Closed
Bug 1411882
Opened 7 years ago
Closed 7 years ago
Initial login on a kerberized webserver gives initial 401 error
Categories
(Core :: Networking, defect, P3)
Tracking
()
RESOLVED
DUPLICATE
of bug 1410257
People
(Reporter: sven.sternberger, Assigned: mayhemer)
Details
(Whiteboard: [necko-triaged][NTLM])
User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36
Steps to reproduce:
Connect to kerberized Apache 2.4 webserver (mod_auth_kerb). The desktop (mac and linux)
node have no "network.negotiate-auth.trusted-uris".
Actual results:
I get as expected the normal browser login prompt. When I enter it a 401 error page follows.
When I choose "Try again" the webpage is loaded, and the session work without problems.
In chrome and safari it works without problems. In firefox in worked till version 51.0,
since 52.0 it fails
Expected results:
After entering the credentials in the login prompt I should get immediately the webpage
Reporter | ||
Comment 1•7 years ago
|
||
When I configure "network.negotiate-auth.trusted-uris" on the desktop node with
the kerberized webserver. The login succeed without kerberos ticket after entering
the credentials and with kerberos ticket passwordless.
Updated•7 years ago
|
Component: Untriaged → Networking
Product: Firefox → Core
Comment 2•7 years ago
|
||
Honza, can you take a look? You work looking at the auth-s recently?
Flags: needinfo?(honzab.moz)
Priority: -- → P2
Whiteboard: [necko-triaged]
Assignee | ||
Comment 3•7 years ago
|
||
I'd start with looking at logs. Sven, please follow [1] with a modification to the list of modules being:
MOZ_LOG="timestamp,nsHttp:5,negotiateauth:5,NTLM:5"
This could quickly say what's wrong. Note that the log can expose credentials, so it's better if you send it to me directly via email instead of publishing it in Bugzilla as an attachment.
Thanks!
(P2->P3 since this is not a blocking failure (refresh makes the user go on as expected))
Assignee: nobody → honzab.moz
Flags: needinfo?(honzab.moz) → needinfo?(sven.sternberger)
Priority: P2 → P3
Assignee | ||
Updated•7 years ago
|
Whiteboard: [necko-triaged] → [necko-triaged][NTLM]
Assignee | ||
Comment 5•7 years ago
|
||
Thanks for the log. I can see the url you are navigating to is blocked for Negotiate auth, hence we fallback to Basic (offered by the serve as a second choice of authentication). Before you manage to enter the credentials, the servers closes the connection and you see the "Connection was reset" error page with "Try again" button.
Few Firefox versions back we've slightly changed connection management related to NTLM/Negotiate. That change also affects non-connection based schemes and this is the bug you experience.
We've already fixed it on Nightly. If you can, please retest with Firefox Nightly to verify. If still reproducible, please reopen this bug.
Thanks.
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
Reporter | ||
Comment 6•7 years ago
|
||
I tested with firefox nightly and it worked perfectly. Thanks again for your help
Reporter | ||
Comment 7•7 years ago
|
||
Hello!
it looks like it is still broken in 57.0.1 (tested on linux and windows)
best regards!
Sven
Assignee | ||
Comment 8•7 years ago
|
||
(In reply to Sven Sternberger from comment #7)
> Hello!
>
> it looks like it is still broken in 57.0.1 (tested on linux and windows)
>
> best regards!
>
> Sven
yes, because bug 1410257 is fixed in 58
You need to log in
before you can comment on or make changes to this bug.
Description
•