150641 - RFE:Browser fails to request authentication when called from plug-in

Status: RESOLVED WONTFIX

(Core Graveyard :: Plug-ins, defect, P3)

Description

[metareye]

The WxScope plugin reads a .wxml file for the format of the weather map it will
display. If the data server is different from the server the .wxml file is
served, the browser will fail to request authentication to access the data which
is protected behind a realm, resulting in a map with no data. Once realm is
already accessed directly, the data shows up fine. 
example:
.wxml file sits on http://www.mesonet.org/ and calls a cgi from
http://www.ocs.ou.edu/cgi-bin/. The cgi-bin on www.ocs.ou.edu is realm
protected. When the .wxml file request the cgi, the browser will not request
authentication to access the cgi.

Comment 1

[Greg K.]

metareye, what are the exact steps we should take to reproduce this problem?

Comment 2

[Greg K.]

Also, what Build ID are you reporting this problem against?

Comment 3

[rubydoo123]

adding security and network contacts.

I have not confirmed this issue

Comment 4

[metareye]

I'm using build 2002052918.
To test this issue, 

1) please install the WxScope plugin found at http://sdg.ocs.ou.edu/. WxScope
plugin is used to display weather information on a map. Both Windows and Mac
versions of the plugin exist. The Windows installer may not install the plugin
into the correct directory for mozilla, you'll have to copy the file NPWXM32.DLL
from the plugins folder from ie or netscape 4.

2) go to http://matrix.ocs.ou.edu/ctair.wxml
this is the file that contains the information for displaying the map. To view
the contents of the wxml file, right-click the map and click save. Choose wxml
from the menu. It is a text file. The call to get the data for the map is in
this line: src="http://sulley.ocs.ou.edu/test/latest.mdf". test on sulley is
realm protected. It should ask for a password to enter this realm. Mozilla
doesn't ask for this password, thus the map stays blank.

3) go to http://sulley.ocs.ou.edu/test/latest.mdf directly to be asked for a
password. use...
user: mozilla
password: bugs
once you enter this realm, return to http://matrix.ocs.ou.edu/ctair.wxml. The
map now shows up fine.

Comment 5

[Greg K.]

Does this Mac plug-in work with other OS X browsers like IE?

Comment 6

[metareye]

yes, this plugin works with ie for os x without a hitch.

Comment 7

[rubydoo123]

WxScope is currently not a supported plug-in - setting to future

Comment 8

[Greg K.]

metareye, when I go to save the file as you specify in Step 2, WXML is not one of the options. I 
have to choose "C Header Source File" to save the WXML source.

I'm not sure I understand at what point I'm calling [http://sulley.ocs.ou.edu/test/latest.mdf]. 
Does the "Save" operation do that?

Comment 9

[rubydoo123]

really assigning to future

Comment 10

[metareye]

My instructions on step 2 were incorrect. You have to CTRL-click on the map to
bring up the contectual menu. Choosing save should give you the option "Save at
type: Document WeatherObjects (*.wxml). Saving this file and viewing is only to
show how the data is called. A call to the data in the ctair.wxml file would
look like this:

<data network="Oklahoma Mesonet" src="http://sulley.ocs.ou.edu/test/latest.mdf"
param="TAIR" units="fahr" refresh="300"/>

When the ctair.wxml file is loaded into the browser/plugin, it makes the call to
the data file. The data file on sulley.ocs.ou.edu is realm password protected so
the data is not getting to the plugin. Mozilla doesn't bring up a request for
the user and password. Step 3 above is to bypass this to directly access the
latest.mdf from the browser's url, which will prompt for a password. Afterwards,
you can return to the matrix.ocs.ou.edu/ctair.wxml file and the map will show up
fine.

Comment 11

[Greg K.]

metareye, that is what I was doing; using the contextual menu to Save, WXML is
not one of the options available.

I also forgot to note that when I access the testcase URL I see an "ASSERT:
npmac.app 591 [Shucks]."

Comment 12

[rubydoo123]

added RFE in whiteboard: unsupported plug-in

Comment 13

[Peter Lubczynski]

Does this work with 4.x? If so, can a network capture of both Gecko and 4.x be
attached to this bug? Thanks!

Comment 14

[rubydoo123]

giving to peterl

Comment 15

[Greg K.]

[e-mail], the testcase URL no longer seems to be accessible. Do you
have another? Can you still reproduce this problem using a current nightly build?

Comment 16

[Peter Lubczynski]

Can someone attach a log file to this bug. You can make a log by setting these
environment variables:
NSPR_LOG_MODULES=nsHTTP:5,Plugin:8,PluginNPN:8,PluginNPP:8
NSPR_LOG_FILE=c:\log.txt

Comment 17

[RNicoletto]

Should we CLOSE this 10 years old bug?

URL in comment 4 redirect to http://www.mesonet.org/index.php/weather/weatherscope/ where you can download an application for Win and Mac (WeatherScope 1.8.0) instead of a plugin.

Comment 18

[BMO Automation]

Resolving as wont fix, plugin support deprecated in Firefox 85.