Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-65361

Proxy check fails with NTLM with 407 BUT updates do work

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • core

      Somewhat this is the reverse of JENKINS-40775, maybe related to JENKINS-29343

      I have configured a corporate proxy with authentication in the /pluginManager/advanced screen. The proxy we have does not support NTLM, basic authentication works.

      Given the Test URL:

      https://updates.jenkins.io

      The check gives

      Failed to connect to http://updates.jenkins.io (code 407).

      and gives the following log output:

      2021-04-14 07:56:43.757+0000 [id=16]    INFO    o.a.c.h.a.AuthChallengeProcessor#selectAuthScheme: ntlm authentication scheme selected
      2021-04-14 07:56:43.781+0000 [id=16]    SEVERE  o.a.c.h.HttpMethodDirector#authenticate: Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials
      org.apache.commons.httpclient.auth.InvalidCredentialsException: Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials
              at org.apache.commons.httpclient.auth.NTLMScheme.authenticate(NTLMScheme.java:342)
              at org.apache.commons.httpclient.HttpMethodDirector.authenticateProxy(HttpMethodDirector.java:327)
              at org.apache.commons.httpclient.HttpMethodDirector.authenticate(HttpMethodDirector.java:239)
              at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:177)
              at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:404)
              at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:330)
              at hudson.ProxyConfiguration$DescriptorImpl.doValidateProxy(ProxyConfiguration.java:458)
      2021-04-14 07:56:43.829+0000 [id=16]    INFO    o.a.c.h.HttpMethodDirector#processProxyAuthChallenge: Failure authenticating with NTLM <any realm>@this.is.my.corporate.proxy:8080
      

      HOWEVER, the updates do work:

      2021-04-14 07:56:56.420+0000 [id=154]   INFO    hudson.util.Retrier#start: Attempt #1 to do the action check updates server
      2021-04-14 07:57:04.309+0000 [id=154]   INFO    h.m.DownloadService$Downloadable#load: Obtained the updated data file for hudson.tasks.Maven.MavenInstaller
      2021-04-14 07:57:05.372+0000 [id=154]   INFO    h.m.DownloadService$Downloadable#load: Obtained the updated data file for hudson.plugins.gradle.GradleInstaller
      2021-04-14 07:57:06.124+0000 [id=154]   INFO    h.m.DownloadService$Downloadable#load: Obtained the updated data file for hudson.tasks.Ant.AntInstaller
      2021-04-14 07:57:07.607+0000 [id=154]   INFO    h.m.DownloadService$Downloadable#load: Obtained the updated data file for hudson.tools.JDKInstaller
      2021-04-14 07:57:07.607+0000 [id=154]   INFO    hudson.util.Retrier#start: Performed the action check updates server successfully at the attempt #1
      

            Unassigned Unassigned
            saper Marcin Cieślak
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: