wget 407 error: proxy authentication required?

dxcheng

Virtual box centos 7 虚拟机通过代理上网，firefox可以成功访问网页，但是wget 返回error 407 proxy authentication required 错误
还请大神们帮忙看下，这是怎么回事，谢谢！

Firefox 代理设置：


Firefox 上网时提示输入用户名，密码，输入后可以正常上网：


不过在Terminal下使用wget 下载文件时返回错误407 error proxy authentication required：

# export http_proxy=http:// 135.251.33.16:8080/
# wget -d -v http:// mirrors.163.com/.help/CentOS6-Base-163.repo --proxy-user test --proxy-password test2016
Setting --verbose (verbose) to 1
Setting --proxy-user (proxyuser) to test
Setting --proxy-password (proxypassword) to test2016
DEBUG output created by Wget 1.14 on linux-gnu.

URI encoding = ‘UTF-8’
URI encoding = ‘UTF-8’
--2016-02-22 10:35:26--  http:// mirrors.163.com/.help/CentOS6-Base-163.repo
Connecting to 135.251.33.16:8080... connected.
Created socket 3.
Releasing 0x000000000173ca00 (new refcount 0).
Deleting unused 0x000000000173ca00.

---request begin---
GET http:// mirrors.163.com/.help/CentOS6-Base-163.repo HTTP/1.1
User-Agent: Wget/1.14 (linux-gnu)
Accept: */*
Host: mirrors.163.com
Connection: Close
Proxy-Connection: Keep-Alive
Proxy-Authorization: Basic Y2hhc29uZDpkeGM2NzUxNzch

---request end---
Proxy request sent, awaiting response...
---response begin---
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: NTLM
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Proxy-Connection: close
Set-Cookie: BCSI-CS87FB2110=2; Path=/
Connection: close
Content-Length: 810

---response end---
407 Proxy Authentication Required

Stored cookie mirrors.163.com -1 (ANY) / <session> <insecure> [expiry none] BCSI-CS87FB2110 2
URI content encoding = ‘utf-8’
Closed fd 3
2016-02-22 10:35:26 ERROR 407: Proxy Authentication Required.

PS: 为了绕过论坛发表ULR的限制，所有HTTP URL后面加了一个空格

jixuuse

提示就是代理验证失败，配置代理请加上账号密码

dxcheng

回复 2# jixuuse


已经加进去了，

# export http_proxy=http:// 135.251.33.16:8080/
# wget -d -v http:// mirrors.163.com/.help/CentOS6-Base-163.repo --proxy-user test --proxy-password test2016

而且这样也是不行的：

# export http_proxy=http:// test:test2016@135.251.33.16:8080/
# wget -d -v http:// mirrors.163.com/.help/CentOS6-Base-163.repo

PS：注意到HTTP的response中有这么一句，不知道和这个有关吗？

---response begin---
HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: NTLM
Cache-Control: no-cache

lyhabc

Proxy-Authenticate: NTLM 就是本地认证吧

dxcheng

回复 4# lyhabc

Thanks，网上搜索了一些资料，和大家一起学习下。

NTLM是一种身份认证协议，这种协议适用于Window操作系统。和他相对应的协议有Basic 和 Digest（wget的man help里面看到的）

--http-password=password
           Specify the username user and password password on an HTTP
           server.  According to the type of the challenge, Wget will encode
           them using either the "basic" (insecure), the "digest", or the
           Windows "NTLM" authentication scheme.

wget仅支持Basic方式的身份认证协议，因此会出现Proxy Authentication Required

       --proxy-user=user
       --proxy-password=password
           Specify the username user and password password for
           authentication on a proxy server.  Wget will encode them using
           the "basic" authentication scheme.

           Security considerations similar to those with --http-password
           pertain here as well.

解决方案：
使用NTLMAPS搭建一个本地代理服务器，实现认证协议的转换。
具体参考如下：
Web Browsing Behind ISA Server HOWTO
Linux下通过Windows的ISA代理认证上网

PS：Firefox 内部实现了认证协议的支持，所以Firefox没有这个问题。

chenyx

感谢楼主分享