1577793 - Firefox not loading page if site is password protected

Status: RESOLVED WORKSFORME

(Core :: Networking, defect, P5)

Description

[[e-mail]]

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.110 Safari/537.36 Vivaldi/2.7.1628.30

Steps to reproduce:

Install Firefox
Go to site not loading

Actual results:

Firefox loads page forever. Closing Firefox pops up a window to enter username and password.

Expected results:

Firefox loading page, noticing it is password protected, popup window to enter password.

Comment 1

[[e-mail]]

I've found this with some sites password protecting everything. Pages from these sites just start loading, then seem to stall. I've looked for windows popped up beyond the main one, but could not find any. As soon as I close -- yes I have to close Firefoxs main window -- the awaited authentication window pop in an I can successfully authenticate to these sites. But: since I had to close firefox main window firefox terminates and all login information is lost. Next time I start firefox and opening this site same happens again: to have the password dialog pop up I have to close down firefox.

Seen with firefox versions:

• 68
• 69
• 70 (trunk, nightly)

Since these sites are internal ones no link to test is available.

Comment 2

[[e-mail]]

Seen this on OS:

• Ubuntu 19.04, 18.04
• Debian 10
• Gentoo
• FreeBSD 12
• Windows 10, Windows 7, Windows Server 2016

Comment 3

[Timea Cernea [:tbabos][inactive]]

Hi,

Is this also reproducible with Chrome? Wondering if it's not actually a site issue, but can't test that out without the site. I understand that it is internal and can't be disclosed.

You could also try to open the sites with a clean profile or safe mode. Here are some helpful links about how to do that:
Safe mode: https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode.
New Clean Profile: https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles

Please check if this happens with Chrome too and also try out a new profile and safe mode.
Looking forward to your results!

Comment 4

[[e-mail]]

While experimenting I found: if I just wait some seconds, then blindley enter "username, tab, password, tab, tab" I can login! The dialog is open somewhere. Since password dialogs are tab local in focus as soon as the tab is active, the dialog must be open somewhere I can't see it. I've tried to select this dialog, but did not have any success: it is not listed within the window list.

This behavior is only seen, if gssapi is used and a kerberos ticket is available, but not valid for this account. Turning off gssapi-authentication makes the dialog pop up and I am able to enter User-ID and Password.

With keepasshttp-plugin installed I can go to the keepass-icon, click on it and select some user-id to be entered. This enters user-id and password and I am logged in. If there is only one user-id for this url this does not work: for some reason the dialog seems filled, but never shown in this case, and never closed by "clicking" OK to login with given credentials.

It is the same again: disabling gssapi makes it behave as expected: dialog shown, selecting user-id, autoentered password and I can click on "OK" to login. gssapi enabled – it does not work any more as expected.

Behaviour is nearly the same with Firefox, Chrome, Vivaldi, Opera. With slightly differences between Windows and Linux based on different ordering of input fields and buttons.

Comment 5

[[e-mail]]

To reproduce I would need a site protected by User-ID/Password allowing for gssapi authentication to reproduce available freely over the internet.

Comment 6

[Timea Cernea [:tbabos][inactive]]

Wondering if this is not the same as bug 378208
Moving this over to it's component for now.

Comment 7

[Wayne Mery (:wsmwk)]

tps, do you still encounter this issue? And if so, can you please provide the information below?

(In reply to [e-mail] from comment #5)

To reproduce I would need a site protected by User-ID/Password allowing for gssapi authentication to reproduce available freely over the internet.

Comment 8

[[e-mail]]

This is a problem with some plugins intercepting password input to send it to password managers. Under some circumstances this leads to no dialog displayed at all. Blindly filling the user/password by selecting the appropriate entry from the password managers drop-down will do what is expected: fill the never drawn dialog and login.

Comment 9

[[e-mail]]

(In reply to Timea Cernea [:tbabos] from comment #6)

Wondering if this is not the same as bug 378208
Moving this over to it's component for now.

Yes, that is related. GSSAPI auth will fail to draw a dialog showing user/password entries under some circumstances. And since there is no way to input username and password firefox/thunderbird will just hang waiting for input you'll never be able to give.

Comment 10

[[e-mail]]

Seems to work now.