If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

proxy authentication: Firefox should give up trying to re-auth if another auth mechanism already chosen

UNCONFIRMED
Unassigned

Status

()

Core
Networking: HTTP
P3
normal
UNCONFIRMED
3 years ago
a month ago

People

(Reporter: Stanislav GE, Unassigned)

Tracking

31 Branch
x86_64
Linux
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [necko-backlog])

(Reporter)

Description

3 years ago
User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:34.0) Gecko/20100101 Firefox/34.0
Build ID: 20141127111021

Steps to reproduce:

- Windows 7 joined to Active Directory
- User is signed in with local Windows account, not a domain one
- Firefox 31.3.0esr is configured to use proxy which supports both basic and negotiation authentication

1. I start Firefox
2. Proxy asks for login/password
3. User provide working credentials for proxy and start browsing


Actual results:

Proxy access log are filled with:
- deny access to http://some.web.site
- allow access to http://some.web.site
- deny access to http://another.web.site
- allow access to http://another.web.site

Proxy system log are filled with:
- WARNING: try negotiation and failed
- auth with basic
- WARNING: try negotiation and failed
- auth with basic
and so on


Expected results:

Proxy access log should have with:
- deny access to http://some.web.site
- allow access to http://some.web.site
- allow access to http://another.web.site

Proxy system log are filled with:
- WARNING: try negotiation and failed
- auth with basic
- auth with basic
- auth with basic
- auth with basic
and so on

I.e. Firefox tries to use negotiation protocol and failed. So it falls back to basic authentication and Firefox tries to use negotiation again on every new connection.

Firefox should not try to re-auth with negotiation (as it is already failed and fall back scheme found to be working) and should use only basic auth untill browser restarts or proxy settings are changed.
Whiteboard: [necko-backlog]
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: -- → P1
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: P1 → P3
You need to log in before you can comment on or make changes to this bug.