Closed Bug 230190 Opened 21 years ago Closed 15 years ago

re-authentication with proxy / repeated password prompts

Categories

(Toolkit :: Password Manager, defect)

defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 475053
Future

People

(Reporter: volker, Unassigned)

References

Details

Attachments

(5 files)

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6b) Gecko/20031114 Firebird/0.7+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6b) Gecko/20031114 Firebird/0.7+

When working behind a proxy (in my case WWWOffle + Squid) which requires
authentication and fetching pages from a source via proxy and the same page
contains elements to be fetched from a non-proxy source, Firebird comes up with
a password dialog even if the proxy authentication already has been done (at the
beginning of the surf session).

Firebird is configured to use a proxy (WWWOffle for http) which is being set to
require user authentication. The authentication works well for the first page to
be fetched.

While fetching the page WWWOffle inserts control links (to itself) into the
fetched page. These control links are from XXX.intranet:8080/anyURL. Firebird is
configured not to use the proxy for any page from '.intranet'.

The page is being fetched and at the end (when fetching the control elements
from WWWOffle) Firebird comes up with another authentication dialog. Saved
passwords don't get displayed (empty dialog).

Reproducible: Always

Steps to Reproduce:
1. use a proxy with authentication
2. set proxy in Fb, also set 'no proxy for...'
3. fetch a page through the proxy (which contains to be proxied elements and not
to be proxied elements)
4. password dialog comes up before the page is being fetched (with filled pw dialog)
5. password dialog comes up near end of page fetch (with empty pw dialog)

Actual Results:  
When removing 'no proxy for' entries, no additional dialog box comes up. So my
guess: Fb doesn't like the switching between authenticated and non-authenticated
connections.

Expected Results:  
Remember authentication and don't displayed pw dialog box for an already
authenticated connection.

Problem first detected with 0.7 (release + nigthlies). I'm not quiet sure if it
already performed this way with 0.6 (maybe I've used different proxy and 'no
proxy for' settings with older versions).

The problem really disappears when not using 'no proxy for'. Please note this
problem _only_ occours when fetching elements for one page from a proxy and from
a 'no proxy for' zone. Fetching one page thru the proxy and another direct
doesn't recreate this problem.
Could you try to replicate this with a 20040101+ build and a new profile please?
There was a checkin on New Year's Eve which may or may not have affected this.
David,

I have tried the latest nightly and it seems to be better. Now it won't ask
every time while fetching pages from the outside world.

One problem has been left: When accessing the control pages of the proxy (port
8081, wwwoffle) it will fetch pages from a non-proxy zone, but the proxy want's
an authentication. This time (proxy want's authentication but Fb is fetching
pages from a non-proxy zone) the Fb password manager comes up with an empty
dialog box (even while Fb still has the username / password stored).

I guess it's the last problem left but again, the workaround is to remove some
entries from the 'no proxy for...' settings. I would be able to life with that
(minor) bug.
Not sure if it is the same but.

1) Start Firefox
2) Prompted for proxy user id and password with fields pre-filed in.(Would be
nice to #112179 was fixed)
3) Browse to my citrix server
4) Enter citrix user id and password
5) Re-prompted for proxy user id and password NOT filled in this time.
6) Do my cirtix work
7) Restart Firefox
8) Prompted for proxy user id and password with fields NOT filled in.
9) Enter user id and password can click to remember
10) Restart Firefox
11) Prompted for proxy user id and password with fields pre-filed in.

Using Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040803
Firefox/0.9.1+.
I have the same problem..  Firefox 1.0PR on Windows XP..  It's using Microsoft
Proxy server..

All traffic goes through proxy (http/https).. and everytime it loads an image on
a page, it wants a login.

If you enable HTTP pipelining in about:config, it usually only asks for your
login/pass for every new site it connects to. Even when you check to 'remember
username/password', it just prompts you to click OK.

Like the previous commenter, I have this problem with Firefox 1.0PR.
The problem was NOT there in version 0.9.1.

When I visit a page on the Internet, I'm going through a Microsoft proxy
(through port 3128). For each element on the page (each image etc.) I get the
proxy username / password dialog. I have to click OK many times before the page
is loaded.

Ofcourse this is very annoying, unfortunately it makes Firefox almost unusable!
Decided to try Firefox for the first time today (1.0PR - Mozilla/5.0 
(Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20041001 Firefox/0.10.1
and am getting the repeated password prompts for a Windows ISA proxy
server.

Firefox is unusable due to this problem.  Oh well, back to Mozilla...

IHMO the severity on this should be at least Critical, but I don't know if I'm 
allowed to change it....
Hi,

enter "about:config" in the address line and look for the following parameter:
network.automatic-ntlm-auth.allow-proxies

Double-Click it in order to set this to false. Apparently this has been preset
to true for security reasons! I think it should be reset to false in the
standard, because no one knows this parameters.

Lothar
*** Bug 316523 has been marked as a duplicate of this bug. ***
I too have this problem, seen it since the early betas of 1.5 and reported it then but the official release of 1.5 has not fixed it. I've tried the 2 config changes for pipelining and ntlm auth but these don't help as I still get multiple requests for proxy server username/password per page load. For example when accessing Yahoo email I get prompted some 6 times so makes Firefox some what unusable, looks like it's back to v1,07 for me.
I am having the same problem as described in Comments 6 and 9.  This problem was present for me in Firefox 1.0.7 and is still there in Firefox 1.5 (20051111).

I am behind a squid proxy caching server and get repeated password prompts for each image on the page.  Password Manager does not seem to remember the username and password despite checking the box.  So, not only does the box appear 20 times on the average webpage, I have to re-type all the authentication information.

I agree with Comment 6 that the severity on this should be set to Critical.  I cannot roll-out Firefox in my organisation until this is fixed and will have to stick with IE unless we get a resolution.

Is Comment 7 just a general piece of advice, or an attempt at a work-around?  In any case it has made no difference to my situation.
Matt, am surprised that you were experiencing the same problem with 1.0.7, for me personally 1.0.7 behaves fine, it's all the 1.5 beta, RC and final release that don't work for all when running via a proxy server.

If 1.0.7 doesn't work for you either then maybe there is a simple setting change that has been changed in the distribution of 1.5 that is causing this problem.

I too have tried the about:config changes but they didn't fix the problem.
Odd - because I've just tested it again and I definitely have the problem on both.  It may be due to how squid (combined with dansguardian) manipulates the headers - and maybe Firefox is doing it the right way and it's just another example of weak security in IE.  Whatever it is, it's stopping me from rolling out Firefox here.

If anyone wants to see my config then I'll send it along.
folks,
Firefox (AFAIK) never had _general_ problems with proxy handling. I'm a happy phoenix/firebird/firefox user since 3 (?) years now and I've been able to work using firefox all the time. If you're experiencing proxy problems, you should check my problem description if it is equal.
If it is, then you may work around the trouble by removing everything (but localhost) from 'no proxy for...' settings and it should work using a proxy. If your problem doesn't go away by that workaround, you may probably have a different problem.
*** Bug 319736 has been marked as a duplicate of this bug. ***
Volker, it's not that it doesn't work, it's that it keeps re-prompting for username/password for each graphic on the page being loaded, in some cases you need to click OK to the Password Manager dislog some 10-14 times before the page loads and then when you move onto the next page same thing.

For me, 1.0.7 works perfectly, I'm only seeing this problem with 1.5.

Regards
Can't believe there have been no updates on this problem to date, how is anybody who sits behind a corporate proxy ever going to be able to use 1.5 if this problem isn't sorted. I've now moved onto IE7 beta2 as a result of not being able to use the latest version of Firefox, ho-hum!
(In reply to comment #16)
> Can't believe there have been no updates on this problem to date, how is
> anybody who sits behind a corporate proxy ever going to be able to use 1.5 if
> this problem isn't sorted. I've now moved onto IE7 beta2 as a result of not
> being able to use the latest version of Firefox, ho-hum!
> 

Afraid I'm the same!  I have had to switch back to IE for all my desktops, and am using Firefox on my personal machine because I've been able to bypass proxy authentication for my IP address.

Are we really the only people experiencing this problem?  I can provide as much detail as required in order to try get this solved.

Matt
I've logged this problem since the early beta days of 1.5 and all I ever got back were the same try these fixes which I reported back as not resolving the problem. The real shame is that this may simply be a configuration issue but without the developers helping it ain't going to get fixed. I've tried everything including new profiles, by localhost, even a brand new install on a virgin WinXP depktop but the problem for me is still there.
Same problem happens here with several different versions of Firefox on Linux. I don't remember when this problem started happening in my installation, but the fact is this problem exists and is heavily annoying, so much as to make Firefox unusable for many people experiencing this problem.

I have tried with several versions of Firefox, and all of them show the same behaviour. Start the program with a fresh installation, a completely new profile, and configure the proxy settiings (manual configuration, specify proxy IP address and port, use the same settings for all protocols).

Then you are prompted for the proxy username and password, you type them both and opt to "make password manager remember this username and password". Click OK and another authentication pop-up comes up (to be fair, exactly the same happens with konqueror 3.5.1-1 from KANOTIX). This second pop-up shows a different athentication realm, the one configured in the NetApp NetCache implementing the proxy-cache at this site.

So you retype the username and password in this new pop-up, choose "remember credentials", click OK...and this last pop-up message repeats and the username and password fields are empty. So there seems to be two problems here, first password manager forgets authentication although told not to do so, and second the authentication somehow is not sent to the proxy (maybe as a result of the first problem).

The number of times the pop-up comes up before getting through the proxy is arbitrary, but it seems that it appears twice (apart from the initial password pop-up showing no authentication realm, that also happens with konqueror) IF you begin with a blank page and then try to access a simple page. If you use some extensions (session saver, RSS feeds, etc.) then the pop-up can appear dozens of times, maybe twice for each tab, RSS feed or webpage being loaded.

Once the pop-up stops appearing it never appears again, no matter how many webpages you open or visit. Authentication even survives several days of no active web browsing, as after a full weekend with the portable PC suspended to disk I resumed it and could browse the web with no further prompting for proxy authentication.

Tested Firefox versions on Linux kernel 2.6.16-rc4 (plus suspend2 patches), on a PC portable computer:
* Latest packaged Debian Sid: 1.5.dfsg+1.5.0.1-1
* Latest packaged KANOTIX: 1.5.dfsg+1.5.0.1-4
* Latest firefox 2.0 alpha: Bon Echo Alpha 1

I have also tried several older versions with the same results, but some time back the problem didn't happend , although I can't tell which was the last version not showing the problem.

I have captured a full session with ethereal and analyzed it (cannot provide the capture file as-is, because I am working at a customer an user, passwords, IPs and so on are confidential). The first request from the browser to the proxy sends no auth information (don't know if at this point it already showd the pop-up requesting the credentials, but the fact is that the URL sent to the proxy is proxy-style). The proxy replies with a "Proxy-Connection: close", a "Proxy-Authenticate: NTLM" and another "Proxy-Authenticate: Basic Realm="Authentication Realm"". The the proxy closes the connection sending a TCP FIN.

Then, a new connection is stablished to the proxy server (at port 8080). This time the browser send a "Proxy-Authorization: NTLM SOMEAUTHENTICATIONDATA" block, including a NTLMSSP_NEGOTIATE message type. Next the proxy replies with a NTLMSSP_CHALLENGE, and inmediately the browser sends a NTLMSSP_AUTH (these three messages in a tenth of a second, so credentials seems to be cached in the password manager so far).

However, four seconds later the proxy sends another HTTP 407 reply "Proxy Authentication Required", with the same authentication realm as before. Then, after having typed the username and password again, the browser sends the proxy a "Proxy-Authorization Basic" along with the credentials in plain text.

Inmediately, the proxy ReSeTs the connection and the browser opens several connections to the proxy to start downloading the requested URLs.

So, from my analysis, it seems Firefox first contacts the proxy sending no auth information. The proxy then asks for a NTLM authentication, that firefox tries to comply with, but somewhat if fails to do so although the credentials are OK. Then the proxy seems to fall back to basic authentication, that the browser sends in plain text after having asked the user to type it again, although being told to remember the password.

The reported behaviour could be normal the first time it happens, but if you close and reopen the browser the process repeats itself, you have to type the password up to three times (once is not due to firefox) for every URL loaded on startup (RSS feeds, tab, saved sessions, etc.).

Summary: password manager doesn't seem to cache or remember typed proxy authentication,and NTLM authentication doesn't work (or works but cannot be easily configured to make it work, specifying NT domain, etc.).

Hope this information helps firefox developers investigate this issue and find a proper fix to the problem. Could provide a packet capture on request, but would be a "sanitized, ASCII-text" version to avoid customer information leakage.
Maybe is too early to tell, but I think I have found something interesting related to this bug. In my last comment I described what happened after opening the browser with a saved session, RSS feeds or even an empty window and then trying to open some URL. First, a pop-up with no "authentication realm", then a second, third, fourth...pop-up with the proxy authentication realm. The number of pop-ups is not fixed, but it seems there are at least two for each page, tab, RSS feed, etc.

Today I tried the following: open the browser with a saved session (some 6 tabs). I got the pop-up with the empth authentication realm. Instead of giving the correct username/password pair, I just put a non existent username and password, and submitted the data. As expected, a second pop-up came up, this time with the correct authentication realm: nothing new here so far, the same happens giving the correct username/password to the first pop-up.

Now I give the proper credentials and all the tabs, RSS feed, and saved sessions are loaded at once and with no further proxy authentication prompting. So it seems giving a bad username/password at the first pop-up fixes the reported problem. Hope this workaround helps other people, and the developers at mozilla.org fix the issue.
I'm getting user support emails on this bug that I can't answer or even test. It also looks like Password Manager has been abandoned by the devs too...
Assignee: bryner → nobody
QA Contact: davidpjames → password.manager
David P James - what do you mean password manager has been abandoned by the devs? If people are seeing this particular problem with 1.0.7 although I never have then there must be a config change that must be causing the problem. When I get some time and have 2 machines next to each other I'm going to compare the configs of 1.0.7 and 1.5 and see if I can see the obvious.
Sort of great news for people subscribed to this thread. If you go and download Firefox 2.0 rc3 (2.0b1) this version works fine through my corporate proxy. Just hope that as 2.0 develops the bug isn't re-introduced.
Unfortunately, I no longer work at the same place so I can't verify if recent Mozilla Firefox builds are indeed free of this problem.
I just downloaded 2.0b1 and am still having the same multiple authentication requests.  Now it's down to about twice per page, which is a small improvement.  It's still too often for it to actually be used here, though.
What I did was to dump my current Firefox profile and let 2.0b1 create a new one then copy the relevant files such as bookmarks etc... across into the new. This way you get a clean start without any addins/extensions/themes. I then installed the addins 1 by 1, this seems to have worked for me, spent the entire day in the office and only got asked for the password at the start of the day.
*** Bug 354310 has been marked as a duplicate of this bug. ***
I think this bug is related to Bugzilla Bug 356097, where I wrote my comment.
I have this problem too, with 1.5.07.  I have certain sites blocked on our proxy, but instead of just remembering my proxy password and getting a denied page, I get prompted.  So if I'm on the CNN website and it loads several images from a blocked site, it will prompt for each one.  If I'm not at the computer, I might return to find 10 dialogs into which I have to enter a username and password despite having had the password manager remember them earlier, or even on the previous dialog box.  It also seems like for every 2 or 3 I enter, I'll get a new dialog which certainly adds to the pain.  If I leave it on overnight, it may be 60 dialogs at which point I just kill Firefox and start over.

I'm currently compiling 2.0, but I have my doubts that this will fix anything.  This is extremely annoying to the point that I'm ready to stop using Firefox.
Problem still there in 2.0.0.2

Password manager is made useless if you have to enter your master password for each of the 20 windows Firefox is restoring ...

We are using Squid.
Prolem still exists in 2.0.0.4. This is especially annoying when checking for extension updates after updating Firefox itself. The proxy authentication dialog pops up several times (not for each extension, though).
Blocks: 356097
This also happens at my school which uses the SINA proxy.  Whenever you request a page from the outside world, you are asked for the username and password.  If remember username and password is selected, it only fills in the fields.  This is the one area which Firefox lags behind IE, and the one reason my school doesn't use Firefox.  Get this fixed, because I hate Microsoft. (I use Linux..)

This bug even occurs when using proxy extensions from the add-ons database!
We are encountering a similar problem. If you outside of the "intranet", Firefox prompts to log you into NTLM (really, this shouldn't happen!) but then prompts every time you load an image or external resource. Really, Firefox should drop down to Basic authentication (if available) or another authentication scheme. If no other scheme is present, Firefox should display the error 401 message.

If you aren't in the local intranet zone in IE, then IE will drop down to the next available authentication method or display the 401 error message. Can something similar be implemented into Firefox?
Occurring for me in 2.0.0.6.  I often load firefox, try to type in firefox's search textbox.  The authentication box pops up with my proxy username already highlighted.  Because I'm trying to type in the search box, tt is immediately overwritten with my search terms.

If I leave a page such as iGoogle ( http://www.google.co.uk/ig?hl=en ) open overnight, I often discover ~50 proxy authentication prompts have popped up -- I guess this is to do with the way the page refreshes itself.
Assignee: nobody → dolske
Flags: blocking-firefox3?
OS: Windows 2000 → All
Hardware: PC → All
Target Milestone: --- → Firefox 3 M10
bug 366562 may be related.
Flags: blocking-firefox3? → blocking-firefox3-
Whiteboard: [wanted-firefox3]
Still happens in Firefox 3 Beta 1
I experience a similar bug in Firefox 3.0b1.

Steps to reproduce:
1.  Configure Firefox to use a proxy which requires authentication
2.  Configure: "When Firefox starts: Show my windows and tabs from last time"
3.  Open some pages in different tabs
4.  Close Firefox
5.  Start Firefox
6.  (Firefox now tries to restore previous session)
7.  "Enter proxy password" dialog appears for *every* page loaded

If you had 80+ tabs open before, 80+ windows appear on the next start and eat up all system resources.
(In reply to comment #43)

I am seeing the same issue as Dmitri. Except I have 3 Firefox windows and about 500 tabs between these 3 windows.

Firefox puts up 500+ password dialogs, or should I say, tries to put up 500+ dialogs. At the same time it is trying to load the pages. Firefox runs out of resources and puts up all sorts of crazy malformed dialogs -- some with blank title/blank text, and two blank buttons, some without title text, etc. It is messy. I say '500+' because for some web pages, Firefox will prompt for the proxy password more than once.

And because the user cannot deal with all these dialogs, some of the tabs never get restored properly, just sit on "Loading..." with no URL or anything. So there is data loss.

This bug is still present in the 21-Dec-07 Minefield and 3.0b2. The bug seems related to this bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=112179

in that there is no facility currently in Firefox to auto-submit the proxy username/password. A clean way of auto-submitting the password would/should bypass all the dialog creation / prompts.
Flags: wanted-firefox3+
Whiteboard: [wanted-firefox3]
Target Milestone: Firefox 3 beta2 → ---
This screenshot shows Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5pre) Gecko/2008032605 Minefield/3.0b5pre multiple authentication request over an HTTP proxy.
This screenshot shows Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5pre) Gecko/2008032605 Minefield/3.0b5pre multiple authentication request over an HTTP proxy.
Problem still exists in Beta 5. So restoring sessions effectively does not work in corporate environments (that probably all do access the web via a proxy).

This bug should block Firefox 3.
Flags: blocking-firefox3- → blocking-firefox3?
Also while starting up, Addons update doesn't prompt for proxy authentication.
Blocking Firefox 3
This will not block the final release of Firefox 3. Any patch will need unit tests in order to be approved.
Flags: blocking-firefox3? → blocking-firefox3-
Blocks: 95397
Target Milestone: --- → Future
Version: unspecified → Trunk
I agree that this bug should block firefox 3. It makes firefox look like a very amateur piece of software for corporate users.
I still have this problem in my Firefox 3 beta 4

Firefox asks for the proxy password as many as my saved tabs
from last time.

would you please fix it for next beta release.
Its a very annoying thing.
I made the mistake of allowing update manager to restart firefox with lots of open windows behind a squid proxy. On restarting you see the screenshot. Killing and restarting firefox goes into the same situation again.
Solution: 

For each open window
    repeat
       close each of the popups
    until there are no more poupus
    close window
end
On the last remaining window open a web page
end firefox
   
I guess, that were at least a 100 clicks on the close button.

Nice exercise, isn't it?
Maybe related to this bug see also https://bugzilla.mozilla.org/show_bug.cgi?id=339804#c23
Not fixed in 3.0RC. Its very annoying. I feel bad inside corporate environment. 
One Proxy login window for every tab is not much fun. I keep many tabs open and have not seen this issue in FF2.x Now with FF 3.0beta/RC this is not working.
Same problem here. It is not annoying but unusable. I have several tabs to open on startup. This is already annoying with FF3 when using a master password and proxy login. Restoring a big session (e.g. due to an extension update) is nearly impossible. I have to enter the master password for all tabs and I have to confirm the proxy login as well for each single tab on startup.
I really would like to use FF3 but as long as this bug is not fixed, I can't.
I have long been plagued with this issue, but am more upset about the multiple prompts per Bug 339804 though.

However, I just found these instructions on enabling NTLM Authentication, but I didn't know that was what our intranet was using, so I didn't know I was looking for this.
http://sivel.net/2007/05/firefox-ntlm-sso/
There's an auto-install vb script, or you can just follow the instructions.
Now, every time I'm prompted for my NT login (we have tons of intranet sites that use it) I copy the http or https address into the comma-separated list in network.automatic-ntlm-auth.trusted-uris 
http://kb.mozillazine.org/Network.automatic-ntlm-auth.trusted-uris

The first entry in my trusted-URI list is the main login auth http;
next time I restarted FF 3, I only had to enter three master passwords instead of the one per tab!
I am using FF3 rc1 here at home and loving it. However, this issue with repeated password prompts is a show stopper at my company. 

I sincerely hope FF3 final version will not be released with this bug still present. 

Cheers ! 
Still it is not fixed in FF3 RC2. For heaven sake never release FF3 with this bug. I get numerous prompts at once.
I am not sure that FF3 shouldn't be released without being fixed. Although this bug is very, very, very annoying it has been there in the browser for as long as I know. So if the FF3 should not be released because of this, then FF2 shouldn't have been released neither. 
But I agree that this should be on the high end of the priority list for designing and scheduling a solution for this most annoying bug (or feature).
I don't get this bug in FF2. Only FF3. Very Very Annoying and a showstopper in my opinion
FF2 has some workaround code which worked for vanilla installations.
After installing some plugins over time this never worked long enough for me
so I had had to drop my profile and sometimes reinstall it to solve this problem from re-ocurring !
I too don't get this bug in FF2... If there's a problem with repeated prompts, that certainly is not when um recover a session.

Why don't you configure a proxy for your machine, start FF3, open 10 tabs at different locations, kill the browser, and recover the session ? Then do the same with FF2 and compare your feelings.

Really, I love FF... but I can't recommend FF3 to certain customers that make use of proxies... They'll have to stay with FF2 for now..  :(

Cheers
Dear FF developers,
Please end up this long bugzilla entry for FF 3 final release.
(I hope & assume some of you read what people write here)
This is a priority for me to fix, but it won't be happening in Firefox 3. Sorry.
Does that mean not in Firefox 3.0.0, or not until Firefox 4?  If this isn't happening until Firefox 4 (years away) then that's just ridiculous.
I totally agree, I don't expect to be fixed in 3.0.1 but I hope it will be fixed in 3.1
I have this multiple auth request problem, it's driving me nuts and descouraging me to use mozilla at office.

I am under squid/proxy, and there is no way to let FF remember proxy auth even if the flag "remember" is sticked.

If this can be of any help, i have a trace taken using FireBug:

REQUEST HEADER:
Server	squid/2.5.STABLE6
Mime-Version	1.0
Date	Thu, 12 Jun 2008 09:06:28 GMT
Content-Type	text/html
Content-Length	1375
Expires	Thu, 12 Jun 2008 09:06:28 GMT
X-Squid-Error	ERR_CACHE_ACCESS_DENIED 0
Proxy-Authenticate	Basic realm="Squid proxy-caching web server"
X-Cache	MISS from hub.engineering.it
Proxy-Connection	close
Request Headers
Host	www.google.it
User-Agent	Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14
Accept	text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language	it-it,it;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding	gzip,deflate
Accept-Charset	ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive	300
Proxy-Connection	keep-alive
Referer	http://www.google.it/ig?hl=it

RESPONSE TEXT:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"

>

<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">

<TITLE>ERROR: Cache Access Denied</TITLE>

<STYLE type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family

:sans-serif}--></STYLE>

</HEAD>

<BODY>

<H1>ERROR</H1>

<H2>Cache Access Denied</H2>

<HR noshade size="1px">

<P>

While trying to retrieve the URL:

<A HREF="http://www.google.it/reader/api/0/tag/list?">http://www.google.it/reader/api/0/tag/list?</A

>

<P>

The following error was encountered:

<UL>

<LI>

<STRONG>

Cache Access Denied.

</STRONG>

</UL>

</P>

<P>Sorry, you are not currently allowed to request:

<PRE>    http://www.google.it/reader/api/0/tag/list?</PRE>

from this cache until you have authenticated yourself.

</P>

<P>

You need to use Netscape version 2.0 or greater, or Microsoft Internet

Explorer 3.0, or an HTTP/1.1 compliant browser for this to work.  Please

contact the <A HREF="mailto:webmaster">cache administrator</a> if you have

difficulties authenticating yourself or 

<A HREF="http://hub.engineering.it/cgi-bin/chpasswd.cgi">change</a> your default password.

</P>

<BR clear="all">

<HR noshade size="1px">

<ADDRESS>

Generated Thu, 12 Jun 2008 09:06:28 GMT by hub.engineering.it (squid/2.5.STABLE6)

</ADDRESS>

</BODY></HTML>

A suggestion:
Disclaimer: I have only a very vague idea of how the login process works.

I think the easiest way is to hold concurrent login attempts until the first one succeeds or fails. 

It's my impression the code currently does not distinguish proxy from other logins. This could be part of the problem.
I've just hit this with a new FF3 install.

I presume that a few minutes after I'd started Firefox3, and before I'd used the authenticating proxy at all (which uses NTLM), it decided to check on the status of my Add-ons.

I was presented with 17 password prompts (all at the same screen offset).  They did have the id/pwd filled in, but having to click through all 17 of them wasn't what I'd expect to do - it makes the software look very unprofessional....

FF2 seems to be OK on this.  Perhaps not perfect, but not this silliness.
Same problem as last comment from gml4410@ggr.co.uk. 
I've added the screenshot "firefox_loading.PNG" to get an idea of the "problem".
I'm adding more information about comment #78 :
I'm using Firefox 3.0 on Windows XP SP2.
Here the user-agent string :
"Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9) Gecko/2008052906 Firefox/3.0"

I'm behind a proxy and theses proxy dialog-boxes appears when Firefox 3 is starting, when it tries to get add-on updates.
2 "bugs" : when starting Firefox 3 with stored tabs, it asks more than 1 time login/pwd for proxy and for master password.

More details :
- I'm using Firefox 3.0, behind an internet proxy (with an automatic configuration file),
- I configured Firefox 3 to store last tabs opens at closing,
- I checked "master password" (i don't know the correct word in english Firefox, i'm french :) to protect all my stored passwords,
- when I stop Firefox, it's with 3 tabs, which need net access and the same login account (google mail + agenda + iGoogle)

And when I re-start Firefox, it asks 3 times a login/pwd for internet access via proxy, and 3 times for principal password.
But if I click ok for the first ask of proxy account (Firefox remember login/pwd) and cancel after, it's ok ; and the same for principal pwd, that I type only the first time, and cancel after.

So I think it's possible to correct this bug, so as to ask only one time this passwords, even if there is more than one tab.

Bye ;-) !
Product: Firefox → Toolkit
I've just seen Firefox 3.0.1 ignoring explicit NTLM proxy credentials.

Firefox is installed on a workstation that is not part of the domain. The proxy server is requesting NTLM negotiation, and will only authenticate accounts on the domain.

Here's the sequence of events:
1) Firefox opens a connection for the page.
1.1) Request is sent with no authentication.
1.2) Proxy responds with 407, reports Negotiate, NTLM and Basic.
1.3) Request is sent with Negotiate (NTLM hello) authentication.
1.4) Proxy responds with 407, including the NTLM challenge.
1.5) Request is sent with Negotiate (NTLM reponse) auth info for the current user.
1.6) Proxy is unable to authenticate the workstation user, send back a 407.
1.7) Firefox sees it can't authenticate and displays a credentials dialog.
2) User inputs domain user credentials.
3) Firefox opens a connection for the page.
3.1) Repeat of steps 1.1 through 1.4.
3.2) Request is sent with Negotiate (NTLM reponse) auth info as entered by user.
3.3) Proxy authenticates successfully, retrieves page.
4) Firefox opens a connection for other resources or the favicon file.
4.1) Repeat of steps 1.1 through 1.4.
4.2) Request is sent with Negotiate (NTLM reponse) auth info for the *current user*.
4.3) Proxy is unable to authenticate the workstation user, send back a 407.
4.4) Firefox sees it can't authenticate and displays a credentials dialog.

Note step 4.2, where the current user's credentials are resent, even though the user has explicitly given different credentials for the proxy server.

If explicit credentials have been given for a resource (either a proxy server or a web server), those credentials should be used for that resource for the rest of the browsing session. 
Me too comment: this sequence of events is consistent with the problems experienced in our office.
I'm on FF2 behind a proxy (squid 1.6 stable) that is configured for using BASIC authentication only, this requires the explicit input of credential on every browser restart.
Accordingly to Firebug, the scenario is similar to what is depicted above,
with the difference that when the proxy server report an ERR_ACCESS_DENIED the user is prompted for a new set of credential, but TEXTBOX ARE EMPTY irregardless if the user have previously checked the "remember credential" checkbox. So, from a perceptive point of view, the handling of this flag is WRONG.

Baybe in my case it's some weird proxy behaviour, in any case FF2 and FF3 i think MUST remember last inserted credential anyway and NOT revert textboxes to BLANK, even for set of credentials that have caused an ERR_ACCESS_DENIED.

Resinserting the same credential, it works, but i'm tired of retype the same string dozen of times!

Obviously, IE7 re-ask for authorization too, but at least the "remember" checkbox works as expected.

When credentials are cached this way, they should be given to the proxy automatically, avoiding a "cascade" of prompts request.

Solution ?

Please add an about:config option that says "network.proxy.alwayscachecredentials" = TRUE

proxy credentials can of course be removed by the user using the password manager, if required, so no security issues there.
This has just started to recur with the 3.0.1 release.  Umpteen, (over 60 counted in last upgrade restart! for only 8 tabs), prompts for THE SAME user credentials for THE SAME proxy.  It is infuriating and it has existed for such a long time that Im considering trying Safari!!  PLEASE all you great Firefox Developers, get this right!!!  for goodness sake all those sub-standard engineers at MS can get this right in IE.  You guys should be better than them!!
This screenshot shows Multiple Master Password request boxes (manually moved as they are all piled up) which actually have no title bar.
After a master password is attached the proxy log-in is shown.

The most annoying cases for such behaviour are:
- when restarting (or restoring) Firefox with many tabs: a master+proxy request box are shown for weach tab.
- when automatically updating firefox/addons.
please fix this guys...

If you have lots of tabs like me, then this is worse then the badest popup spyware in the world...

If I accidently restart my firefox at work, I have to close about 500 popups :(
TO ALL COMMENTATORS

Actually, there is a workaround for this bug that DO WORK form me: AutoAuth extension ==> https://addons.mozilla.org/en-US/firefox/addon/4949

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4
it seems there is a similar issue when you load multiple page which are protected by the same realm / htaccess: you get a login/pass window for each page.

Related bug i found: 230190, 339804, 430287
This also happens if you have multiple images on a page that are protected by the same htaccess realm and the page itself (i.e. a CGI script) doesn't require authentication.  FF displays an auth dialog for each image.
another side note:
passwords are asked first when checking/downloading modules updates.
they are asked again when opening/restoring tabs
Same Problem here in Company with about 300 PCs since Verson 3.x. We have to type in username and password for all Tabs which should be loaded by startup FF. We use Squid as Proxy. Many people switched back to IE because its horrible to use FF since this behavoir! Please give us a solution!

Greetings from Austria,
Manfred
See comment #90 for a workaround :

'Actually, there is a workaround for this bug that DO WORK form me: AutoAuth
extension ==> https://addons.mozilla.org/en-US/firefox/addon/4949'

But finally I agree its a horrible behavior for the browser which is going to Take Back the web.
Hello! Thank you for the link, but it doesnt work. Its the same again. I have downloaded Auto Auth 1.3, Auto Auth is the only Extension i have. I must type the username and password even when i click in FF on "Tools - Add Ons"... I have no idea, sorry...

Best regards
Manfred
Autoauth only works with saved username/passwords.
it's actually working in my FF.
AutoAuth 1.3
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.5) Gecko/2008121622 Ubuntu/8.10 (intrepid) Firefox/3.0.5

If you don't want to save passwords in your company, then I have no idea either.
Maybe we should wait for the next release !

May I ask developers which release they've exactly considered for this one to be fixed ?
We cant save the username and passwords. We are a campus with about 1500 Studies and about 200 Employees / Lectors on about 350 PCs. Every User have a own password on a Samba - LDAP Domain. Is there any chance to disable the "Whats new..." Startpage in FF? This behavoir is a problem for me. Why? I have configured the WIndows userprofile for the studies (they have a nonchangeable mandatory profile on a server). FF starts with only 1 page (the Startpage). After any Update (from FF 3.04 to 3.05 or 3.05 to 3.06 and so on...) an second Startup Tab in FF is now there: The "Whats new - Page". And now i have to type the username and password oftener than 1 time and the studies crying: "FF doesnt work again! Are you to silly to do your job?" (This is exaggerated :o) ). And then i have to REconfigure the userprofile for the studies to start FF with only 1 Tab - the Starttab without the "Whats new..." Tab.
It would be good if there is a easy solution to disable the "Whats new..." Page FOREVER :o)
Greetings
Manfred
Yesterday bug 475053 landed on trunk.

Anyone experiencing this bug is invited to test latest trunk (possibly with a
clean profile) and report results here.
Depends on: 475053
As noted, this was fixed by bug 475053.
Assignee: dolske → nobody
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
(In reply to comment #98)
> It would be good if there is a easy solution to disable the "Whats new..." Page
> FOREVER :o)

Set browser.startup.homepage_override.mstone to "ignore"
(In reply to comment #97)

> May I ask developers which release they've exactly considered for this one to
> be fixed ?

See https://bugzilla.mozilla.org/show_bug.cgi?id=475053#c93
there is still one thing which makes me authenticate twice:

when i start firefox, it first authenticate to check/update add-ons and second when it opens webpage windows.
so not completely fix, but nevertheless, a lot better than before.

test on 3.6b1pre (build 20091003051933)
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: