<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
<BR>Has anyone use Stunnel to works with NTLM proxy?<BR>
<BR>I am using Stunnel 4.35 on window<BR>It works fine straught and basic proxy but fails to use NTLM proxy. My config for NTLM is like this<BR>---------------- configuration ---------------------<BR>[https]<BR>accept = someport<BR>connect = proxy:proxy_port<BR>protocol = connect<BR>protocolAuthentication = NTLM<BR>protocolHost = dest:dest_port<BR>protocolUsername = domain\username<BR>protocolPassword = password<BR>
-----------------------------------------------------<BR>
<BR>I checked the traffic using the win shark<BR>
<BR>
-----------------win shark for stunnel -----------------<BR>CONNECT dest:destport HTTP/1.1 , NTLMSSP_AUTH, User: \domain\username<BR>
Proxy-Authorization: NTLM some long string<BR>
NTLM Secure Service Provider<BR>NTLMSSP identifier: NTLMSSP<BR>NTLM Message Type: NTLMSSP_AUTH (0x00000003)<BR>Lan Manager Response: Empty<BR>NTLM Response: 951842e95a3e1a0001d8ac6fb2980a004b82ffa75232795d<BR>�<BR>Domain name: NULL<BR>User name: domain\username<BR>�<BR>------------------------------------------------------<BR>
<BR>
STunnel is not sending the domain and sends the user name consisting of domain and username.<BR><BR>
When IE is configured to use NLM proxy, traffic is as<BR>-------------- win shark for IE -----------------------------<BR>CONNECT dest:destport HTTP/1.1 , NTLMSSP_AUTH, User: domain\username<BR>Proxy-Authorization: NTLM some long string<BR>NTLM Secure Service Provider<BR>NTLMSSP identifier: NTLMSSP<BR>NTLM Message Type: NTLMSSP_AUTH (0x00000003)<BR>Lan Manager Response: 10f2d8147a2651de00000000000000000000000000000000<BR>�<BR>NTLM Response: 951842e95a3e1a0001d8ac6fb2980a004b82ffa75232795d<BR>�<BR>Domain name: domain<BR>�<BR>User name: username<BR>..<BR>Host name: host<BR>--------------------------------------------------------------<BR>
<BR>
---- stunnel log ---------------<BR>2011.08.04 10:11:16 LOG7[2384:5480]: Service https started<BR>2011.08.04 10:11:16 LOG7[2384:5480]: Option TCP_NODELAY set on local socket<BR>2011.08.04 10:11:16 LOG5[2384:5480]: Service https accepted connection from 127.0.0.1:9913<BR>2011.08.04 10:11:16 LOG7[2384:5480]: remote socket: FD=1456 allocated (non-blocking mode)<BR>2011.08.04 10:11:16 LOG6[2384:5480]: connect_blocking: connecting 172.23.11.161:8080<BR>2011.08.04 10:11:16 LOG7[2384:5480]: connect_blocking: s_poll_wait 172.23.11.161:8080: waiting 10 seconds<BR>2011.08.04 10:11:16 LOG5[2384:5480]: connect_blocking: connected 172.23.11.161:8080<BR>2011.08.04 10:11:16 LOG5[2384:5480]: Service https connected remote server from 172.23.11.45:9914<BR>2011.08.04 10:11:16 LOG7[2384:5480]: Remote FD=1456 initialized<BR>2011.08.04 10:11:16 LOG7[2384:5480]: Option TCP_NODELAY set on remote socket<BR>2011.08.04 10:11:16 LOG5[2384:5480]: Negotiations for connect (client side) started<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> CONNECT 172.23.11.35:443 HTTP/1.1<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> Host: 172.23.11.35:443<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> Proxy-Connection: keep-alive<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> Proxy-Authorization: NTLM TlRMTVNTUAABAAAAAgIAAA==<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> <BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- HTTP/1.1 407 Proxy Authentication Required<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- Server: FreeProxy/4.50<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- Date: Thu, 04 Aug 2011 17:11:16 GMT<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- Content-Type: text/html<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- Transfer-Encoding: Chunked<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- Proxy-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADgAAAACAgACATR6TVahgFIAAAAAAAAAAAAAAAA4AAAABQLODgAAAA8=<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- Proxy-Connection: Keep-Alive<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- <BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> CONNECT 172.23.11.35:443 HTTP/1.1<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> Host: 172.23.11.35:443<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> Proxy-Authorization: NTLM TlRMTVNTUAADAAAAAAAAAGwAAAAYABgAQAAAAAAAAABsAAAAFAAUAFgAA......1jDUOrcoBBus0aPbH44onfcpGZvdW5kc3RvbmVccHN5cy1udGxt<BR>2011.08.04 10:11:16 LOG7[2384:5480]: -> <BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- 7E5<BR>2011.08.04 10:11:16 LOG3[2384:5480]: CONNECT request rejected<BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- <html><BR>2011.08.04 10:11:16 LOG7[2384:5480]: <- <BR>2011.08.04 10:11:16 LOG5[2384:5480]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket<BR>2011.08.04 10:11:16 LOG7[2384:5480]: Service https finished (0 left)<BR>2011.08.04 10:11:16 LOG7[2384:5480]: str_stats: 0 block(s), 0 byte(s)<BR>--------------------------------<BR>
Please help!!!<BR><BR>Subhash Sharma <BR> </div></body>
</html>