Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am trying to connect to an IMAP email server through a proxy using desproxy and Cntlm Authentication Proxy.

 cntlm.exe -c cntlm.ini -v

 desproxy imap.gmail.com 993 127.0.0.1 3128 1080

 openssl s_client -connect 127.0.0.1:1080

Please note in the desproxy output that in the error webpage that the username is blank. (In Internet Explorer, whenever I go to a webpage that does not exist, in the error webpage I can see my username, however in Firefox, I do not. In Internet Explorer, my username is TREE\user@ntlm )


cntlm.ini

Username    user
Domain      tree
Password    my_password
Proxy       5.10.15.20:8080
Listen      3128

C:\>cntlm.exe -c cntlm.ini -M http://www.example.com
Config profile  1/11... Auth request ignored (HTTP code: 1)
Config profile  2/11... Auth request ignored (HTTP code: 1)
Config profile  3/11... Auth request ignored (HTTP code: 1)
Config profile  4/11... Auth request ignored (HTTP code: 1)
Config profile  5/11... Auth request ignored (HTTP code: 1)
Config profile  6/11... Auth request ignored (HTTP code: 1)
Config profile  7/11... Auth request ignored (HTTP code: 1)
Config profile  8/11... Auth request ignored (HTTP code: 1)
Config profile  9/11... Auth request ignored (HTTP code: 1)
Config profile 10/11... Auth request ignored (HTTP code: 1)
Config profile 11/11... Auth request ignored (HTTP code: 1)
You have used wrong credentials, bad URL or your proxy is quite insane,
in which case try submitting a Support Request.

C:\>cntlm.exe -c cntlm.ini -v
cntlm: Proxy listening on 127.0.0.1:3128
cntlm: Resolving proxy 5.10.15.20...
cntlm: Workstation name used: PC
cntlm: Using following NTLM hashes: NTLMv2(1) NT(0) LM(0)
cntlm: PID 4512: Cntlm ready, staying in the foreground
cntlm: PID 4512: Connection accepted from 127.0.0.1:51563
Thread processing...

******* Round 1 C: 4, S: 5 *******!
Reading headers...
HEAD: CONNECT imap.gmail.com:993 HTTP/1.1
Host                           => imap.gmail.com:993
User-Agent                     => Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)

NTLM Request:
           Domain: tree
         Hostname: PC
            Flags: 0xA208B205

Sending auth request...
Host                           => imap.gmail.com:993
User-Agent                     => Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)

Proxy-Connection               => Keep-Alive
Proxy-Authorization            => NTLM TlRMTVNTUAABAAAABbIIogMAAwAmAAAABgAGACAAA
ABMU0YwMTFVRFM=
Reading auth response...
HEAD: HTTP/1.1 407 Proxy Authentication Required
Mime-Version                   => 1.0
Date                           => Thu, 01 Sep 2011 12:36:33 BST
Content-Type                   => text/html
Proxy-Authenticate             => NTLM TlRMTVNTUAACAAAABgAGADAAAAAFgomiAycbhm2QB
3gAAAAAAAAAAGAAYAA2AAAAVQBEAFMAAgAGAFUARABTAAEACgBJAFcAUwBBADEABAAYAG4AdQBpAGcAY
QBsAHcAYQB5AC4AaQBlAAMAJABpAHcAcwBhADEALgBuAHUAaQBnAGEAbAB3AGEAeQAuAGkAZQAAAAAA
Connection                     => keep-alive
Proxy-Connection               => keep-alive
Content-Length                 => 0
NTLM Challenge:
        Challenge: 03271B866D900778 (len: 150)
            Flags: 0xA2898205
        NT domain: TREE
           Server: SERVER
           Domain: example.com
             FQDN: server.example.com
            TBofs: 54
            TBlen: 96
            ttype: 0
NTLM Response:
         Hostname: 'PC'
           Domain: 'tree'
         Username: 'user'
         Response: '19EDCAAF14E174781DF7614A514E68AD010100000000000080B627669B68
CC011F30327B6EB20917000000000200060055024400530001000A00490057005300410031000400
18006E0075006900670061006C007700610079002E00690065000300240069007700730061003100
2E006E0075006900670061006C007700610079002E00690065000000000000000000' (144)
         Response: '3A238618A402160C83EB0D67200D7C5F1F30327B6EB20917' (24)
Sending headers...
Host                           => imap.gmail.com:993
User-Agent                     => Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)

Proxy-Connection               => Keep-Alive
Proxy-Authorization            => NTLM TlRMTVNTUAADAAAAGAAYAGIAAACQAJAAegAAAAYAB
gBAAAAAEAAQAEYAAAAMAAwAVgABAAAAAAAKAQAABYKJolUARABTADAAOQAyADMAMgA1ADYAOQBMAFMAR
gAwADEAMQA6I4YYpAIWDIPrDWcgDXxfHzAye26yCRcZ7cqvFOF0eB9zYUpRTmitAQEAAAAAAACAtidmm
2jMAR8wMntusgkXAAAAAAIABgBVAEQAUwABAAoASQBXAFMAQQAxAAQAGABuAHUAaQBnAGEAbAB3AGEAe
QAuAGkAZQADACQAaQB3AHMAYQAxAC4AbgB1AGkAZwBhAGwAdwBhAHkALgBpAGUAAAAAAAAAAAA=
No body.

******* Round 2 C: 4, S: 5 *******!
Reading headers...
HEAD: HTTP/1.1 407 Proxy Authentication Required
Mime-Version                   => 1.0
Date                           => Thu, 01 Sep 2011 12:36:33 BST
Content-Type                   => text/html
Proxy-Authenticate             => NTLM
Connection                     => close
Proxy-Connection               => close
Content-Length                 => 1659
Sending headers...
Body included. Lenght: 1659
data_send: read 1659 of 1659 / 1659 of 1659 (errno = ok)
data_send: wrote 1659 of 1659
Body sent.
PROXY CLOSED CONNECTION

Thread finished.
Joining thread 14425248; rc: 0
cntlm: PID 4512: Signal 2 received, issuing clean shutdown
cntlm: PID 4512: Terminating with 0 active threads

C:\>desproxy imap.gmail.com 993 127.0.0.1 3128 1080

-----------------------------------
desproxy                 0.1.0-pre3

(C) 2003 Miguelanxo Otero Salgueiro
-----------------------------------

TCP port 1080 Bound & Listening
Press <Control+C> to Quit

Connection request from 127.0.0.1, port 51528
Connecting to http proxy (127.0.0.1:3128)
Mime-Version: 1.0
Date: Thu, 01 Sep 2011 12:36:19 BST
Content-Type: text/html
Proxy-Authenticate: NTLM
Connection: close
Proxy-Connection: close
Content-Length: 1659


<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Notification: Proxy Authorization Required</title>
</head>

<body>
<img src="http://www.example.com/logo.png" border="0">

<h1>This Page Cannot Be Displayed</h1>
<hr>

<p>
Authentication is required to access the Internet using this system.
A valid user ID and password must be entered when prompted.
</p>
<hr>
<p>If you have any queries about access to this webpage, please contact the <a h
ref="<a href="http://www.example.com/information-solutions-and-services/">ISS">http://www.example.com/information-solutions-and-services/">ISS</a> Service Desk </a> ( <a href="mailto:servicedesk@example.com">servicedesk@example.com </a>) and provide the following details:</p>

<p> Username <<  >>, IP address << 1.2.3.4 >> and URL << imap.gmail.com >> </p>
</body>
</html>
connect_host_to_proxy: ERROR
Connection #0: end of connection

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.