Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I want to download a file from a SharePoint server (url).
I manage to download it using Firefox.
I can't manage to download it using curl.

Sounds surprising, but the same URL works on Firefox, fails with curl.

Works on Firefox:

Actually, entering the URL initiates an authentication conversation between client and server, with in total 4 requests sent by Firefox:

enter image description here

  • Initial request: The one I typed the URL into the browser: https://mycorp.raxsp.com/_windows/default.aspx?ReturnUrl=/personal/mycorp_user1/_vti_bin/cmis/rest?getRepositories. It asked me for a user/password, so I entered it and validated. Response contains a WWW-Authenticate header with value NTLM
  • Request 2: Same URL, but this time with an NTLM autorization token in the request headers.
  • Request 3: Same, but this time the NTLM authorization token is the one found in the response header of request 2.
  • Request 4: To https://mycorp.raxsp.com/personal/mycorp_user1/_vti_bin/cmis/rest?getRepositories, download is successful.

Fails with curl:

With curl, the request below results in 401 Unauthorized:

curl -i -u mycorp.user1@raxsp.com:mypass 'https://mycorp.raxsp.com/_windows/default.aspx?ReturnUrl=/personal/mycorp_user1/_vti_bin/cmis/rest?getRepositories'

Thinking I had to run the 4 requests like Firefox, I tried to add all 4 URLs to the curl command line, but that results in 401 Unauthorized for the first three and 403 FORBIDDEN for the last:

curl -i -u mycorp.user1@raxsp.com:mypass 'url1' 'url2' 'url3' 'url4'


How to download the file without Firefox (from command-line)?
I am not limited to curl, any tool or programming language is fine too.

share|improve this question
Is it the remote site or an intermediate proxy which is issuing the NTLM challenge? –  symcbean Apr 2 '13 at 16:28
@symcbean: I believe it is the remote site. Maybe Rackspace is placing some sort of proxy before the real server, but it looks like direct access. –  Nicolas Raoul Apr 3 '13 at 1:56
did you try to extract cookies from firefox and provide them to curl ? –  neutrinus Oct 16 '14 at 6:24

1 Answer 1

cURL supports NTLM authentication, you should investigate these switches:

http://curl.haxx.se/docs/manpage.html#--ntlm (--ntlm)

http://curl.haxx.se/docs/manpage.html#--anyauth (--anyauth)

At a guess, something along the lines of:

curl 'https://mycorp.raxsp.com/_windows/default.aspx?ReturnUrl=/personal/mycorp_user1/_vti_bin/cmis/rest?getRepositories' -ntlm -u username:password
share|improve this answer
--ntlm sounds great but unfortunately Sharepoint gives 500 Internal Server Error at the second step (a problem Firefox does not run into, somehow). Same with --anyauth. –  Nicolas Raoul Apr 2 '13 at 12:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.