1008855 - Authentication via NTLM fails in TB30 beta, did work in TB29 beta bc. NTLM v1 is disabled by default on 30

Status: RESOLVED WONTFIX

(MailNews Core :: Networking, defect)

Description

[Ian Neal]

Just updated to TB 30 beta 1 (application build ID 20140509030228) and authentication to my exchange IMAP account is now being refused.
Prior to the update I was using TB 29 beta which worked fine.

STR
1/ Start with TB 29 beta and an exchange IMAP account authenticating via NTLM
2/ Confirm you can access successfully authenticate via NTLM
3/ Allow TB to upgrade to TB 30 beta
4/ Try to authenticate via NTLM

Expected Result
1/ Authentication works and you can read your emails

Actual Result
1/ Prompted to retry, enter new password or cancel
2/ Cannot read email unless I change authentication method to "Normal Password"

Comment 1

[Magnus Melin [:mkmelin]]

Hmm, http://www.janbambas.cz/ntlm-v1-and-firefox/ - NTLM v1 is disabled by default on 30. 

So does setting network.negotiate-auth.allow-insecure-ntlm-v1 true work?

Comment 2

[Ian Neal]

(In reply to Magnus Melin from comment #1)
> Hmm, http://www.janbambas.cz/ntlm-v1-and-firefox/ - NTLM v1 is disabled by
> default on 30. 
> 
> So does setting network.negotiate-auth.allow-insecure-ntlm-v1 true work?

Yes, indeed it does. As far as I can see the only two authentication methods that work with Exchange via IMAP are "Normal Password" and "NTLM". I do use SSL/TLS but I didn't think that securely transmits a normal password.

Comment 3

[Magnus Melin [:mkmelin]]

I suppose we should just relnote this for 31...

Comment 5

[Wayne Mery (:wsmwk)]

Time to close?

Comment 6

[Kai Engert [:KaiE:]]

IIUC this is a complaint that TB default doesn't support NTML v1 auth by default. But this is intentional. So closing as wontfix.