Password Manager: NTLM does not replace basic auth entries

RESOLVED WORKSFORME

Status

()

Core
Networking: HTTP
P2
normal
RESOLVED WORKSFORME
15 years ago
2 years ago

People

(Reporter: Andrew Perry, Assigned: Suresh)

Tracking

({relnote})

Trunk
mozilla1.4final
x86
Windows XP
relnote
Points:
---
Bug Flags:
blocking1.4b -
blocking1.4 -

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [NTLM][ETA: June 12, 2003][necko-backlog])

(Reporter)

Description

15 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030328
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/2003032804

When prompted for a Login/Password using the new NTLM Authentication, checking
the "USE PASSWORD MANAGER TO SAVE THESE VALUES" does not work.  It appears that
the values are in the password manager, but closing Moz -- reopening -- and
going back to the site for NTLM gives an EMPTY Login/Password prompt. 

Reproducible: Always

Steps to Reproduce:
1. Go to website using NTLM Authentication
2. Enter valid Login/Password & CHECK BOX to save info in Password Manager (OK)
3. Close & Reopen Mozilla.
4. Go back to website that used NTLM Auth.  

Actual Results:  
You get a blank login/password prompt

Expected Results:  
You should see a login/password prompt with your information ALREADY in them.
(Reporter)

Comment 1

15 years ago
WORKAROUND:  Clear pre-existing Basic Authtication from Password Manager ... 
Once the saved login/passwords are removed, it saves properly.  
There are only problems with sites that have pre-existing L/P from Basic
Authentication still in password manager

Comment 2

15 years ago
ah, that would explain why i couldn't repro this bug.  hmm... investigating...
Severity: normal → minor
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Target Milestone: --- → mozilla1.4beta

Updated

15 years ago
Whiteboard: [NTLM]

Updated

15 years ago
Keywords: nsbeta1
Priority: -- → P4

Updated

15 years ago
Summary: NTLM Authentication not stored in Password Manager (Basic Auth is) → Password Manager: NTLM does not replace basic auth entries

Updated

15 years ago
Severity: minor → normal
Flags: blocking1.4b?
Priority: P4 → P2

Comment 3

15 years ago
If we can't get this for 1.4, can we disable the saving for NTLM? How close is
this? We want to do 1.4b sooner rather than later. Could a fix be safe enough
for 1.4 final?

Comment 4

15 years ago
adt: nsbeta1-
Keywords: nsbeta1 → nsbeta1-

Updated

15 years ago
Flags: blocking1.4b?
Flags: blocking1.4b-
Flags: blocking1.4?

Comment 5

15 years ago
If a simple patch comes along we'd consider it but we're not going to block on
this. If we don't get a patch then this should be a release note.
Flags: blocking1.4? → blocking1.4-
Keywords: relnote

Comment 6

15 years ago
I don't think we have any design for multiple forms of auth.

Maybe a simple patch could add correctness to the dialog (like turning off the
checkbox if basic auth is pre-existing?)

Updated

15 years ago
Target Milestone: mozilla1.4beta → mozilla1.4final
(Assignee)

Comment 7

15 years ago
Andrew/Darin: is there a testcase to duplicate this bug? thanks!
(Assignee)

Comment 8

15 years ago
Andrew Perry: Can you try to capture HTTP log for this bug and post the log as
an attachment to this bug. You can find instructions how to capture the log at
http://www.mozilla.org/projects/netlib/http/http-debugging.html.

Also, is the website you are testing public? 

Thanks!!

Updated

15 years ago
Whiteboard: [NTLM] → [NTLM][ETA: June 12, 2003]

Comment 9

15 years ago
-> suresh
Assignee: darin → suresh
Status: ASSIGNED → NEW

Comment 10

15 years ago
suresh: you said that password manager stores only hostname, username+password,
and retrieves the credentials via hostname.

Is the goal for 1.4f to add functionality or to hack out existing bad behavior?

Comment 11

15 years ago
This bug also happens with HTTP proxies that require NTLM authentication, and
the workaround of clearing old info doesn't work.  I went into Password Manager
and removed the entry for the proxy.  When I tried to access a web site, I put
in my credentials and checked the box to save the info in Password Manager. 
Then everything works, until I completely exit Mozilla and relaunch it - then I
have to reenter my name and password for the proxy the first time I go to a web
site.
Whiteboard: [NTLM][ETA: June 12, 2003] → [NTLM][ETA: June 12, 2003][necko-backlog]
I strongly believe this works these days.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.