wingate 8 as socks5 proxy with authentication

[ajaynalawade]

Hi,

I am trying to setup wingate 8 as socks5 proxy with kerberos authentication (active directory user credentials).
Does wingate support socks5 proxy with kerberos authentication.
If it does, what are steps for setting up same.

I am able to setup HTTP proxy with kerberos authentication. But facing issue with socks5 proxy.

Thanks,
Ajay

[adrien]

Hi

we tested GSSAPI (Kerberos) auth with SOCKS5 using the OpenText SOCKS client and got it working fine - which client are you testing with?

Regards

Adrien de Croy

[ajaynalawade]

I have my own script, which tries to make connection through socks proxy.

I am interested in steps to setup socks proxy authentication with active directory with wingate.

Thanks,
Ajay

[adrien]

HI

you'll need to follow the protocol specification. Authentication phase always occurs prior to making any connection request. The client and server must agree on authentication method at this stage. It's not possible to have optional authentication after connection request.

look at

RFC 1928 SOCKS Protocol Version 5
RFC 1961 - GSS-API Authentication Method for SOCKS Version 5

regards

Adrien de Croy

[ajaynalawade]

My quiestion is different.
I am able to setup http proxy with active directory auth.
When I tried to do same for socks5 proxy, with my script, when I make request without authentication, authentication method returned is 0xFF, which should be 0x01 (for kerberos)
So I think there is some issue in my socks5 proxy configuration.

I want to know steps to configure wingate 8, socks5 proxy with active directory (kerberos) auth.

Thanks,
Ajay

[adrien]

0xFF means no acceptable (to the server) methods as per RFC 1928.

Do you have "Require authentication" set to true in the SOCKS service? GSSAPI is only available when using the AD connector as the selected User Database Provider.

Adrien

[ajaynalawade]

Thanks Adrien for the reply.
I think I am able to setup socks proxy with AD auth.
I am able to get 0x01 as auth method in server response.

Thanks,
Ajay