wget 407 error: proxy authentication required?

dxcheng

Virtual box centos 7 虛擬機通過代理上網(wǎng)，firefox可以成功訪問網(wǎng)頁，但是wget 返回error 407 proxy authentication required 錯誤
還請大神們幫忙看下，這是怎么回事，謝謝！

Firefox 代理設(shè)置：


Firefox 上網(wǎng)時提示輸入用戶名，密碼，輸入后可以正常上網(wǎng)：


不過在Terminal下使用wget 下載文件時返回錯誤407 error proxy authentication required：

# export http_proxy=http:// 135.251.33.16:8080/
# wget -d -v http:// mirrors.163.com/.help/CentOS6-Base-163.repo --proxy-user test --proxy-password test2016
Setting --verbose (verbose) to 1
Setting --proxy-user (proxyuser) to test
Setting --proxy-password (proxypassword) to test2016
DEBUG output created by Wget 1.14 on linux-gnu.

URI encoding = ‘UTF-8’
URI encoding = ‘UTF-8’
--2016-02-22 10:35:26--  http:// mirrors.163.com/.help/CentOS6-Base-163.repo
Connecting to 135.251.33.16:8080... connected.
Created socket 3.
Releasing 0x000000000173ca00 (new refcount 0).
Deleting unused 0x000000000173ca00.

---request begin---
GET http:// mirrors.163.com/.help/CentOS6-Base-163.repo HTTP/1.1
User-Agent: Wget/1.14 (linux-gnu)
Accept: */*
Host: mirrors.163.com
Connection: Close
Proxy-Connection: Keep-Alive
Proxy-Authorization: Basic Y2hhc29uZDpkeGM2NzUxNzch

---request end---
Proxy request sent, awaiting response...
---response begin---
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: NTLM
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Proxy-Connection: close
Set-Cookie: BCSI-CS87FB2110=2; Path=/
Connection: close
Content-Length: 810

---response end---
407 Proxy Authentication Required

Stored cookie mirrors.163.com -1 (ANY) / <session> <insecure> [expiry none] BCSI-CS87FB2110 2
URI content encoding = ‘utf-8’
Closed fd 3
2016-02-22 10:35:26 ERROR 407: Proxy Authentication Required.

PS: 為了繞過論壇發(fā)表ULR的限制，所有HTTP URL后面加了一個空格

jixuuse

提示就是代理驗證失敗，配置代理請加上賬號密碼

dxcheng

回復(fù) 2# jixuuse


已經(jīng)加進去了，

# export http_proxy=http:// 135.251.33.16:8080/
# wget -d -v http:// mirrors.163.com/.help/CentOS6-Base-163.repo --proxy-user test --proxy-password test2016

而且這樣也是不行的：

# export http_proxy=http:// test:test2016@135.251.33.16:8080/
# wget -d -v http:// mirrors.163.com/.help/CentOS6-Base-163.repo

PS：注意到HTTP的response中有這么一句，不知道和這個有關(guān)嗎？

---response begin---
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: NTLM
Cache-Control: no-cache

lyhabc

Proxy-Authenticate: NTLM 就是本地認(rèn)證吧

dxcheng

回復(fù) 4# lyhabc

Thanks，網(wǎng)上搜索了一些資料，和大家一起學(xué)習(xí)下。

NTLM是一種身份認(rèn)證協(xié)議，這種協(xié)議適用于Window操作系統(tǒng)。和他相對應(yīng)的協(xié)議有Basic 和 Digest（wget的man help里面看到的）

--http-password=password
           Specify the username user and password password on an HTTP
           server.  According to the type of the challenge, Wget will encode
           them using either the "basic" (insecure), the "digest", or the
           Windows "NTLM" authentication scheme.

wget僅支持Basic方式的身份認(rèn)證協(xié)議，因此會出現(xiàn)Proxy Authentication Required

       --proxy-user=user
       --proxy-password=password
           Specify the username user and password password for
           authentication on a proxy server.  Wget will encode them using
           the "basic" authentication scheme.

           Security considerations similar to those with --http-password
           pertain here as well.

解決方案：
使用NTLMAPS搭建一個本地代理服務(wù)器，實現(xiàn)認(rèn)證協(xié)議的轉(zhuǎn)換。
具體參考如下：
Web Browsing Behind ISA Server HOWTO
Linux下通過Windows的ISA代理認(rèn)證上網(wǎng)

PS：Firefox 內(nèi)部實現(xiàn)了認(rèn)證協(xié)議的支持，所以Firefox沒有這個問題。

chenyx

感謝樓主分享