here is my setup:
- Windows 7 desktop
- VMWare Workstation 14
- Linux clients (Ubuntu 18.4, Mint 19, Centos 7)
- Use NAT networking for client VMs
- Corporate proxy which filters all traffic going to the web
What I was able to setup for the linux clients
- for apt or yum, I was able to configure them to go through the proxy.
ex apt: /etc/apt/apt.conf
Acquire::http::Proxy "http://DOMAIN\USER:PASSWORD@PROXY.FQDN.COM:8080";
That works, I can update, install, ...
What I was not able to setup
Any other network software. - Ex. browser. I configured my linux browser to the same proxy, no luck. - I downloaded the wpad.dat for my Windows host, and extracted the proxy name (and therefore IP). Tried that in the browser proxy setting, no luck. - Same thing at the system, network proxy level.
From what I have read up to now:
- My browsers on Windows use the wpad.dat to figure out what proxy address to use. Then NTLM authentication. I confirmed that with Fiddler on Windows, I see NTLM authentication headers.
- I do not understand how APT does not use NTLM authentication and still works ok.
What I have tried:
- cntlm: I setup cntlm on my linux client and that did not work. cntlm was never able to connect to the proxy. I see a connection at the network level, but it always refuse my user/password. I wonder if the proxy somehow verifies if the client is in the Windows domain before accepting connections.
Other thing I tried:
- I had the same setup on VirtualBox. Same thing, APT was ok, any other proxy was not. So it does not look like a VMWare thing, more a Linux configuration thing.
Any other ideas?
Methods I could try to collect more information from the proxy?
Do you know how to convert the APT configuration into a browser compatible configuration?
Is VM Workstation ok for this?
Thanks for any help!