使用 python 和 python NTLM 浏览受 NTLM 保护的网站

Question

我的任务是创建一个脚本，该脚本登录到企业门户，进入特定页面，下载该页面，将其与早期版本进行比较，然后根据所做的更改向特定人员发送电子邮件。最后一部分很简单，但第一步给我带来了最大的麻烦。

在使用 urllib2（我尝试在 python 中执行此操作）连接失败并进行了大约 4 或 5 小时的谷歌搜索后，我确定无法连接的原因是由于网页上的 NTLM 身份验证。我已经尝试了在该网站和其他网站上找到的许多不同的连接过程，但均无济于事。基于 NTLM 示例 我已经完成：

import urllib2
from ntlm import HTTPNtlmAuthHandler

user = 'username'
password = "password"
url = "https://portal.whatever.com/"

passman = urllib2.HTTPPasswordMgrWithDefaultRealm()
passman.add_password(None, url, user, password)
# create the NTLM authentication handler
auth_NTLM = HTTPNtlmAuthHandler.HTTPNtlmAuthHandler(passman)

# create and install the opener
opener = urllib2.build_opener(auth_NTLM)
urllib2.install_opener(opener)

# create a header
user_agent = 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)'
header = { 'Connection' : 'Keep-alive', 'User-Agent' : user_agent}

response = urllib2.urlopen(urllib2.Request(url, None, header))

当我运行此命令时（使用真实用户名、密码和 url）我得到以下信息：

Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "ntlm2.py", line 21, in <module>
    response = urllib2.urlopen(urllib2.Request(url, None, header))
  File "C:\Python27\lib\urllib2.py", line 126, in urlopen
    return _opener.open(url, data, timeout)
  File "C:\Python27\lib\urllib2.py", line 400, in open
    response = meth(req, response)
  File "C:\Python27\lib\urllib2.py", line 513, in http_response
    'http', request, response, code, msg, hdrs)
  File "C:\Python27\lib\urllib2.py", line 432, in error
    result = self._call_chain(*args)
  File "C:\Python27\lib\urllib2.py", line 372, in _call_chain
    result = func(*args)
  File "C:\Python27\lib\urllib2.py", line 619, in http_error_302
    return self.parent.open(new, timeout=req.timeout)
  File "C:\Python27\lib\urllib2.py", line 400, in open
    response = meth(req, response)
  File "C:\Python27\lib\urllib2.py", line 513, in http_response
    'http', request, response, code, msg, hdrs)
  File "C:\Python27\lib\urllib2.py", line 432, in error
    result = self._call_chain(*args)
  File "C:\Python27\lib\urllib2.py", line 372, in _call_chain
    result = func(*args)
  File "C:\Python27\lib\urllib2.py", line 619, in http_error_302
    return self.parent.open(new, timeout=req.timeout)
  File "C:\Python27\lib\urllib2.py", line 400, in open
    response = meth(req, response)
  File "C:\Python27\lib\urllib2.py", line 513, in http_response
    'http', request, response, code, msg, hdrs)
  File "C:\Python27\lib\urllib2.py", line 438, in error
     return self._call_chain(*args)
  File "C:\Python27\lib\urllib2.py", line 372, in _call_chain
     result = func(*args)
  File "C:\Python27\lib\urllib2.py", line 521, in http_error_default
     raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
  urllib2.HTTPError: HTTP Error 401: Unauthorized

对于我来说，此跟踪最有趣的是最后一行显示 401 错误已发回。据我所知，401错误是发送回客户端的第一条消息当 NTLM 启动时。我的印象是 python-ntml 的目的是为我处理 NTLM 进程。这是错误的还是我只是错误地使用它？另外，我并不局限于使用 python 来实现这一点，所以如果有一种更简单的方法可以用另一种语言来做到这一点，请告诉我（从我在谷歌搜索中看到的情况来看，没有）。 谢谢！

Answer 1

如果站点使用 NTLM 身份验证，则生成的 HTTPError 的 headers 属性应如下所示：

>>> try:
...   handle = urllib2.urlopen(req)
... except IOError, e:
...   print e.headers
... 
<other headers>
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM