Jed Sheckler
2008-07-20 07:54:58 UTC
I am trying to connect to my office's OpenVPN server from behind a client
proxy. I have never tried to connect via a proxy before, so I am not sure
if I am doing something wrong, or this is just not possible.
The relevant lines in my client config file are:
proto tcp
http-proxy 10.55.3.133 8080 "C:\\Program
Files\\OpenVPN\\config\\proxy_auth.txt"
http-proxy-retry
where proxy_auth.txt contains the username and password required to connect
to the proxy.
The relevant lines from the log after failing to connect are:
Sun Jul 20 09:43:00 2008 us=31000 Attempting to establish TCP connection
with 10.55.3.133:8080
Sun Jul 20 09:43:00 2008 us=765000 TCP connection established with
10.55.3.133:8080
Sun Jul 20 09:43:00 2008 us=765000 Send to HTTP proxy: 'CONNECT
openvpn.xxxxx.com:443 HTTP/1.0'
Sun Jul 20 09:43:00 2008 us=765000 Attempting Basic Proxy-Authorization
Sun Jul 20 09:43:00 2008 us=765000 Send to HTTP proxy: 'Proxy-Authorization:
Basic Y3B0bFx0b3RhbDp0b3RhbDIwMDg='
Sun Jul 20 09:43:04 2008 us=156000 HTTP proxy returned: 'HTTP/1.1 407 Proxy
Authentication Required ( The ISA Server requires authorization to fulfill
the request. Access to the Web Proxy service is denied. )'
Sun Jul 20 09:43:04 2008 us=156000 Proxy requires authentication
Using NTLM authentication the result is similar:
Sun Jul 20 09:49:59 2008 us=515000 Attempting to establish TCP connection
with 10.55.3.133:8080
Sun Jul 20 09:50:00 2008 us=296000 TCP connection established with
10.55.3.133:8080
Sun Jul 20 09:50:00 2008 us=296000 Send to HTTP proxy: 'CONNECT
openvpn.xxxxxx.com:443 HTTP/1.0'
Sun Jul 20 09:50:00 2008 us=296000 Attempting NTLM Proxy-Authorization phase
1
Sun Jul 20 09:50:00 2008 us=296000 Send to HTTP proxy: 'Proxy-Authorization:
NTLM TlRMTVNTUAABAAAAAgIAAA=='
Sun Jul 20 09:50:03 2008 us=984000 HTTP proxy returned: 'HTTP/1.1 407 Proxy
Authentication Required ( Access is denied. )'
Sun Jul 20 09:50:03 2008 us=984000 Proxy requires authentication
Sun Jul 20 09:50:04 2008 HTTP proxy returned: 'Via:1.1 ISAPROXY'
Sun Jul 20 09:50:04 2008 HTTP proxy returned: 'Proxy-Authenticate: NTLM
TlRMTVNTUAACAAAAAAAAADgAAAACAgAC39062OdRBIkAAAAAAAAAAAAAAAA4AAAABQCTCAAAAA8='
Sun Jul 20 09:50:04 2008 auth string:
'TlRMTVNTUAACAAAAAAAAADgAAAACAgAC39062OdRBIkAAAAAAAAAAAAAAAA4AAAABQCTCAAAAA8='
Sun Jul 20 09:50:04 2008 Received NTLM Proxy-Authorization phase 2 response
Sun Jul 20 09:50:09 2008 us=15000 recv_line: TCP port read timeout expired
Sun Jul 20 09:50:09 2008 us=15000 Send to HTTP proxy: 'CONNECT
openvpn.xxxxx.com:443 HTTP/1.0'
Sun Jul 20 09:50:10 2008 us=15000 Send to HTTP proxy: 'Host:
openvpn.xxxxxx.com'
Sun Jul 20 09:50:10 2008 us=15000 Attempting NTLM Proxy-Authorization phase
3
Sun Jul 20 09:50:10 2008 us=15000 Send to HTTP proxy: 'Proxy-Authorization:
NTLM
TlRMTVNTUAADAAAAAAAAAGIAAAAYABgAQAAAAAAAAABiAAAACgAKAFgAAAAAAAAAYgAAAAAAAABiAAAAAgIAANkUD8qhN4awbE5PG6PdufZwDpTPk1jhMGNwdGxcdG90YWw='
Sun Jul 20 09:50:12 2008 us=796000 HTTP proxy returned: 'HTTP/1.1 407 Proxy
Authentication Required ( The ISA Server requires authorization to fulfill
the request. Access to the Web Proxy service is denied. )'
Sun Jul 20 09:50:12 2008 us=796000 HTTP proxy returned bad status
Any assistance would be appreciated.
Jed
proxy. I have never tried to connect via a proxy before, so I am not sure
if I am doing something wrong, or this is just not possible.
The relevant lines in my client config file are:
proto tcp
http-proxy 10.55.3.133 8080 "C:\\Program
Files\\OpenVPN\\config\\proxy_auth.txt"
http-proxy-retry
where proxy_auth.txt contains the username and password required to connect
to the proxy.
The relevant lines from the log after failing to connect are:
Sun Jul 20 09:43:00 2008 us=31000 Attempting to establish TCP connection
with 10.55.3.133:8080
Sun Jul 20 09:43:00 2008 us=765000 TCP connection established with
10.55.3.133:8080
Sun Jul 20 09:43:00 2008 us=765000 Send to HTTP proxy: 'CONNECT
openvpn.xxxxx.com:443 HTTP/1.0'
Sun Jul 20 09:43:00 2008 us=765000 Attempting Basic Proxy-Authorization
Sun Jul 20 09:43:00 2008 us=765000 Send to HTTP proxy: 'Proxy-Authorization:
Basic Y3B0bFx0b3RhbDp0b3RhbDIwMDg='
Sun Jul 20 09:43:04 2008 us=156000 HTTP proxy returned: 'HTTP/1.1 407 Proxy
Authentication Required ( The ISA Server requires authorization to fulfill
the request. Access to the Web Proxy service is denied. )'
Sun Jul 20 09:43:04 2008 us=156000 Proxy requires authentication
Using NTLM authentication the result is similar:
Sun Jul 20 09:49:59 2008 us=515000 Attempting to establish TCP connection
with 10.55.3.133:8080
Sun Jul 20 09:50:00 2008 us=296000 TCP connection established with
10.55.3.133:8080
Sun Jul 20 09:50:00 2008 us=296000 Send to HTTP proxy: 'CONNECT
openvpn.xxxxxx.com:443 HTTP/1.0'
Sun Jul 20 09:50:00 2008 us=296000 Attempting NTLM Proxy-Authorization phase
1
Sun Jul 20 09:50:00 2008 us=296000 Send to HTTP proxy: 'Proxy-Authorization:
NTLM TlRMTVNTUAABAAAAAgIAAA=='
Sun Jul 20 09:50:03 2008 us=984000 HTTP proxy returned: 'HTTP/1.1 407 Proxy
Authentication Required ( Access is denied. )'
Sun Jul 20 09:50:03 2008 us=984000 Proxy requires authentication
Sun Jul 20 09:50:04 2008 HTTP proxy returned: 'Via:1.1 ISAPROXY'
Sun Jul 20 09:50:04 2008 HTTP proxy returned: 'Proxy-Authenticate: NTLM
TlRMTVNTUAACAAAAAAAAADgAAAACAgAC39062OdRBIkAAAAAAAAAAAAAAAA4AAAABQCTCAAAAA8='
Sun Jul 20 09:50:04 2008 auth string:
'TlRMTVNTUAACAAAAAAAAADgAAAACAgAC39062OdRBIkAAAAAAAAAAAAAAAA4AAAABQCTCAAAAA8='
Sun Jul 20 09:50:04 2008 Received NTLM Proxy-Authorization phase 2 response
Sun Jul 20 09:50:09 2008 us=15000 recv_line: TCP port read timeout expired
Sun Jul 20 09:50:09 2008 us=15000 Send to HTTP proxy: 'CONNECT
openvpn.xxxxx.com:443 HTTP/1.0'
Sun Jul 20 09:50:10 2008 us=15000 Send to HTTP proxy: 'Host:
openvpn.xxxxxx.com'
Sun Jul 20 09:50:10 2008 us=15000 Attempting NTLM Proxy-Authorization phase
3
Sun Jul 20 09:50:10 2008 us=15000 Send to HTTP proxy: 'Proxy-Authorization:
NTLM
TlRMTVNTUAADAAAAAAAAAGIAAAAYABgAQAAAAAAAAABiAAAACgAKAFgAAAAAAAAAYgAAAAAAAABiAAAAAgIAANkUD8qhN4awbE5PG6PdufZwDpTPk1jhMGNwdGxcdG90YWw='
Sun Jul 20 09:50:12 2008 us=796000 HTTP proxy returned: 'HTTP/1.1 407 Proxy
Authentication Required ( The ISA Server requires authorization to fulfill
the request. Access to the Web Proxy service is denied. )'
Sun Jul 20 09:50:12 2008 us=796000 HTTP proxy returned bad status
Any assistance would be appreciated.
Jed