Cha Gascon Inexplicable Software Angst

Can’t Bypass Evil Microsoft ISA2 Authentication in Linux

I am behind a corporate firewall since I use my dad's office dialup internet account. It uses Negotiate for proxy authentication meaning, it will primarily use Kerberos but may fall back to NTLM.

I'm okay with it since I can surf the internet and check my email. Mozilla and Firefox supports the proxy authentication mode. Konqueror doesn't. And I use wget to manage my downloads since I can perfectly resume from it. Wget (with GUI interface kget) does better what Firefox's crappy download manager does. I resumes downloads even when you get disconnected or when you shut off your computer!

Problem is, I can't bypass the friggin proxy authentication! Drat. I'm almost in despair. I've tried the NTLM Authorization Proxy Server (APS) by Dimitry Rozmanov but it doesn't work for me. I suspect that it doesn't support Negotiate/Kerberos in the first place and the evil corporate proxy server won't let it through with bare NTLM authentication.

Or maybe the proxy server got smarter over the years because after all, the last update on the APS Python script was December 2002!

Here's how Mozilla and Firefox does it (using GSS-API). Even IE 6 (bwahahaha!) and Opera can't.