212015 - Unstable password management with NTLM authentication

Status: RESOLVED FIXED

(Core :: Networking: HTTP, defect)

Description

[Ong Kian Soon]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624

Using Microsoft ISA Server SP1 with Feature Pack 1, NTLM authentication enabled.

With proxy set to the ISA Server, Mozilla save the user/password for further
authentication. However, sometime the user/password will be cleared and refuse
to save the information no matter how many times I asked it to save, and the
prompt keeps appearing.

After some check, found that the behavious exists whenever visit to
sg.hardwarezone.com. A check on the user/password file show that any previous
saved data are all wipe away, including login information for proxy, mail, and
news server.

No idea what happen, so I disabled the <remember passwords>. This time, the
authetication dialog box (without the option to save password) keeps appearing
everytime authentication is require.

The authentication prompt can be stop completely by removing the proxy settings
and relies on the Firewall Client. In this way, no NTLM authentication will be
performed with Mozilla, but I will have to switch back to MSIE to access
infomation that needs to be authenticate by ISA Server.


Reproducible: Always

Steps to Reproduce:
1. Ensure proxy set to ISA server. Visit any site which ISA require NTLM
authentication.
2. When prompted, enter user/password and save them.
3. Restart the browser and try to access the site again to ensure user/password
is saved.
4. Visit http://sg.hardwarezone.com.

Actual Results:  
In my case, the authentication prompt appear again, with both field empty. Enter
user/password, require to remember them, then proceed. Mozilla keeps prompting
for every resources that has to be authenticate until the whole page is loaded.


Expected Results:  
Stored the user/password.

Comment 1

[Darin Fisher]

reporter: thank you for the detailed bug report.  can you please provide a HTTP
log in addition by following the steps documented here:

  http://www.mozilla.org/projects/netlib/http/http-debugging.html

thanks!!

Comment 2

[Moritz Moeller-Herrmann]

I can confirm this. I am suffering from the same bug. After a while of browsing,
I get two NTLM password prompts for my NTLM proxy here. Even though I told
firefox-1.0PR1 to remeber the password, it does not always remember it. Also
after filling in the password, I am asked once more for the exact same URI and
only then can I browse for a while, until the prompt strikes again...

Comment 3

[Darin Fisher]

This may be a duplicate of bug 256949.

Comment 4

[Darin Fisher]

this should be fixed now.  see bug 256949.