Debian Package a Day ([info]debaday) wrote,
@ 2004-09-17 09:25:00
Previous Entry  Add to memories!  Tell a Friend!  Next Entry
ntlmaps - NTLM Authorization Proxy Server
'NTLM Authorization Proxy Server' (APS) is a proxy software that allows you to authenticate via an MS Proxy Server (e.g. ISA server) using the proprietary NTLM protocol. Since version 0.9.5 APS has an ability to behave as a standalone proxy server and authenticate http clients at web servers using NTLM method. It can change arbitrary values in your client's request header so that those requests will look like they were created by MS IE. It is written in Python v1.5.2 language.

Main features:
  • supports NTLM authentication via parent proxy server (Error 407 Proxy Authentication Required)

  • supports NTLM authentication at web servers (Error 401 Access Denied/Unauthorized)

  • supports translation of NTLM scheme to standard "Basic" authentication scheme

  • supports the HTTPS 'CONNECT' method for transparent tunnelling through parent proxy server

  • has ability to change arbitrary values in client's request headers;

  • supports unlimited number of client connections

  • supports connections from external hosts

  • supports HTTP 1.1 persistent connections

  • stores user's credentials in config file or requests password from a console during the start time

More from Robert Waldner:
Ever been behind a proxy that only lets you out if you can authenticate via NTLM? Yeah, your browser probably can do that, but what about wget, apt-get, lynx, ftp? Here's ntlmaps for you, just point your $http_proxy to localhost, and it'll transparently handle all the auth stuff for you. And it'll also do that for your other Debian machines on the LAN. (If you're a bastard, you could also tunnel an ssh session through https through ntlmaps, and get transparent ssh-access to your outside machines even if the firewall wouldn't permit that normally. Well, that's what I use it for, usually. If you're a real BOFH, you'll port-forward to your own proxy through that ssh-session, and bypass all the URL-filtering, logging and other restrictions that would be in place behind that firewall. Of course, you could also run something like vtun or OpenVPN through ssh, and get complete IP-connectivity. BTDT.)

More information on this package can be found on the Debian web site.
(If there is a package you would like to see featured here, go to the userinfo page and follow the directions there to submit your entry.)

Now available in RSS and ATOM flavors too.

(Post a new comment)

tunnel an ssh session through https
(Anonymous)
2004-10-12 05:45 am UTC (link)
Sounds great, but what most caught my attention is the note 
  you could also tunnel an ssh session through https through ntlmaps,
  and get transparent ssh-access  to your outside machines even if the
  firewall wouldn't permit that normally.
This is exactly my case! I've got http and https access through a proxy (squid) but no ssh *sigh*.
Anyone can point me to some info on how I can tunnel ssh through the http(s) proxy?
(The URL in the readme (http://cqs.dyndns.org/socks) seems to be dead.)

Thanks a lot!
Andy.

(Reply to this)(Thread)
Re: tunnel an ssh session through https
(Anonymous)
2004-11-25 09:30 am UTC (link)
You need sconnect (a.k.a. 'connect.c') and the ProxyCommand statement in your ~/.ssh/config file.

(Reply to this)(Parent)

Create an Account
Forgot your login?
Login w/ OpenID
English • Español • Deutsch • Русский…