Differences

This shows you the differences between the selected revisions of the page.

2022-04-07 2022-06-15
ui_authenticate#proxy (martin) update to putty 0.77 (martin)
Line 17: Line 17:
Selecting //SOCKS4// or //SOCKS5// allows you to proxy your connections through a SOCKS server. Selecting //SOCKS4// or //SOCKS5// allows you to proxy your connections through a SOCKS server.
-Many firewalls implement a less formal type of proxy in which a user can make a Telnet connection directly to the firewall machine and enter a command such as ''connect myhost.com 22'' to connect through to an external host. Selecting //Telnet// allows you to tell WinSCP to use this type of proxy. This type of proxy is not supported for [[FTP]], [[WebDAV]] and [[S3]] protocols.+Many firewalls implement a less formal type of proxy in which a user can make a Telnet or TCP connection directly to the firewall machine and enter a command such as ''connect myhost.com 22'' to connect through to an external host. Selecting //Telnet// allows you to tell WinSCP to use this type of proxy, with the [[#command|precise command specified]]. This type of proxy is not supported for [[FTP]], [[WebDAV]] and [[S3]] protocols.
Selecting //Local// allows you to specify an arbitrary command on the local machine to act as a proxy. When the session is started, instead of creating a TCP connection, WinSCP runs the specified command, and uses its standard input and output streams. This type of proxy is not supported for [[FTP]], [[WebDAV]] and [[S3]] protocols. Selecting //Local// allows you to specify an arbitrary command on the local machine to act as a proxy. When the session is started, instead of creating a TCP connection, WinSCP runs the specified command, and uses its standard input and output streams. This type of proxy is not supported for [[FTP]], [[WebDAV]] and [[S3]] protocols.
Line 28: Line 28:
===== [[username_password]] Username and Password ===== ===== [[username_password]] Username and Password =====
-If your proxy requires authentication, you can enter a username and a password in the //Username// and //Password// boxes. +You can enter a username and a password in the //User name// and //Password// boxes, which will be used if your proxy requires authentication. 
 + 
 +If WinSCP discovers that it needs a proxy username or password and you have not specified one here, WinSCP will prompt for it interactively in the terminal window.
Authentication is not fully supported for all forms of proxy: Authentication is not fully supported for all forms of proxy:
Line 34: Line 36:
    * With SOCKS5, authentication is via CHAP if the proxy supports it, otherwise the password is sent to the proxy in plain text.     * With SOCKS5, authentication is via CHAP if the proxy supports it, otherwise the password is sent to the proxy in plain text.
    * With HTTP proxying, authentication is via "HTTP Digest" if possible //(in the latest beta release only)//, &beta or "HTTP Basic". In the latter case, the password is sent to the proxy in plain text.     * With HTTP proxying, authentication is via "HTTP Digest" if possible //(in the latest beta release only)//, &beta or "HTTP Basic". In the latter case, the password is sent to the proxy in plain text.
-  * SOCKS4 can use the //Username// field, but does not support passwords.  +  * SOCKS4 can use the //User name// field, but does not support passwords.  
-  * You can specify a way to include a username and password in the //Telnet/Local// proxy command. \\ If WinSCP discovers that it needs a proxy username or password and you have not specified one in the configuration, it will [[ui_authenticate#proxy|prompt for it interactively]]. &beta_feature+  * You can specify a way to include a username and password in the //Telnet/Local// proxy command. \\ If you do so, and don't also specify the actual username and/or password in the configuration, WinSCP will [[ui_authenticate#proxy|interactively prompt for them]]. &beta_feature
  * Most FTP proxy methods do require authentication.   * Most FTP proxy methods do require authentication.
Line 45: Line 47:
In this string, you can use ''\n'' to represent a new-line, ''\r'' to represent a carriage return, ''\t'' to represent a tab character, and ''\x'' followed by two hex digits to represent any other character. ''\\'' is used to encode the \ character itself. In this string, you can use ''\n'' to represent a new-line, ''\r'' to represent a carriage return, ''\t'' to represent a tab character, and ''\x'' followed by two hex digits to represent any other character. ''\\'' is used to encode the \ character itself.
-Also, the special strings ''%host'' and ''%port'' will be replaced by the host name and port number you want to connect to. The strings ''%user'' and ''%pass'' will be replaced by the proxy username and password you specify. To get a literal % sign, enter ''<nowiki>%%</nowiki>''.+Also, the special strings ''%host'' and ''%port'' will be replaced by the host name and port number you want to connect to. The strings ''%user'' and ''%pass'' will be replaced by the proxy username and password (which, if not specified in the configuration, will be prompted for). To get a literal % sign, enter ''<nowiki>%%</nowiki>''.
If a Telnet proxy server prompts for a username and password before commands can be sent, you can use a command such as: If a Telnet proxy server prompts for a username and password before commands can be sent, you can use a command such as:
Line 51: Line 53:
  %user\n%pass\nconnect %host %port\n   %user\n%pass\nconnect %host %port\n
-This will send your username and password as the first two lines to the proxy, followed by a command to connect to the desired host and port. Note that if you do not include the ''%user'' or ''%pass'' tokens in the Telnet command, then the //Username// and //Password// configuration fields will be ignored.+This will send your username and password as the first two lines to the proxy, followed by a command to connect to the desired host and port. Note that if you do not include the ''%user'' or ''%pass'' tokens in the Telnet command, then anything specified in //Username// and //Password// configuration fields will be ignored.
You can use PuTTY ''plink'' as local proxy command to implement [[guide_tunnel#tunnel_two|two hop tunnel]]. You can use PuTTY ''plink'' as local proxy command to implement [[guide_tunnel#tunnel_two|two hop tunnel]].

Last modified: by martin