ArcEarth 1.4 does not appear to support NTLM proxy authentication, which is an issue which we encountered with previous versions as well. After launching AE on a computer with correctly configured system level internet options, two error messages appear:
"Failed to use proxy: the credentials are invalid Unable to connect to the remote server"
"The Remote server returned an error (407) Proxy Authentication Required"
Manually configuring the correct proxy server (using IP or hostname), username (with and without domain suffix) and password results in the same errors. Overwriting the config.xml file in the AppData/Roaming folder or the Program Files/ArcGIS/Earth/Bin folders does not change the outcome.
The sign-on window for ArcGIS online loads and is able to navigate the proxy, but it appears to use Internet Explorer so that's not surprising. ArcEarth itself does not login, displaying the two errors listed above after "Sign In" is clicked.
Analysis of packet traffic suggests that ArcEarth might not be correctly responding to the proxy server's notification that NTLM is required. Compare the packet traffic shown below:
ESRI tech support referred us to this forum for assistance, we'd love to get this application working in our organization.
Hi Dan May,
ArcGIS Earth 1.4 or older version do not support ntlm proxy authentication. We will support it in the following version.
We will feel grateful if you can provide any test data.
thanks a lot,
Shengtao
Shengtao Ding, I'd be happy to provide any additional data or application testing that might be helpful in resolving this issue. Feel free to contact me at dan.may@deq.idaho.gov
Hi Dan,
ArcGIS Earth V1.5 has been released, you can get it from ArcGIS Earth | ArcGIS. Could you help to check whether your issue has been fixed with the V1.5?
Thanks,
Xuewen
Hi Xuewen,
The issue with using local windows credentials to get through a proxy server does not appear to be resolved in version 1.5
The following steps were taken:
Our proxy server logging indicates that attempts are being made to contact it, and when incorrect passwords are entered in the config, no bad password attempts are logged. Examination of Wireshark packet logging indicates that the problem documented in the original post still exists, when the proxy server responds with 407 proxy authentication required, ArcEarth retries the connection without the NTLMSSP_NEGOTIATE flag.
I realize that our environment may be hard to replicate, so we're more than happy to run builds with additional logging or test experimental builds to provide feedback.please contact me directly at the email above with developments.
Apologies, when it says "Our proxy server logging indicates that attempts are being made to contact it," it should say "Our proxy server logging indicates that no attempts are being made to contact it,"
Hello @DanMay ,
With support from our developers, Earth supported NLTM proxy authentication in the latest V1.17 release. Please have a try and get back to us if you need any more assistance.
Thank you and happy New Year!
Bing‘An