[JENKINS-12914] JDK Installer fails to download when using NTLM proxy with credentials

[timja]

When attempting to download a JDK with an NTLM proxy configured in settings, the following error occurs:

SEVERE: Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials
org.apache.commons.httpclient.auth.InvalidCredentialsException: Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials
at org.apache.commons.httpclient.auth.NTLMScheme.authenticate(NTLMScheme.java:332)
at org.apache.commons.httpclient.HttpMethodDirector.authenticateProxy(HttpMethodDirector.java:320)
at org.apache.commons.httpclient.HttpMethodDirector.authenticate(HttpMethodDirector.java:232)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
at hudson.tools.JDKInstaller.locate(JDKInstaller.java:379)
at hudson.tools.JDKInstaller.performInstallation(JDKInstaller.java:124)
at hudson.tools.InstallerTranslator.getToolHome(InstallerTranslator.java:61)
at hudson.tools.ToolLocationNodeProperty.getToolHome(ToolLocationNodeProperty.java:107)
at hudson.tools.ToolInstallation.translateFor(ToolInstallation.java:150)
at hudson.model.JDK.forNode(JDK.java:112)
at hudson.model.AbstractBuild.getEnvironment(AbstractBuild.java:842)
at hudson.maven.AbstractMavenBuild.getEnvironment(AbstractMavenBuild.java:59)
at hudson.maven.MavenModuleSetBuild.getEnvironment(MavenModuleSetBuild.java:156)
at hudson.maven.MavenModuleSetBuild$RunnerImpl.doRun(MavenModuleSetBuild.java:572)
at hudson.model.AbstractBuild$AbstractRunner.run(AbstractBuild.java:473)
at hudson.model.Run.run(Run.java:1408)
at hudson.maven.MavenModuleSetBuild.run(MavenModuleSetBuild.java:481)
at hudson.model.ResourceController.execute(ResourceController.java:88)
at hudson.model.Executor.run(Executor.java:238)

The proxy settings definitely work in other parts of Jenkins, as plugins can be downloaded installed through it. Username/password is specified as part of proxy settings.

---

Originally reported by runpet, imported from: JDK Installer fails to download when using NTLM proxy with credentials

• status: Reopened
• priority: Minor
• resolution: Unresolved
• imported: 2022/01/10

[timja]

evernat:

Is it reproduced with a recent Jenkins version?

[timja]

prunge:

I no longer have the same NTLM-proxied environment for testing this, sorry.

[timja]

evernat:

ok, I have resolved the issue as incomplete, as we both can not know if it is still an issue.
Please reopen if the issue is reproduced.

[timja]

alecharp:

Hello,

I do have the same issue in Jenkins 1.580.3.

Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials 
org.apache.commons.httpclient.auth.InvalidCredentialsException: Credentials cannot be used for NTLM authentication: org.apache.commons.httpclient.UsernamePasswordCredentials 
at org.apache.commons.httpclient.auth.NTLMScheme.authenticate(NTLMScheme.java:332) 
at org.apache.commons.httpclient.HttpMethodDirector.authenticateProxy(HttpMethodDirector.java:320) 
at org.apache.commons.httpclient.HttpMethodDirector.executeConnect(HttpMethodDirector.java:491) 
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:391) 
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171) 
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) 
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323) 
at hudson.tools.JDKInstaller.locate(JDKInstaller.java:411) 
at hudson.tools.JDKInstaller.performInstallation(JDKInstaller.java:134) 
at hudson.tools.InstallerTranslator.getToolHome(InstallerTranslator.java:68) 
at hudson.tools.ToolLocationNodeProperty.getToolHome(ToolLocationNodeProperty.java:107) 
at hudson.tools.ToolInstallation.translateFor(ToolInstallation.java:205) 
at hudson.model.JDK.forNode(JDK.java:130) 
at hudson.model.AbstractProject.getEnvironment(AbstractProject.java:350) 
at hudson.model.Run.getEnvironment(Run.java:2248) 
at hudson.model.AbstractBuild.getEnvironment(AbstractBuild.java:905) 
at hudson.model.Run.getEnvVars(Run.java:2212) 
at org.jenkinsci.plugins.buildenvironment.data.EnvVarsData.initializeDataMap(EnvVarsData.java:41) 
at org.jenkinsci.plugins.buildenvironment.data.EnvVarsData.(EnvVarsData.java:28) 
at org.jenkinsci.plugins.buildenvironment.actions.BuildEnvironmentBuildAction.addDataHolders(BuildEnvironmentBuildAction.java:521) 
at org.jenkinsci.plugins.buildenvironment.actions.BuildEnvironmentBuildAction.(BuildEnvironmentBuildAction.java:98) 
at org.jenkinsci.plugins.buildenvironment.data.EnvironmentDataWriter.onCompleted(EnvironmentDataWriter.java:24) 
at org.jenkinsci.plugins.buildenvironment.data.EnvironmentDataWriter.onCompleted(EnvironmentDataWriter.java:16) 
at hudson.model.listeners.RunListener.fireCompleted(RunListener.java:199) 
at hudson.model.Run.execute(Run.java:1796) 
at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) 
at hudson.model.ResourceController.execute(ResourceController.java:89) 
at hudson.model.Executor.run(Executor.java:240)

Apr 17, 2015 10:45:28 AM FINEST org.apache.commons.httpclient.HttpMethodDirector processAuthenticationResponse 
enter HttpMethodBase.processAuthenticationResponse(HttpState, HttpConnection) 
Apr 17, 2015 10:45:28 AM FINE org.apache.commons.httpclient.HttpMethodDirector processProxyAuthChallenge 
Proxy authentication scope: NTLM @XXXX:8080 
Apr 17, 2015 10:45:28 AM FINE org.apache.commons.httpclient.HttpMethodDirector promptForProxyCredentials 
Proxy credentials required 
Apr 17, 2015 10:45:28 AM FINE org.apache.commons.httpclient.HttpMethodDirector promptForProxyCredentials 
Proxy credentials provider not available 
Apr 17, 2015 10:45:28 AM INFO org.apache.commons.httpclient.HttpMethodDirector processProxyAuthChallenge 
Failure authenticating with NTLM @XXXX:8080 
Apr 17, 2015 10:45:28 AM FINE org.apache.commons.httpclient.HttpMethodDirector fakeResponse 
CONNECT failed, fake the response for the original method