217949 - NTLM Authentication does not work on NT4

Status: RESOLVED FIXED

(Core :: Networking: HTTP, defect, P1)

Description

[Alessandro]

User-Agent:       Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.5b) Gecko/20030829
Build Identifier: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.5b) Gecko/20030829

When I try to authenticate with a site that uses NTLM authentication Mozilla
does not display the plogin/password page . I receive the error "HTTP 401.2 -
Unauthorized: Logon failed due to server configuration"


Reproducible: Always

Steps to Reproduce:
1.Go to a site which uses NTLM Authentication
2.
3.

Actual Results:  
"HTTP 401.2 - Unauthorized: Logon failed due to server configuration"

Expected Results:  
Display the login/password page

Comment 1

[Olivier Cahagne]

can you specify the URL ?
Are you authenticating with a username such as: DOMAIN\username ?

If still not working, please attach via "create a new attachment" a HTTP log of
this session (and this session only otherwise it can get quite large) ? See
instructions here:
http://www.mozilla.org/projects/netlib/http/http-debugging.html

Comment 2

[Alessandro]

Attachment: Log of http session

I can't login to the site, mozilla does not display the login form. I see the
error page ....

Comment 3

[Olivier Cahagne]

Did it work before (with 1.4) ? Does it happen for any URL (public or private) ?
Do you have a proxy configured ?

Comment 4

[Alessandro]

It worked and still works with 1.4..
I can try only with this site (intranet)
I have an automatic proxy configuration

Comment 5

[Matthias Versen [:Matti]]

0[7818d0]: nsHttpChannel::GetAuthenticator [this=29c2450 scheme=negotiate]
0[7818d0]: nsHttpChannel::GetAuthenticator [this=29c2450 scheme=ntlm]
0[7818d0]: authentication type not supported

Does Mozilla choose Negotiate (unsupported) or is NTLM not working ?

Comment 6

[Olivier Cahagne]

This is similar to bug 211843 but I don't think bug 211843 was a regression,
maybe it's side effect from the PAC file parsing that changed between 1.4 and
1.5b, can you attach the PAC file (get it with wget or some file downloader) ?
To help reducing the regression window, can you also test 1.5a and report results.

Comment 7

[Alessandro]

How can i download 1.5a??
I'll check but i did not work also on  1.5a

Comment 8

[Olivier Cahagne]

see here http://ftp.mozilla.org/pub/mozilla/releases/mozilla1.5a/
can you also upload a HTTP log from a successful session using 1.4 ?

Comment 9

[bugzilla.mozilla.org]

using 
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5b) Gecko/20030827
I still can log into our intranet pages using NTLM auth

going to try the latest nightly ...

Comment 10

[bugzilla.mozilla.org]

Attachment: http log of working NTLM auth

NTLM Auth does work

testet with Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5b)
Gecko/20030901

Comment 11

[Alessandro]

Attachment: Log Mozilla1.5a

With Mozilla1.5a it works

Comment 12

[Olivier Cahagne]

I see one difference, I'm not sure it makes a difference, it seems like the
first log (attachment 130711 [details]) using 1.5b was requesting
http://intranet.datasiel.net/ whereas log from attachment 130770 [details] using 1.5a
requested http://intranet/
As you're using a PAC file for automatic proxy, maybe a rule is not applied in
the latter case.

Comment 13

[Alessandro]

I tried with intranet and intranet.datasiel.net with 1.5a and it works...

Comment 14

[Alessandro]

Using 
Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.5b) Gecko/20030911
NTLM does not work...

Comment 15

[Richard Becke]

I can confirm this; am using 1.5a win32 daily at work, need to access
NTLM-authenticated resources, have tried 1.5b and 1.5rc1, none of these are able
to authenticate. I get "Unauthorized" immediately, no login dialog as in 1.5a.

Comment 16

[Darin Fisher]

Alessandro, Olivier: can you please check the following:

can you please check for the existance of the file "SECUR32.DLL" in your
C:\WINNT\System32 directory.  if the file does not exist, then that indicates
the source of the problem.  you might also try running my little ntlmdump program:

  http://bugzilla.mozilla.org/attachment.cgi?id=130147&action=view

it will try to load SECUR32.DLL in the same way that mozilla does.  if it
succeeds in outputing information, then at least we know that mozilla is not
having trouble loading the library.

the reason why i'm asking you to check for this is that in bug 212336, we
switched from loading "security.dll" to loading "secur32.dll" in order to make
NTLM work on Win9x.  i suspect (and have heard it rumored) that NT4 does not
provide "secur32.dll" but only "security.dll" .. in which case we'd need to try
loading it as well.  the timing for this regression seems to match up with this
change.

Comment 17

[Darin Fisher]

Attachment: v0 patch

if i am right, then this patch would solve the problem.

Comment 18

[Darin Fisher]

looks like my hunch was right...

http://www.experts-exchange.com/Programming/Programming_Languages/Visual_Basic/Q_20736138.html

i'll try to get this patch in for 1.5

Comment 19

[chris hofmann]

Comment on attachment 132089 [details] [diff] [review]
v0 patch

need to get it in tonight if it is going to make the train for 1.5..

Comment 20

[timeless]

checked into trunk and branch

Comment 21

[Darin Fisher]

marking FIXED.  thanks timeless!!