From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Thomas Fitzsimmons Newsgroups: gmane.emacs.bugs Subject: bug#43566: 27.1; url-http and excorporate does not authenticate Date: Fri, 04 Dec 2020 18:29:20 -0500 Message-ID: References: <87tuvqxdl8.fsf@menzobaran.matesco.unican.es> <874knnw66a.fsf@gnus.org> <877dsi9jd1.fsf@menzobaran.matesco.unican.es> <87v9g2ozh1.fsf@gnus.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="35572"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1.50 (gnu/linux) Cc: William Xu , 43566@debbugs.gnu.org, Jeffrey Haug , Domingo =?UTF-8?Q?G=C3=B3mez_?= =?UTF-8?Q?P=C3=A9rez?= To: Lars Ingebrigtsen Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Sat Dec 05 00:30:15 2020 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1klKWj-00098b-Oz for geb-bug-gnu-emacs@m.gmane-mx.org; Sat, 05 Dec 2020 00:30:13 +0100 Original-Received: from localhost ([::1]:48146 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1klKWi-0002IS-9e for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 04 Dec 2020 18:30:12 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:56080) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1klKWZ-0002I8-7A for bug-gnu-emacs@gnu.org; Fri, 04 Dec 2020 18:30:03 -0500 Original-Received: from debbugs.gnu.org ([209.51.188.43]:34608) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1klKWY-0003SO-W0 for bug-gnu-emacs@gnu.org; Fri, 04 Dec 2020 18:30:03 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1klKWY-0008Ow-Pp for bug-gnu-emacs@gnu.org; Fri, 04 Dec 2020 18:30:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Thomas Fitzsimmons Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 04 Dec 2020 23:30:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 43566 X-GNU-PR-Package: emacs Original-Received: via spool by 43566-submit@debbugs.gnu.org id=B43566.160712457232235 (code B ref 43566); Fri, 04 Dec 2020 23:30:02 +0000 Original-Received: (at 43566) by debbugs.gnu.org; 4 Dec 2020 23:29:32 +0000 Original-Received: from localhost ([127.0.0.1]:46154 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klKW3-0008Nq-UH for submit@debbugs.gnu.org; Fri, 04 Dec 2020 18:29:32 -0500 Original-Received: from mail-qk1-f171.google.com ([209.85.222.171]:35073) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klKW0-0008Nb-7J for 43566@debbugs.gnu.org; Fri, 04 Dec 2020 18:29:31 -0500 Original-Received: by mail-qk1-f171.google.com with SMTP id v143so7182144qkb.2 for <43566@debbugs.gnu.org>; Fri, 04 Dec 2020 15:29:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fitzsim-org.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=Z+c/eQYtKNN0xYWX2WHifk3wKscHyytdPTc96Iw9V5k=; b=MrXyyIx/tE+4lvmF/gMMROCveqgOitmPamOcrElLZuWszvwLGdkWgpxdmkMAhpgPia 8Xwv66YXdOe0fI2d0LnN6BSUPpHCTrimqp9pJY6zet5jMnTqb66t0IQXvSiPdUFUKu3N JQvvcXzvB9q6bEPN+qhmZIpWAFbBRg9/N9cCtBy7zRlkGQat8x4GlUZYQfRkuOrZGDRb 2w4drBeV1Lsyee7Bvsv2RiA0xz0DA0pZKYlZN3l//5bVLoEoLeYzfn/o5ma8H6nyr9ar vOT/ebBTd4d2bcnZ4tb13FOt5vbPT9pfQIdVYxpSRq8PLdouMhZVg9UhQIHgGSb78k0a zYwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=Z+c/eQYtKNN0xYWX2WHifk3wKscHyytdPTc96Iw9V5k=; b=GMWKeROidcO9njcDdXsPWdNV+rVKNaN9JurOF8uBEfQ3EEmfIBpkKfBFrQcc21RZ7E eQ+YaNjFpB/crj88trY+iC7xIifVYCvkHsKRWwxBqPqCC+e2+c2TIhKgAZnSvHKdh8QG SU/vAEgMHbbKuSU+btcK4NQweE5agxnq3kyw5Q493SAUvjYeE1PXQiGYl7uA1Ko1OhHa j55ThsIa3FtB52T0jraNWJDyobVQ9bh2XIfXqbExDHk5zqBv/z4RQdQZ3TwUieqJxNdi 05BmO2eyICZuEulvLpsXMgLuVXbmf9KPkwCJAmCFmNHVQ2bJ86Vr6Fpa2nJYBNF+XbKD +qUA== X-Gm-Message-State: AOAM5314uS7aKOUzHGYj4voBaU6d7cpnu2787Fd9bBnf4Kc9S+YAqUcH 6H4wolvWrAcAHdz6U+RfPqieJA== X-Google-Smtp-Source: ABdhPJwOI86aQi4KvxSfQUXAcipUEWomCmwEQD7clpthUKedIr3dbAb6SKIvBVEDXsEhjHC8RvBoMw== X-Received: by 2002:a05:620a:1265:: with SMTP id b5mr12077957qkl.27.1607124562585; Fri, 04 Dec 2020 15:29:22 -0800 (PST) Original-Received: from localhost.localdomain (69-165-165-189.dsl.teksavvy.com. [69.165.165.189]) by smtp.gmail.com with ESMTPSA id i203sm6618359qke.49.2020.12.04.15.29.21 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 04 Dec 2020 15:29:21 -0800 (PST) In-Reply-To: <87v9g2ozh1.fsf@gnus.org> (Lars Ingebrigtsen's message of "Fri, 25 Sep 2020 13:41:30 +0200") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:195015 Archived-At: Hi, Lars Ingebrigtsen writes: > Domingo G=C3=B3mez P=C3=A9rez writes: > >>> Is wget using NTLM authentication, though? And how have you set up >>> url.el to use NTLM? >> >> Dear Lars Ingebrigtsen, >> >> First of all, thanks for your time and help. >> >> I would say so, because in the terminal it reads "Autenticaci=C3=B3n >> seleccionada: NTLM" (sorry, it is in spanish but I think the meaning is = clear). > > Thanks for checking. > > I'm absolutely completely unfamiliar with NTLM (I assume that's a > Windows-only thing?), so somebody else will have to try debugging this. It turns out that this is a regression in Emacs 27.1 introduced by the fix for bug 27022: https://debbugs.gnu.org/27022 The NTLM protocol requires a three step handshake with the server, where handshake information is passed from the client to the server via Authorization headers. I'm not sure if the 27022 scenario would result in url-http-ntlm inflooping too; if it would, then the obvious fix-of-the-fix would probably be wrong (i.e., to disable the check when NTLM is present in the authorization string). It also turns out that another user found the regression and filed a bug report with a workaround a month ago: https://debbugs.gnu.org/44439 (From now on I'll search for "excorporate" using debbugs-gnu-search instead of just scanning subject lines.) I've merged bug#44439 and another report of the same problem, bug#44195, into this one. I no longer use the NTLM mode myself, but I did manage to independently figure out the issue by implementing an NTLM server in elisp. I'm going to add it to the test suite, since otherwise it's not feasible for Emacs maintainers to test ntlm.el properly (which is what happened in Emacs 27.1). I can test inflooping against it too once I have the changes ready. Thomas