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ep-00000000: endpoint closed
  105. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ep-00000000: endpoint closed
  106. [main] DEBUG org.apache.hc.client5.http.impl.classic.InternalHttpClient - ep-00000000: discarding endpoint
  107. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ep-00000000: releasing endpoint
  108. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - ep-00000000: connection released [route: {}-&gt;http://localhost:80-&gt;http://example.com:80][total available: 0; route allocated: 0 of 5; total allocated: 0 of 25]
  109. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - Shutdown connection pool GRACEFUL
  110. [main] DEBUG org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager - Connection pool shut down
  111. javax.security.auth.login.CredentialException: Proxy authorization required
  112. at org.kpax.http_client_5_testing.App.main(App.java:47)
  113. ----------
  114. **Environment**
  115. - OS: Windows 10 
  116. - JRE: AdoptOpenJdk v11 
  117. - Proxy type: NTLM (Wingate)
  118. ----------
  119. **Question** Is there something wrong with the above code?
  120. ----------
  121. **Obs** The same code works fine with Apache Http Client v4.5.12
  122. </details>
  123. # 答案1
  124. **得分**: 1
  125. 这是一个[轻微的错误][1]，已在v5.0.1中解决。
  126. [1]: https://issues.apache.org/jira/browse/HTTPCLIENT-2073
  127. <details>
  128. <summary>英文:</summary>
  129. It is a [minor bug][1], solved now, for v5.0.1.
  130. [1]: https://issues.apache.org/jira/browse/HTTPCLIENT-2073
  131. </details>

huangapple
  • 本文由 发表于 2020年4月5日 16:13:18
  • 转载请务必保留本文链接：https://go.coder-hub.com/61039771.html
  • apache-httpclient-5.x
  • java
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定