1041465 - Firefox ignoring supplied crendials in authentication dialog box, and sending credentials of looged-in user.

Status: RESOLVED DUPLICATE of bug 650091

(Firefox :: Untriaged, defect)

Description

[Jurie]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:30.0) Gecko/20100101 Firefox/30.0 (Beta/Release)
Build ID: 20140608211457

Steps to reproduce:

1. Use on a PC that is not on the AD Domain.
2. Set firefox proxy settings to Squid Proxy using NTLM Auth. 
3. Try to browse, Authentication Dialog pops up, but does not accept domain credentials. Squid logs confirm that the details of the signed-in windows user is being sent to the proxy, instead of the supplied credentials.




Actual results:

We are using a Squid Proxy with NTLM Authentication. When the machine you are browsing from is on the domain, everything works as expected. User gets authenticated automatically, with no prompt for credentials.

However, when the machine is not domain-joined, firefox prompts for password - which is fine, but instead of sending the supplied credentials you type in, it ignores what you type and sends the credentials of the windows user signed in to the computer, which results in never being able to authenticate.

I have noticed that setting network.auth.force-generic-ntlm to TRUE in about:config fixes this, but as we have over 200 users, going to each machine to do this is a pain.




Expected results:

Credentials supplied in the authentication dialog box should have been sent to the proxy, and session should then be authenticated.

Why is this setting "network.auth.force-generic-ntlm" FALSE by default? From a quick google search there have been complaints about it since Firefox 3.6.1!

Comment 2

[David Woodhouse]

Is this really a duplicate of an old bug? This is *new* in Firefox 31; Firefox 30 is behaving correctly.

Comment 3

[:Gijs (he/him)]

(In reply to David Woodhouse from comment #2)
> Is this really a duplicate of an old bug? This is *new* in Firefox 31;
> Firefox 30 is behaving correctly.

Is it? That's not what comment #0 says - it was filed against Firefox 30, and says, quote:

(In reply to Jurie from comment #0)
> From a quick google search there have been complaints about it since Firefox 3.6.1!


which doesn't seem new...

Comment 4

[David Woodhouse]

Apologies; I meant to make that comment against my own bug 1042316.

Comment 5

[Jurie]

The auth process repeats et infinitum, the user never gets authenticated since Firefox keeps sending the credentials the user is logged in as, and not the ones supplied via the authentication dialog box. 

So, any machine not joined to the domain cannot authenticate on the proxy and therefore gets no internet access.