[Pidgin] #2910: NTLM proxy authorization broken
Pidgin
trac at pidgin.im
Sun Sep 2 11:44:18 EDT 2007
#2910: NTLM proxy authorization broken
-----------------------+----------------------------------------------------
Reporter: thecrux | Type: defect
Status: new | Priority: minor
Component: libpurple | Version: 2.1.1
Keywords: ntlm | Pending: 0
-----------------------+----------------------------------------------------
we have a proxy server Squid with ntlm authorization.
1. It seems that pidgin cant authorizate via proxy, because of wrong NTLM
flags used in NTLMSSP header that pidgin sent to proxy.
From http://davenport.sourceforge.net/ntlm.html#theNtlmFlags :
Negotiate Unicode (0x00000001) - The client sets this flag to indicate
that it supports Unicode strings.
This flag is set to 0 in all NTLMSSP headers, that pidgin send. So proxy
read all strings as a 8bit strings, but they are unicode.
2. Also, pidgin send wrong workstation name (insead of hostname it used
proxy name).
3. On windows platform pidgin can use SSPI service to transparently
authorizate user (dont need to ask username and password)
http://davenport.sourceforge.net/ntlm.html#ntlmsspAndSspi
--
Ticket URL: <http://developer.pidgin.im/ticket/2910>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list