Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Using curl with NTLM auth to make a post is failing

I can't seem to wrap my head around this. I'm trying to script automating an upload of a csv but the curl is failing with a 401.

curl -v --ntlm -u username --upload-file ~/galaxy/forums/pt_update.csv https://connect.example.com/11063/csv_import?op=add -k Enter host password for user 'username: * About to connect() to connect.example.com port 443 (#0) *   Trying x.x.x.x... connected * successfully set certificate verify locations: *   CAfile: none   CApath: /etc/ssl/certs * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, CERT (11): * SSLv3, TLS handshake, Server finished (14): * SSLv3, TLS handshake, Client key exchange (16): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSL connection using RC4-MD5 * Server certificate: *    subject: C=US; ST=Washington; L=internetland; O=example.com Inc.; CN=connect.example.com *    start date: 2012-06-11 14:53:47 GMT *    expire date: 2013-06-11 14:53:47 GMT *    common name: connect.example.com (matched) *    issuer: DC=com; DC=example; DC=ant; CN=example.com Infosec CA G2 *    SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway. * Server auth using NTLM with user 'username' > PUT /11063/csv_import?op=add HTTP/1.1 > Authorization: NTLM TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA= > User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4 libidn/1.23 librtmp/2.3 > Host: connect.example.com > Accept: */* > Content-Length: 0 > Expect: 100-continue >  < HTTP/1.1 401 Authorization Required < Date: Fri, 29 Mar 2013 03:47:00 GMT < Server: Server < WWW-Authenticate: Basic realm="ANT (Windows) Login" < Content-Length: 401 < Connection: close < Content-Type: text/html; charset=iso-8859-1 <  <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Authorization Required</title> </head><body> <h1>Authorization Required</h1> <p>This server could not verify that you are authorized to access the document requested.  Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html> * Closing connection #0 * SSLv3, TLS alert, Client hello (1): 

I replaced example where my actual domain is and I'm most certainly using the right username/pw for my domain.

like image 535
Juddles Avatar asked Mar 29 '13 04:03

Juddles


People also ask

How do you pass Auth in curl?

To send basic auth credentials with Curl, use the "-u login: password" command-line option. Curl automatically converts the login: password pair into a Base64-encoded string and adds the "Authorization: Basic [token]" header to the request.

Does Curl support NTLMv2?

server supports it; DCs accept LM, NTLM, and NTLMv2 authentication.

Is NTLM authentication still used?

Current applications. NTLM authentication is still supported and must be used for Windows authentication with systems configured as a member of a workgroup. NTLM authentication is also used for local logon authentication on non-domain controllers.


1 Answers

You try this

If you have a page hosted in IIS and that work with NTLM then you should put:

(for example at Sharepoint page)

curl http://enterprisesharepoint -v --ntlm --negotiate -u USER123:PASSWORD123 

It's work fine for me and you can see the headers message

--Edit--

if you put negotiate, this give the local account and log in with the server, if a user name and password are incorrect, that's no matter because negotiate do automatic autentication with windows account for the user local loged. If you don't like this behavior, you should be put only ntlm for correct ntlm login.

like image 183
Daniel Antonio Nuñez Carhuayo Avatar answered Sep 19 '22 12:09

Daniel Antonio Nuñez Carhuayo