Closed Bug 1411882 Opened 7 years ago Closed 7 years ago

Initial login on a kerberized webserver gives initial 401 error

Categories

(Core :: Networking, defect, P3)

56 Branch
defect

Tracking

()

RESOLVED DUPLICATE of bug 1410257

People

(Reporter: sven.sternberger, Assigned: mayhemer)

Details

(Whiteboard: [necko-triaged][NTLM])

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.62 Safari/537.36 Steps to reproduce: Connect to kerberized Apache 2.4 webserver (mod_auth_kerb). The desktop (mac and linux) node have no "network.negotiate-auth.trusted-uris". Actual results: I get as expected the normal browser login prompt. When I enter it a 401 error page follows. When I choose "Try again" the webpage is loaded, and the session work without problems. In chrome and safari it works without problems. In firefox in worked till version 51.0, since 52.0 it fails Expected results: After entering the credentials in the login prompt I should get immediately the webpage
When I configure "network.negotiate-auth.trusted-uris" on the desktop node with the kerberized webserver. The login succeed without kerberos ticket after entering the credentials and with kerberos ticket passwordless.
Component: Untriaged → Networking
Product: Firefox → Core
Honza, can you take a look? You work looking at the auth-s recently?
Flags: needinfo?(honzab.moz)
Priority: -- → P2
Whiteboard: [necko-triaged]
I'd start with looking at logs. Sven, please follow [1] with a modification to the list of modules being: MOZ_LOG="timestamp,nsHttp:5,negotiateauth:5,NTLM:5" This could quickly say what's wrong. Note that the log can expose credentials, so it's better if you send it to me directly via email instead of publishing it in Bugzilla as an attachment. Thanks! (P2->P3 since this is not a blocking failure (refresh makes the user go on as expected))
Assignee: nobody → honzab.moz
Flags: needinfo?(honzab.moz) → needinfo?(sven.sternberger)
Priority: P2 → P3
Whiteboard: [necko-triaged] → [necko-triaged][NTLM]
Send the log via PM to Honza
Flags: needinfo?(sven.sternberger)
Thanks for the log. I can see the url you are navigating to is blocked for Negotiate auth, hence we fallback to Basic (offered by the serve as a second choice of authentication). Before you manage to enter the credentials, the servers closes the connection and you see the "Connection was reset" error page with "Try again" button. Few Firefox versions back we've slightly changed connection management related to NTLM/Negotiate. That change also affects non-connection based schemes and this is the bug you experience. We've already fixed it on Nightly. If you can, please retest with Firefox Nightly to verify. If still reproducible, please reopen this bug. Thanks.
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
I tested with firefox nightly and it worked perfectly. Thanks again for your help
Hello! it looks like it is still broken in 57.0.1 (tested on linux and windows) best regards! Sven
(In reply to Sven Sternberger from comment #7) > Hello! > > it looks like it is still broken in 57.0.1 (tested on linux and windows) > > best regards! > > Sven yes, because bug 1410257 is fixed in 58
You need to log in before you can comment on or make changes to this bug.