Bug 1784794

+++ This bug was initially created as a clone of Bug #1337796 +++

Description of problem:
wget couldn't support NTLM proxy, but curl support it with paramener --proxy-ntlm


$ curl -V
curl 7.29.0 (x86_64-redhat-linux-gnu) libcurl/7.29.0 NSS/3.19.1 Basic ECC zlib/1.2.7 libidn/1.28 libssh2/1.4.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp 
Features: AsynchDNS GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz 



$ wget -V
GNU Wget 1.14 built on linux-gnu.

+digest +https +ipv6 +iri +large-file +nls +ntlm +opie +ssl/openssl 

Wgetrc: 
    /etc/wgetrc (system)
Locale: /usr/share/locale 
Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc" 
    -DLOCALEDIR="/usr/share/locale" -I. -I../lib -I../lib -O2 -g -pipe 
    -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong 
    --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic 
Link: gcc -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions 
    -fstack-protector-strong --param=ssp-buffer-size=4 
    -grecord-gcc-switches -m64 -mtune=generic -lssl -lcrypto 
    /usr/lib64/libssl.so /usr/lib64/libcrypto.so /usr/lib64/libz.so 
    -ldl -lz -lz -lidn -luuid -lpcre ftp-opie.o openssl.o http-ntlm.o 
    ../lib/libgnu.a 

Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://www.gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Originally written by Hrvoje Niksic <hniksic>.
Please send bug reports and questions to <bug-wget>.


# wget -v http://rpms.remirepo.net/enterprise/remi-release-7.rpm
--2016-05-20 11:37:41--  http://rpms.remirepo.net/enterprise/remi-release-7.rpm
Connecting to 172.18.4.7:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.  )
2016-05-20 11:37:41 ERROR 407: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.  ).


# curl -v --proxy-ntlm -I http://rpms.remirepo.net/enterprise/remi-release-7.rpm
* About to connect() to proxy 172.18.4.7 port 8080 (#0)
*   Trying 172.18.4.7...
* Connected to 172.18.4.7 (172.18.4.7) port 8080 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* Proxy auth using NTLM with user 'edvglu'
> HEAD http://rpms.remirepo.net/enterprise/remi-release-7.rpm HTTP/1.1
> Proxy-Authorization: NTLM TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA=
> User-Agent: curl/7.29.0
> Host: rpms.remirepo.net
> Accept: */*
> Proxy-Connection: Keep-Alive
> 
< HTTP/1.1 407 Proxy Authentication Required ( Access is denied.  )
HTTP/1.1 407 Proxy Authentication Required ( Access is denied.  )
< Via:1.1 ISAEG
Via:1.1 ISAEG
< Proxy-Authenticate: NTLM TlRMTVNTUAACAAAADgAOADgAAAAGgokCXLtediV72KUAAAAAAAAAAKwArABGAAAABQLODgAAAA9FQVNULUtST05PU1BBTgIAHABFAEEAUwBUAC0ASwBSAE8ATgBPAFMAUABBAE4AAQAKAEkAUwBBAEUARwAEACQAZQBhAHMAdAAuAGsAcgBvAG4AbwBzAHAAYQBuAC4AaQBuAHQAAwAwAGkAcwBhAGUAZwAuAGUAYQBzAHQALgBrAHIAbwBuAG8AcwBwAGEAbgAuAGkAbgB0AAUAGgBrAHIAbwBuAG8AcwBwAGEAbgAuAGkAbgB0AAAAAAA=
Proxy-Authenticate: NTLM TlRMTVNTUAACAAAADgAOADgAAAAGgokCXLtediV72KUAAAAAAAAAAKwArABGAAAABQLODgAAAA9FQVNULUtST05PU1BBTgIAHABFAEEAUwBUAC0ASwBSAE8ATgBPAFMAUABBAE4AAQAKAEkAUwBBAEUARwAEACQAZQBhAHMAdAAuAGsAcgBvAG4AbwBzAHAAYQBuAC4AaQBuAHQAAwAwAGkAcwBhAGUAZwAuAGUAYQBzAHQALgBrAHIAbwBuAG8AcwBwAGEAbgAuAGkAbgB0AAUAGgBrAHIAbwBuAG8AcwBwAGEAbgAuAGkAbgB0AAAAAAA=
< Pragma: no-cache
Pragma: no-cache
< Cache-Control: no-cache
Cache-Control: no-cache
< Content-Type: text/html
Content-Type: text/html
< Content-Length: 0     
Content-Length: 0     

< 
* Connection #0 to host 172.18.4.7 left intact
* Issue another request to this URL: 'http://rpms.remirepo.net/enterprise/remi-release-7.rpm'
* Found bundle for host rpms.remirepo.net: 0x154be90
* Re-using existing connection! (#0) with host 172.18.4.7
* Connected to 172.18.4.7 (172.18.4.7) port 8080 (#0)
* Proxy auth using NTLM with user 'edvglu'
> HEAD http://rpms.remirepo.net/enterprise/remi-release-7.rpm HTTP/1.1
> Proxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAAAAAAABwAAAABgAGAHAAAAAJAAkAdgAAAAAAAAAAAAAABoKJAkblnXYcrg/BAAAAAAAAAAAAAAAAAAAAAF64tdRktf5NEf722Jvel8SnzH0EDfgk2GVkdmdsdWxvY2FsaG9zdA==
> User-Agent: curl/7.29.0
> Host: rpms.remirepo.net
> Accept: */*
> Proxy-Connection: Keep-Alive
> 
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Via: 1.1 ISAEG
Via: 1.1 ISAEG
< Content-Length: 7611
Content-Length: 7611
< Date: Fri, 20 May 2016 05:38:29 GMT
Date: Fri, 20 May 2016 05:38:29 GMT
< Content-Type: application/x-rpm
Content-Type: application/x-rpm
< Server: Apache/2.2.15 (CentOS)
Server: Apache/2.2.15 (CentOS)
< Last-Modified: Wed, 09 Dec 2015 09:15:19 GMT
Last-Modified: Wed, 09 Dec 2015 09:15:19 GMT
< ETag: "d82bb3-1dbb-52673877157c0"
ETag: "d82bb3-1dbb-52673877157c0"
< Accept-Ranges: bytes
Accept-Ranges: bytes

< 
* Connection #0 to host 172.18.4.7 left intact

--- Additional comment from Mikhail on 2016-05-20 11:34:08 CEST ---

$ export

declare -x http_proxy="http://east-kronospan\\edvglu:niva4x4\$\$\$@172.18.4.7:8080"
declare -x https_proxy="http://east-kronospan\\edvglu:niva4x4\$\$\$@172.18.4.7:8080"

--- Additional comment from Tomáš Hozza on 2016-05-20 16:08:55 CEST ---

From the man page:

       --http-user=user
       --http-password=password
           Specify the username user and password password on an HTTP server.  According to the type of the challenge, Wget will encode them using either the "basic"
           (insecure), the "digest", or the Windows "NTLM" authentication scheme.

           Another way to specify username and password is in the URL itself.  Either method reveals your password to anyone who bothers to run "ps".  To prevent the
           passwords from being seen, store them in .wgetrc or .netrc, and make sure to protect those files from other users with "chmod".  If the passwords are really
           important, do not leave them lying in those files either---edit the files and delete them after Wget has started the download.


This means you should use --http-user and --http-password to specify the credentials for the proxy.

The http{,s}_proxy environment variables are used for getting the proxy URL, but not the username and password.

Please retest with the --http-user and --http-password options

--- Additional comment from Mikhail on 2016-05-21 12:09:33 CEST ---

You don't tell me about escape characters so I don't know how here correct write '\' and '$' symbols.  so I tried both variants:

[root@sinuf1 synergy]# wget -v --http-user=east-kronospan\\edvglu --http-password=niva4x4\$\$\$ http://rpms.remirepo.net/enterprise/remi-release-7.rpm
--2016-05-21 15:58:05--  http://rpms.remirepo.net/enterprise/remi-release-7.rpm
Connecting to 172.18.4.7:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.  )
2016-05-21 15:58:05 ERROR 407: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.  ).

[root@sinuf1 synergy]# wget -v --http-user=east-kronospan\edvglu --http-password=niva4x4$$$ http://rpms.remirepo.net/enterprise/remi-release-7.rpm
--2016-05-21 15:58:54--  http://rpms.remirepo.net/enterprise/remi-release-7.rpm
Connecting to 172.18.4.7:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.  )
2016-05-21 15:58:54 ERROR 407: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.  ).

As you see this is also not work for me.

--- Additional comment from Mikhail on 2016-05-21 12:15:22 CEST ---

And also I try store password in wgetrc file without success too